580.306491] protocol 88fb is buggy, dev hsr_slave_0
[ 2580.311619] protocol 88fb is buggy, dev hsr_slave_1
[ 2580.946497] protocol 88fb is buggy, dev hsr_slave_0
[ 2580.951618] protocol 88fb is buggy, dev hsr_slave_1
23:05:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5427, &(0x7f0000000080))

23:05:05 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026304000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:05:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x80000)
ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000140))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r4}, 0x10)

23:05:05 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
r1 = gettid()
prlimit64(r1, 0xe, &(0x7f0000000000)={0x10001, 0x8}, &(0x7f0000000100))
epoll_create1(0x0)
unshare(0x400)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000180))
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:05 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1fac8f21, 0x400)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x1000, 0x8203, 0x1, 0xffffffffffff39fc, <r1=>0x0}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e20, 0x4, @rand_addr="baefb92fb77e88d25f0102a6b8dd9010"}}, 0x5, 0x9011, 0xfffffffffffff17d, 0x4, 0x9}, &(0x7f00000001c0)=0x98)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x8)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:05 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000680)=0xfff, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR], 0x8)

[ 2583.029347] f2fs_msg: 6 callbacks suppressed
[ 2583.029361] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2583.062350] Bluetooth: hci0: sending frame failed (-49)
23:05:05 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x7, 0x8, 0x2, 0x101}, 0x6)
unshare(0x400)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000240)={0x2, 0x40, 0xd8, 'queue1\x00', 0x10000})
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000180)={0x5})
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$RTC_PIE_ON(r2, 0x7005)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000000)={0x5, 0xdf3ddf6bc48e17d7, 0x3, 0x2, 'syz1\x00', 0x9})

[ 2583.080507] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2583.091891] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (287490, 14)
[ 2583.113857] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2583.122287] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:05:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:05:05 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f00000000c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0x0, 0x0)

[ 2583.135855] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2583.143837] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (287490, 14)
[ 2583.157686] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:05:05 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r3=>0x0, &(0x7f0000000080)=0x4)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r3, 0x40}, &(0x7f00000001c0)=0x8)
sendto$inet(r2, &(0x7f0000000480)="564603a6e47e6a26d13ae138549a875f4d90a38339ae97b05c61173405009e93beffe70a2aefd495c7c758181183c860d19a886d57e5a322e77c5068ab40e554d3079d0f454764e52096a968f1c439937ed88a0eed36d299d786319502fe646da545a63e10762a54669a34756e50d1fa944427af3fc209e4f1c55bc264a5556edebed9b875840f", 0x87, 0x40, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0xcfd4, 0x9, 0xe1, 0x5, 0x0, 0x3, 0x3e, 0xffffffff80000001, 0xc, 0x40, 0x9e, 0x3, 0x2, 0x38, 0x1, 0x7f, 0x4, 0x9}, [{0x6474e553, 0x1, 0x6, 0x4, 0x5, 0xffffffff00000000, 0x8, 0x3f}], "ca64dff5d30c61751b1c972b484551f185b2aa06acf6122b53dc254abe33907c5cd6eebdf243958d8118932d5eccdd582ea452f8026f2e45f792aa21f33a1e74afe76fa58d610ea4fcb4ba6523b5c8b932e91adfd4b82c96d74fec73d33b2922535e7d4f67f2c24f70fe9fc7eb072326be3def448771f39b02998a0e81533357f57573132e906d5db164a8aee025e614e353af0091d49b8d43b7def9f963d2a45c76021ddcfaca11605b2df7d28e7bd6d799ce0a20aafd2712e917ea2871003c6fffe8ee5d9e97806cae65fa303d3d70154a0e1b583e7550f475515bd150b48b7d", [[], [], [], [], [], [], [], [], [], []]}, 0xb59)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2583.225053] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2583.261896] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:05:05 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000)
ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000100))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000100))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2583.365667] binder: 4315:4316 transaction failed 29189/-22, size 0-8 line 2855
[ 2583.629217] binder: undelivered TRANSACTION_ERROR: 29189
[ 2585.106418] Bluetooth: hci0: command 0x1003 tx timeout
[ 2585.106459] net_ratelimit: 22 callbacks suppressed
[ 2585.106466] protocol 88fb is buggy, dev hsr_slave_0
[ 2585.111843] Bluetooth: hci0: sending frame failed (-49)
[ 2585.116765] protocol 88fb is buggy, dev hsr_slave_1
[ 2585.746445] protocol 88fb is buggy, dev hsr_slave_0
[ 2585.751585] protocol 88fb is buggy, dev hsr_slave_1
[ 2586.226488] protocol 88fb is buggy, dev hsr_slave_0
[ 2586.231567] protocol 88fb is buggy, dev hsr_slave_1
[ 2586.236739] protocol 88fb is buggy, dev hsr_slave_0
[ 2586.241805] protocol 88fb is buggy, dev hsr_slave_1
[ 2586.246978] protocol 88fb is buggy, dev hsr_slave_0
[ 2586.252108] protocol 88fb is buggy, dev hsr_slave_1
[ 2587.186528] Bluetooth: hci0: command 0x1001 tx timeout
[ 2587.191928] Bluetooth: hci0: sending frame failed (-49)
[ 2589.266558] Bluetooth: hci0: command 0x1009 tx timeout
[ 2590.386538] net_ratelimit: 18 callbacks suppressed
[ 2590.391538] protocol 88fb is buggy, dev hsr_slave_0
[ 2590.396603] protocol 88fb is buggy, dev hsr_slave_1
[ 2590.401691] protocol 88fb is buggy, dev hsr_slave_0
[ 2590.406744] protocol 88fb is buggy, dev hsr_slave_1
[ 2590.411854] protocol 88fb is buggy, dev hsr_slave_0
[ 2590.416898] protocol 88fb is buggy, dev hsr_slave_1
[ 2590.706483] protocol 88fb is buggy, dev hsr_slave_0
[ 2590.711634] protocol 88fb is buggy, dev hsr_slave_1
[ 2591.346464] protocol 88fb is buggy, dev hsr_slave_0
[ 2591.351626] protocol 88fb is buggy, dev hsr_slave_1
23:05:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5428, &(0x7f0000000080))

23:05:15 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026404000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:05:15 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000180)=""/129)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:15 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x6ca5de90, 0x40040)
write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:var_run_t:s0\x00', 0x1f)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x5000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
modify_ldt$read(0x0, &(0x7f0000000040)=""/117, 0x75)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:05:15 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1a001, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000000000000000000000000000000000000000abbe7b022188d276e652e6fec63f53cc7caaa444aa90d0f65200"/61])
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x7, @output={0x0, 0x1, {0x8, 0xd54}, 0x1, 0x1000}})
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000100))

[ 2593.254236] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2593.260870] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2593.269314] QAT: Invalid ioctl
[ 2593.284443] f2fs_msg: 6 callbacks suppressed
[ 2593.284459] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2593.310006] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2593.325340] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (287746, 14)
[ 2593.347501] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:05:16 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x10000)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2593.355399] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2593.378984] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2593.390588] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (287746, 14)
23:05:16 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="ff5149080d149037df7c07a8d39e96f64aa3dd8c229b22797a1f6ce9d6ca0985edd1dceff95b34accc623bc61f61c4932aa44e6588f7a1111ff85c106f1149f91d9e3f1ce20ef67f6471adf185641f6ed118a60194e965378f7dbaab5eb782f589d7a4eceac54847417a529b99d0d9b1ccc4864a6a7c59d51dbbcdd24e7102be34f634399a6546e0d59f89feff8f1d6036c7648672116243", 0x98}, {&(0x7f0000000100)="0520b8075c2d00191a21e25e11b775b5e59398b41bacc921b402b206cab54ad7080a99c5fd53c24d62359e626b27e23acca8efc2116587bb79a4652f18f07b37855beb7a04e6dc1a94ea3e21b0868df50330f66163993047f23b690f95faaa3dd1343f2c6bd86862ad762eccfe123d1828995eba6e6c435409899d7d95749c7fe2a7faeb887c2c09f53cef698f8208826ba1e90e4e2b98c0f78e", 0x9a}, {&(0x7f00000001c0)="0f1182d618678f0d4fa9bc74f0b4e503d707062569a10388d259d40dd4b2f5f453635c3a10a0a3ea7ddc7482495027b6ed96d67af30ed36f6863ad6cda989a3bd6e746c9ba84aec27400403d349579af88a40e34e7b6f89015b7970957f304", 0x5f}, {&(0x7f00000002c0)="318b397d8db3e9206286d20f3175ff92bc5ef77fd77fac33a6e3be085a1d723e3ac72daa12f87057c9c214eb07f21abfc185f07b1f7f7a33cc9fd62bd18e0f05c3b96baf2b5f", 0x46}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000340)="7865cd9fa05427", 0x7}], 0x6)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:05:16 executing program 0:
fanotify_init(0x0, 0x0)
r0 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000)
getsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000080), &(0x7f0000000180)=0x4)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={<r2=>0x0, 0x2d, "4d4acb5e66e9832542e0e5debcd6bb1e929c27fd5a95b051438f2fa4212562aec2719824a4e445e143ae483dcc"}, &(0x7f0000000240)=0x35)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r2, 0x7}, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2593.420643] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:05:16 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@default, @remote, 0x6, [@remote, @null, @default, @default, @bcast, @default, @bcast, @rose]})

[ 2593.530936] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2593.550992] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:05:16 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x100, 0x7fff, 0x8, 0x3, 0x18, 0xffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:16 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000900)={0x9, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
r1 = accept(r0, &(0x7f0000000240)=@un=@abs, &(0x7f0000000100)=0x80)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000002c0)={'gretap0\x00', 0x1000, 0x8})
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000180)=""/139, &(0x7f0000000000)=0x8b)

[ 2595.266451] Bluetooth: hci0: command 0x1003 tx timeout
[ 2595.271898] Bluetooth: hci0: sending frame failed (-49)
[ 2595.506472] net_ratelimit: 22 callbacks suppressed
[ 2595.506481] protocol 88fb is buggy, dev hsr_slave_0
[ 2595.516604] protocol 88fb is buggy, dev hsr_slave_1
[ 2596.146459] protocol 88fb is buggy, dev hsr_slave_0
[ 2596.151564] protocol 88fb is buggy, dev hsr_slave_1
[ 2596.626459] protocol 88fb is buggy, dev hsr_slave_0
[ 2596.631593] protocol 88fb is buggy, dev hsr_slave_1
[ 2596.636708] protocol 88fb is buggy, dev hsr_slave_0
[ 2596.641784] protocol 88fb is buggy, dev hsr_slave_1
[ 2596.646920] protocol 88fb is buggy, dev hsr_slave_0
[ 2596.651991] protocol 88fb is buggy, dev hsr_slave_1
[ 2597.346497] Bluetooth: hci0: command 0x1001 tx timeout
[ 2597.352723] Bluetooth: hci0: sending frame failed (-49)
[ 2599.426549] Bluetooth: hci0: command 0x1009 tx timeout
[ 2600.786447] net_ratelimit: 18 callbacks suppressed
[ 2600.791431] protocol 88fb is buggy, dev hsr_slave_0
[ 2600.796477] protocol 88fb is buggy, dev hsr_slave_1
[ 2600.801539] protocol 88fb is buggy, dev hsr_slave_0
[ 2600.806570] protocol 88fb is buggy, dev hsr_slave_1
[ 2600.811696] protocol 88fb is buggy, dev hsr_slave_0
[ 2600.816742] protocol 88fb is buggy, dev hsr_slave_1
[ 2601.106431] protocol 88fb is buggy, dev hsr_slave_0
[ 2601.111564] protocol 88fb is buggy, dev hsr_slave_1
[ 2601.746562] protocol 88fb is buggy, dev hsr_slave_0
[ 2601.751638] protocol 88fb is buggy, dev hsr_slave_1
23:05:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:05:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:05:26 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026504000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:05:26 executing program 2:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000002c0), 0x12)

23:05:26 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgid(0x0)
ptrace(0x4207, r0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:26 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x4, @dev={[], 0x21}, 'team_slave_0\x00'}}, 0x1e)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x3)

[ 2603.495075] f2fs_msg: 6 callbacks suppressed
[ 2603.495087] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2603.542186] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2603.554973] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (288002, 14)
[ 2603.565240] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2603.565361] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:05:26 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r1=>0x0, &(0x7f0000000100)=0x4)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x8}, &(0x7f00000001c0)=0x8)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000240)={0x7fffffff}, 0x4)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x10000, 0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2603.586321] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2603.594396] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:05:26 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2b2100, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x900000, 0x100)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x1, 0x0, 0x80000001, 0xffffffffffff0000, 0x6, 0x4})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000240)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0x5fff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080))

[ 2603.637268] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (288002, 14)
[ 2603.660383] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:05:26 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200000, 0x82100)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, r1, 0x500, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcd}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8cb}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1c2, @dev={0xfe, 0x80, [], 0x27}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40005}, 0x880)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2603.749536] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2603.769482] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:05:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="000000000000000000000800006bcf000000"], 0x12)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
syz_genetlink_get_family_id$tipc(0x0)

23:05:26 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026604000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2605.586466] Bluetooth: hci0: command 0x1003 tx timeout
[ 2605.591874] Bluetooth: hci0: sending frame failed (-49)
[ 2605.906470] net_ratelimit: 22 callbacks suppressed
[ 2605.906479] protocol 88fb is buggy, dev hsr_slave_0
[ 2605.916608] protocol 88fb is buggy, dev hsr_slave_1
[ 2606.386512] Bluetooth: hci1: command 0x1003 tx timeout
[ 2606.391933] Bluetooth: hci1: sending frame failed (-49)
[ 2606.546464] protocol 88fb is buggy, dev hsr_slave_0
[ 2606.551616] protocol 88fb is buggy, dev hsr_slave_1
[ 2607.026516] protocol 88fb is buggy, dev hsr_slave_0
[ 2607.031660] protocol 88fb is buggy, dev hsr_slave_1
[ 2607.036841] protocol 88fb is buggy, dev hsr_slave_0
[ 2607.041916] protocol 88fb is buggy, dev hsr_slave_1
[ 2607.047044] protocol 88fb is buggy, dev hsr_slave_0
[ 2607.052110] protocol 88fb is buggy, dev hsr_slave_1
[ 2607.666451] Bluetooth: hci0: command 0x1001 tx timeout
[ 2607.671863] Bluetooth: hci0: sending frame failed (-49)
[ 2608.466487] Bluetooth: hci1: command 0x1001 tx timeout
[ 2608.471893] Bluetooth: hci1: sending frame failed (-49)
[ 2609.746451] Bluetooth: hci0: command 0x1009 tx timeout
[ 2610.546554] Bluetooth: hci1: command 0x1009 tx timeout
[ 2611.186459] net_ratelimit: 18 callbacks suppressed
[ 2611.186465] protocol 88fb is buggy, dev hsr_slave_0
[ 2611.196532] protocol 88fb is buggy, dev hsr_slave_1
[ 2611.201631] protocol 88fb is buggy, dev hsr_slave_0
[ 2611.206735] protocol 88fb is buggy, dev hsr_slave_1
[ 2611.211871] protocol 88fb is buggy, dev hsr_slave_0
[ 2611.216987] protocol 88fb is buggy, dev hsr_slave_1
[ 2611.506447] protocol 88fb is buggy, dev hsr_slave_0
[ 2611.511580] protocol 88fb is buggy, dev hsr_slave_1
[ 2612.146482] protocol 88fb is buggy, dev hsr_slave_0
[ 2612.151617] protocol 88fb is buggy, dev hsr_slave_1
23:05:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x8000)
ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000002700)=""/4096)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x3)

23:05:37 executing program 0:
r0 = fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$SIOCRSACCEPT(r0, 0x89e3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5441, &(0x7f0000000080))

23:05:37 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026704000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:05:37 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@default})

23:05:37 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
r0 = epoll_create1(0x0)
unshare(0x400)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x9, 0x6, 0x100000000, 0x2, 0x7}, 0x14)
pselect6(0x372, &(0x7f0000000000)={0x1ff, 0x8, 0x0, 0x3, 0x40, 0x0, 0x4, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0)

[ 2615.005282] f2fs_msg: 22 callbacks suppressed
[ 2615.005291] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2615.042813] Bluetooth: hci0: Frame reassembly failed (-84)
23:05:37 executing program 2:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x100000000000021f}}], 0x400000000000098, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

[ 2615.044709] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2615.055098] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2615.077064] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (288514, 14)
[ 2615.094649] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2615.102895] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2615.110463] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2615.118857] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (288514, 14)
[ 2615.126920] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:05:37 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x4, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0)=0x400000001, 0xfffffffffffffe52)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)

[ 2615.210161] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2615.226638] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:05:37 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x4000000400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
timer_create(0x4, &(0x7f0000000080)={0x0, 0x22, 0x2, @thr={&(0x7f0000000100)="f7909d8b27913fc3c1eb3e4b1be82d02ad5697f432f4f11e8d98a29eb7f91c90ce45edf08fa0f4801ac1a50c742a19bcf13b95254ae55e981fec57a2ee97daecd0ab2c98c09480a1da65e49ee0a09b6302f21dd31ecf923b2aeca8ed7bf13eedd60d74ae921bbe6c604dfcea58d4e4576e975fdbbb690edc204a426a234d281cc965e6123ed2979c3e060d42dbf91c7277c8e7a6028e4ccf35222905243787768e460521e4ac01fcb1aad07728872afcbd83f7c94e41d86ab174a2f1bfd44d9c216b77a57b006f1d1d0653e451e1e6a9fb872c2a8646841c9ee7b0dda81f9760b201ddf9d2", &(0x7f00000002c0)="3f477e5a0eb6bb28870e67a1395c80d2a0fc17fa77285a2577d6564634bc22c2d3a1c0b485f7c0f6718109a8179426b0cbcd10a0bef3c2ff58c518061c7d9ed227d4673b391e05667738cf112d565c92950721f2037ba27f8991dce94c24b023aa2e43e14c2eec53cd0ace98fae1204d205c922d8495cbff035430f851afaabdb8d19ad8e25adf51ff8ddabf1f45607e6f4ba01b39e536d7f4828e1dae1965fc056c29992e6b6e70b179564e622d5ffe66813935d4107c62fc693a7a34d181b54fee14623081a96c295287b0f8d65232421c6f9cd1586ab5d216f98c8f245114e1098c6719354594e70293"}}, &(0x7f0000000200)=<r2=>0x0)
timer_getoverrun(r2)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40000, 0x0)
ioctl$KVM_SMI(r4, 0xaeb7)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat(r1, &(0x7f00000003c0)='./file0\x00', 0x123001, 0x100)
ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:05:37 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026804000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:05:37 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:05:37 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x24200, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:38 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026904000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:05:38 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000001c0)={<r1=>0x0, 0x100000001}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e21, 0x3, @local, 0xb6}}}, 0x84)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x84, @loopback, 0x4e23, 0x2, 'wrr\x00', 0x2f, 0x1800000000000000, 0x28}, 0x2c)
epoll_create1(0x0)
openat(r2, &(0x7f0000000000)='./file0\x00', 0x101000, 0x20)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2616.306452] net_ratelimit: 22 callbacks suppressed
[ 2616.306459] protocol 88fb is buggy, dev hsr_slave_0
[ 2616.316561] protocol 88fb is buggy, dev hsr_slave_1
[ 2616.946454] protocol 88fb is buggy, dev hsr_slave_0
[ 2616.951552] protocol 88fb is buggy, dev hsr_slave_1
[ 2617.106439] Bluetooth: hci0: command 0x1003 tx timeout
[ 2617.111827] Bluetooth: hci0: sending frame failed (-49)
[ 2617.436518] protocol 88fb is buggy, dev hsr_slave_0
[ 2617.441635] protocol 88fb is buggy, dev hsr_slave_1
[ 2617.446798] protocol 88fb is buggy, dev hsr_slave_0
[ 2617.451872] protocol 88fb is buggy, dev hsr_slave_1
[ 2617.457081] protocol 88fb is buggy, dev hsr_slave_0
[ 2617.462221] protocol 88fb is buggy, dev hsr_slave_1
[ 2619.186436] Bluetooth: hci0: command 0x1001 tx timeout
[ 2619.191892] Bluetooth: hci0: sending frame failed (-49)
[ 2621.266459] Bluetooth: hci0: command 0x1009 tx timeout
[ 2621.586418] net_ratelimit: 18 callbacks suppressed
[ 2621.586424] protocol 88fb is buggy, dev hsr_slave_0
[ 2621.596458] protocol 88fb is buggy, dev hsr_slave_1
[ 2621.601579] protocol 88fb is buggy, dev hsr_slave_0
[ 2621.606675] protocol 88fb is buggy, dev hsr_slave_1
[ 2621.611763] protocol 88fb is buggy, dev hsr_slave_0
[ 2621.616887] protocol 88fb is buggy, dev hsr_slave_1
[ 2621.906452] protocol 88fb is buggy, dev hsr_slave_0
[ 2621.911531] protocol 88fb is buggy, dev hsr_slave_1
[ 2622.546430] protocol 88fb is buggy, dev hsr_slave_0
[ 2622.551491] protocol 88fb is buggy, dev hsr_slave_1
23:05:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5450, &(0x7f0000000080))

23:05:47 executing program 2:
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x80, 0x10}, 0xc)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x200, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4)
r2 = dup2(r0, r1)
sendmmsg(r2, &(0x7f0000003f40)=[{{&(0x7f0000003d80)=@isdn={0x22, 0x1, 0xaf43, 0x800, 0x1}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000000300)="25e6530ae03238c33a8f9a08cbe898cc8497d589d8a78ed76b081e3235070305e3af813c4e7831485733657c8b609a3ba1bbbf5776925c3f39886f67aa3ac01a3b1f37529baea1b6d5c8b6c473ea17248bde1f61f8ce8caaddf0015c468060e49665c628b0e9333d052b8cb65508757abf96c5d6c956ea5cdb91b766259b8cb453778ea08ee1072df95371999fc39b69b431012436502142fbbc69437528cb18b15fac946da8a8397ae97c7836834e2e7f1b6276ba4555f259", 0xb9}], 0x1}, 0x5}], 0x1, 0x40000)
readahead(r2, 0x3, 0x0)
futex(0x0, 0x8c, 0x2, 0x0, &(0x7f0000048000), 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000004040)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/152, 0x205}], 0x1, 0x20)
ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000100)=""/54)

23:05:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)={<r3=>0x0})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000380)={r3})
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x24, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2)
getpeername$netrom(r5, &(0x7f00000001c0)={{0x3, @rose}, [@remote, @default, @remote, @rose, @default, @bcast, @remote, @netrom]}, &(0x7f00000002c0)=0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {<r7=>0x0}]})
ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000100)={r7, 0x21})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x40000, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

23:05:47 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x80100, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={<r3=>0x0, 0x790e}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0xf86}, &(0x7f0000000280)=0x8)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x10000000})
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x80000)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@loopback, @dev, @local}, &(0x7f0000000100)=0xc)

23:05:47 executing program 0:
fanotify_init(0x400000000000, 0x1002)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @pix_mp={0x9f, 0x2, 0x47524247, 0x0, 0x6, [{0x3, 0x6}, {0x7, 0x8000}, {0x7, 0x4}, {0x3, 0x6}, {0x6, 0x200}, {0x100000000, 0x97}, {0x100000001}, {0x2, 0x7ff}], 0x8000, 0x9, 0x3, 0x1, 0x5}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0xb, @sdr={0x3136564e, 0x2}})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x101802, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:47 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026a04000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2625.239568] f2fs_msg: 38 callbacks suppressed
[ 2625.239580] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:05:47 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x20000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xfffffffffffffe00)
r5 = getpgrp(0xffffffffffffffff)
waitid(0x3, r5, &(0x7f0000000200), 0x4, &(0x7f0000000540))
fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setreuid(r4, r6)
r7 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000340)={r3, 0x1, 0x87, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xffffffffffffffcf)
epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r1)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000600)={<r8=>0x0, @in6={{0xa, 0x4e23, 0x4, @local}}, 0x5, 0x50}, &(0x7f0000000380)=0x90)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000003c0)={r8, 0x9}, 0x8)
epoll_create1(0x0)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r7, 0xc0305302, &(0x7f0000000000)={0x74e, 0xffffffffffffffff, 0x8, 0x6, 0x5, 0xff})
unshare(0x400)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x1, 0x2)
setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e21, 0x1e1, @loopback, 0xc00000}, {0xa, 0x4e24, 0x689, @local, 0x81}, 0x9, [0xffffffff, 0x2, 0x349b, 0x0, 0x10001, 0x1, 0x0, 0x800]}, 0x5c)

23:05:47 executing program 4:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0x5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000240)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 2625.294640] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:05:48 executing program 0:
r0 = fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000000)={0x7a57, 0x7})

[ 2625.339545] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2625.351224] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (289282, 14)
[ 2625.375630] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2625.388935] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2625.413511] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2625.431658] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (289282, 14)
23:05:48 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
r0 = semget$private(0x0, 0x2, 0x0)
semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000180)=""/101)
openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x100, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2625.456668] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2625.504994] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:05:48 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x170, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x5fff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23:05:48 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x698400, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff, 0x1, 0x7, 0x0, 0xfffffffffffff3af, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0)

[ 2625.581740] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2626.706483] net_ratelimit: 22 callbacks suppressed
[ 2626.706492] protocol 88fb is buggy, dev hsr_slave_0
[ 2626.716683] protocol 88fb is buggy, dev hsr_slave_1
[ 2627.346457] protocol 88fb is buggy, dev hsr_slave_0
[ 2627.351597] protocol 88fb is buggy, dev hsr_slave_1
[ 2627.356828] Bluetooth: hci0: command 0x1003 tx timeout
[ 2627.362200] Bluetooth: hci0: sending frame failed (-49)
[ 2627.826443] protocol 88fb is buggy, dev hsr_slave_0
[ 2627.831637] protocol 88fb is buggy, dev hsr_slave_1
[ 2627.836801] protocol 88fb is buggy, dev hsr_slave_0
[ 2627.841887] protocol 88fb is buggy, dev hsr_slave_1
[ 2627.846996] protocol 88fb is buggy, dev hsr_slave_0
[ 2627.852102] protocol 88fb is buggy, dev hsr_slave_1
[ 2629.426675] Bluetooth: hci0: command 0x1001 tx timeout
[ 2629.432093] Bluetooth: hci0: sending frame failed (-49)
[ 2631.506480] Bluetooth: hci0: command 0x1009 tx timeout
[ 2631.986461] net_ratelimit: 18 callbacks suppressed
[ 2631.986467] protocol 88fb is buggy, dev hsr_slave_0
[ 2631.996610] protocol 88fb is buggy, dev hsr_slave_1
[ 2632.001704] protocol 88fb is buggy, dev hsr_slave_0
[ 2632.006807] protocol 88fb is buggy, dev hsr_slave_1
[ 2632.011887] protocol 88fb is buggy, dev hsr_slave_0
[ 2632.017002] protocol 88fb is buggy, dev hsr_slave_1
[ 2632.306486] protocol 88fb is buggy, dev hsr_slave_0
[ 2632.311603] protocol 88fb is buggy, dev hsr_slave_1
[ 2632.946443] protocol 88fb is buggy, dev hsr_slave_0
[ 2632.951533] protocol 88fb is buggy, dev hsr_slave_1
23:05:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5451, &(0x7f0000000080))

23:05:58 executing program 2:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)

23:05:58 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026b04000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:05:58 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:58 executing program 0:
openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x101000, 0x0)
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:58 executing program 4:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x2000, &(0x7f0000000040)="f0"})

[ 2635.496078] f2fs_msg: 6 callbacks suppressed
[ 2635.496090] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:05:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

[ 2635.541048] Bluetooth: hci0: sending frame failed (-49)
[ 2635.549650] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2635.565951] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (289538, 14)
23:05:58 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x40000)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:05:58 executing program 4:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40106308}], 0x0, 0x0, 0x0})

[ 2635.590973] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:05:58 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x801)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x5, 0x4)
epoll_create1(0x0)
unshare(0x400)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00')
pselect6(0x40, &(0x7f0000000100)={0x2000000001ff, 0x4, 0x0, 0x1, 0x0, 0x7, 0x4}, 0x0, 0x0, 0x0, 0x0)

[ 2635.684991] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2635.728526] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2635.752213] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (289538, 14)
23:05:58 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x3)
setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f0000000180)=':selinux$vmnet0eth1#selinux\x00', 0x1c, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2635.778096] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:05:58 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x81)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_hsr\x00', 0x10)
syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x6, 0x40001)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x0, 0x9, 0xfffffffffffffff8, 0x80, 0x567b, 0x1})
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2635.852754] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2635.896313] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2637.106430] net_ratelimit: 22 callbacks suppressed
[ 2637.106436] protocol 88fb is buggy, dev hsr_slave_0
[ 2637.116523] protocol 88fb is buggy, dev hsr_slave_1
[ 2637.586455] Bluetooth: hci0: command 0x1003 tx timeout
[ 2637.591897] Bluetooth: hci0: sending frame failed (-49)
[ 2637.746438] protocol 88fb is buggy, dev hsr_slave_0
[ 2637.751552] protocol 88fb is buggy, dev hsr_slave_1
[ 2638.226461] protocol 88fb is buggy, dev hsr_slave_0
[ 2638.231624] protocol 88fb is buggy, dev hsr_slave_1
[ 2638.236824] protocol 88fb is buggy, dev hsr_slave_0
[ 2638.241913] protocol 88fb is buggy, dev hsr_slave_1
[ 2638.247218] protocol 88fb is buggy, dev hsr_slave_0
[ 2638.252296] protocol 88fb is buggy, dev hsr_slave_1
[ 2639.666610] Bluetooth: hci0: command 0x1001 tx timeout
[ 2639.672021] Bluetooth: hci0: sending frame failed (-49)
[ 2641.746607] Bluetooth: hci0: command 0x1009 tx timeout
[ 2642.386520] net_ratelimit: 18 callbacks suppressed
[ 2642.386529] protocol 88fb is buggy, dev hsr_slave_0
[ 2642.396651] protocol 88fb is buggy, dev hsr_slave_1
[ 2642.401741] protocol 88fb is buggy, dev hsr_slave_0
[ 2642.406853] protocol 88fb is buggy, dev hsr_slave_1
[ 2642.411935] protocol 88fb is buggy, dev hsr_slave_0
[ 2642.417044] protocol 88fb is buggy, dev hsr_slave_1
[ 2642.706446] protocol 88fb is buggy, dev hsr_slave_0
[ 2642.711527] protocol 88fb is buggy, dev hsr_slave_1
[ 2643.346495] protocol 88fb is buggy, dev hsr_slave_0
[ 2643.351580] protocol 88fb is buggy, dev hsr_slave_1
23:06:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5452, &(0x7f0000000080))

23:06:08 executing program 4:
r0 = socket(0x1e, 0x80005, 0x0)
sendmsg$tipc(r0, &(0x7f0000000f80)={&(0x7f00000007c0)=@id={0x1e, 0x3, 0x0, {0x0, 0x2}}, 0x10, 0x0, 0x0, &(0x7f0000000f00)}, 0x0)
sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x13b, 0x0}, 0x0)

23:06:08 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026c04000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:06:08 executing program 2:

23:06:08 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000280)='/dev/rtc#\x00', 0xfffffffffffffffe, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={<r3=>0x0, 0x80000, r1})
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000100)={0x8, &(0x7f00000002c0)=[{}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}]})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000180)={r2, r3, 0x9})
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
fsetxattr$security_evm(r1, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000240)=@md5={0x1, "1cefd01fcd30566b65d43eab1f850e47"}, 0x11, 0x2)

23:06:08 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0xa, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:06:08 executing program 2:

[ 2645.743524] f2fs_msg: 6 callbacks suppressed
[ 2645.743536] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:06:08 executing program 0:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000240)=0xffffffffffff8000)
fanotify_init(0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x20000000000007, 0x200)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x1f)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
accept4$tipc(r2, &(0x7f00000003c0)=@name, &(0x7f0000000400)=0x10, 0x80000)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000002c0)=""/82)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$TIOCSTI(r0, 0x5412, 0xf18)

[ 2645.791990] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:06:08 executing program 4:

23:06:08 executing program 2:

[ 2645.862984] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (289794, 14)
23:06:08 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup3(r0, r1, 0x80000)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:06:08 executing program 4:

[ 2645.915782] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2645.947632] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2645.957929] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2645.990926] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2646.027205] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (289794, 14)
[ 2646.054528] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2646.131269] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2646.147701] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2647.506472] net_ratelimit: 22 callbacks suppressed
[ 2647.506479] protocol 88fb is buggy, dev hsr_slave_0
[ 2647.516801] protocol 88fb is buggy, dev hsr_slave_1
[ 2647.996561] Bluetooth: hci0: command 0x1003 tx timeout
[ 2648.002302] Bluetooth: hci0: sending frame failed (-49)
[ 2648.146486] protocol 88fb is buggy, dev hsr_slave_0
[ 2648.151676] protocol 88fb is buggy, dev hsr_slave_1
[ 2648.626488] protocol 88fb is buggy, dev hsr_slave_0
[ 2648.631614] protocol 88fb is buggy, dev hsr_slave_1
[ 2648.636816] protocol 88fb is buggy, dev hsr_slave_0
[ 2648.641885] protocol 88fb is buggy, dev hsr_slave_1
[ 2648.647129] protocol 88fb is buggy, dev hsr_slave_0
[ 2648.652200] protocol 88fb is buggy, dev hsr_slave_1
[ 2650.066544] Bluetooth: hci0: command 0x1001 tx timeout
[ 2650.072040] Bluetooth: hci0: sending frame failed (-49)
[ 2652.146618] Bluetooth: hci0: command 0x1009 tx timeout
[ 2652.786525] net_ratelimit: 18 callbacks suppressed
[ 2652.786532] protocol 88fb is buggy, dev hsr_slave_0
[ 2652.796713] protocol 88fb is buggy, dev hsr_slave_1
[ 2652.801903] protocol 88fb is buggy, dev hsr_slave_0
[ 2652.807085] protocol 88fb is buggy, dev hsr_slave_1
[ 2652.812273] protocol 88fb is buggy, dev hsr_slave_0
[ 2652.817507] protocol 88fb is buggy, dev hsr_slave_1
[ 2653.106497] protocol 88fb is buggy, dev hsr_slave_0
[ 2653.111854] protocol 88fb is buggy, dev hsr_slave_1
[ 2653.746528] protocol 88fb is buggy, dev hsr_slave_0
[ 2653.751696] protocol 88fb is buggy, dev hsr_slave_1
23:06:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x545d, &(0x7f0000000080))

23:06:19 executing program 2:

23:06:19 executing program 4:

23:06:19 executing program 0:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x1f, 0x7fc00000000000, 0x0, 0x1f}, 0x8)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4)
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080))
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x100000800)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:06:19 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={<r1=>0x0, @in6={{0xa, 0x4e23, 0x100000001, @mcast1, 0x9}}, [0x3, 0x10000, 0x8, 0xecc, 0x55a78802, 0x7ff, 0x2, 0xd71d, 0xfffffffffffffff7, 0x8000, 0x0, 0x7, 0x5, 0x8, 0x7ff]}, &(0x7f00000002c0)=0x100)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e23, 0x2, @remote, 0x7}}, 0x400, 0x8, 0x914a, 0x3, 0xd0c452ec559382d}, 0x98)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000011c0)="b7d9288a911993f0265df5cf1cdd8bd1be", 0x11)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000000))
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000003c0)={r1, @in={{0x2, 0x4e20, @loopback}}, 0x5, 0x7, 0xffffffff, 0xffffffffffffffa9, 0x40}, &(0x7f0000000480)=0x98)
socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="01000040", @ANYRES32=0x0], &(0x7f0000000180)=0x8)

23:06:19 executing program 4:

23:06:19 executing program 2:

23:06:19 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026d04000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2656.620446] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2656.633955] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2656.654872] f2fs_msg: 6 callbacks suppressed
[ 2656.654885] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:06:19 executing program 4:

23:06:19 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000001c0)=""/153)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @reserved})
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
epoll_create1(0x0)
unshare(0x400)

23:06:19 executing program 2:

[ 2656.686109] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2656.731642] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (290050, 14)
23:06:19 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x80000000000, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x402)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6002, 0x100000})
pselect6(0x40, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x1}, 0x0, 0x0, 0x0, 0x0)

[ 2656.782404] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2656.835373] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2656.860180] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2656.893970] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (290050, 14)
[ 2656.919282] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2656.990662] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2656.998245] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2657.906481] net_ratelimit: 22 callbacks suppressed
[ 2657.906487] protocol 88fb is buggy, dev hsr_slave_0
[ 2657.916850] protocol 88fb is buggy, dev hsr_slave_1
[ 2658.546460] protocol 88fb is buggy, dev hsr_slave_0
[ 2658.551646] protocol 88fb is buggy, dev hsr_slave_1
[ 2658.626479] Bluetooth: hci0: command 0x1003 tx timeout
[ 2658.632012] Bluetooth: hci0: sending frame failed (-49)
[ 2659.026489] protocol 88fb is buggy, dev hsr_slave_0
[ 2659.031690] protocol 88fb is buggy, dev hsr_slave_1
[ 2659.037039] protocol 88fb is buggy, dev hsr_slave_0
[ 2659.042280] protocol 88fb is buggy, dev hsr_slave_1
[ 2659.047552] protocol 88fb is buggy, dev hsr_slave_0
[ 2659.052632] protocol 88fb is buggy, dev hsr_slave_1
[ 2660.706569] Bluetooth: hci0: command 0x1001 tx timeout
[ 2660.712249] Bluetooth: hci0: sending frame failed (-49)
[ 2662.786490] Bluetooth: hci0: command 0x1009 tx timeout
[ 2663.186491] net_ratelimit: 18 callbacks suppressed
[ 2663.191685] protocol 88fb is buggy, dev hsr_slave_0
[ 2663.196896] protocol 88fb is buggy, dev hsr_slave_1
[ 2663.202040] protocol 88fb is buggy, dev hsr_slave_0
[ 2663.207242] protocol 88fb is buggy, dev hsr_slave_1
[ 2663.212346] protocol 88fb is buggy, dev hsr_slave_0
[ 2663.217489] protocol 88fb is buggy, dev hsr_slave_1
[ 2663.506528] protocol 88fb is buggy, dev hsr_slave_0
[ 2663.511670] protocol 88fb is buggy, dev hsr_slave_1
[ 2664.146502] protocol 88fb is buggy, dev hsr_slave_0
[ 2664.151769] protocol 88fb is buggy, dev hsr_slave_1
23:06:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5460, &(0x7f0000000080))

23:06:29 executing program 4:

23:06:29 executing program 2:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x82}, 0x20)

23:06:29 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
sendmsg$inet_sctp(r0, &(0x7f0000001540)={&(0x7f0000000200)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="f09609a1c223b129105cd8d99985df84e9504acd741b420b0f860af1e7f7106ebffb923233ec656fab03d01d844934c19560c90067bede452bc7c4ec776c039d92beb1a3d2e3ee8c13e40e62e244eb223e2b5950b953f67a5ff01c60a367f161e3544ff29f8829df1d0379dc5df339977111593ee4a373fa280d4e981640c44ec8a3a4c53c5bfa4cba10d72ec61f78fcee5fa705602e7edc", 0x98}, {&(0x7f0000001300)="f638ba96fbde37b6ab2fc12eb592ad4c89accec6d84dd358e6f202a555df9f4e8650fc9b003ca759834ca9b9e6eb898c5b10d97e6fc4ff1e3f60f9227aa136580513d032272b90ff", 0x48}, {&(0x7f0000001380)="f1b473d1356134174415496a41837f0a60ff4c4cc06dccbe5f0d5b78029cfbcbbf0202aa227c99ca7240fe97a0495dc55626ed734ea1aad670814ddacbb805ac98df0b2c00ea3e6752b2e432a65f587321754465467735f86878689b3a7891", 0x5f}, {&(0x7f0000001400)="bff1057b84bc85cd7a3c7ee7d6395ecc423475269e5522f87ca41106c514ea947d0f15452b5192ac77a288b1f0b99ec2a73e3cd625d163590c6e0f89c1a322c5247dccc2a76de22798fc022cf66ec1dd159692fd702a289f39d9fcc0ebd8ead9887f970f63e0969e660c653e3e9d81ccf144371ccc13668ea9edc862f95015d15cb922f8da", 0x85}], 0x5, 0x0, 0x0, 0x40004}, 0x40)
getsockopt$inet_dccp_buf(r0, 0x21, 0x8f, &(0x7f0000000100)=""/238, &(0x7f0000000000)=0xee)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000001580)={0x0, 0xed6})
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5)
getsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f00000015c0)=""/190, &(0x7f0000001680)=0xbe)

23:06:29 executing program 0:
r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0)
statx(r0, &(0x7f0000000180)='./file0\x00', 0x1100, 0x2, &(0x7f0000000340))
fanotify_init(0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000440)={0x18, 0x1, 0x0, {0xf6ee}}, 0x18)
socket$inet(0x2, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800005f14000700000000000000000002ef0046030000002c3f51ca3272ce1c51067c0db26553131ec637f1fe000216dcbf4ea6ef0bff0400"], 0x48}}, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000480)={0x1f, 0x400})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x78d01, 0x0)
ioctl$sock_bt_hci(r3, 0xc00448f3, &(0x7f0000000240)="ce7fcf44f6d6a221d73a9e9a25df18aa10e8656deaa618001cd4d54f06d45fdd4c4ce6f7ed6fc0ad6f20b015493371c2e7d94d47ef617e329969421ce748bb4da31d42b58ae932d1217b1c2196d820c8bb59fa4183cb157de631276f948f848b5c8ef62264d35397059cb55b2a8a427f9713c7b2102f1799d0da0db6ea88a06e25f260a8b9d59c09aeb29d834822f94321ad9706def8f9369998077eab86e99333b295f95ee2c4878de56f4a420b8d84c1c69ab9951343c21c8231ea56015d7a405ae65c62b6ce4c478235301294445b")
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x100000003, 0x0)
unshare(0x0)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:06:29 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026e04000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:06:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2666.842162] f2fs_msg: 6 callbacks suppressed
[ 2666.842175] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2666.871543] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2666.914625] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (290306, 14)
[ 2666.950149] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:06:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8008, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0xfffffffffffffffe)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000180)=""/75)
accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x80000)

[ 2666.973532] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2666.991877] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2667.014708] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (290306, 14)
23:06:29 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={<r1=>0x0, 0x7fffffff}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1}, 0x8)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:06:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2667.044109] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:06:29 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x20002)

23:06:29 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x5, 0x0)
ftruncate(r0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2667.123000] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2667.146532] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2668.306479] net_ratelimit: 22 callbacks suppressed
[ 2668.306486] protocol 88fb is buggy, dev hsr_slave_0
[ 2668.316610] protocol 88fb is buggy, dev hsr_slave_1
[ 2668.946442] Bluetooth: hci0: command 0x1003 tx timeout
[ 2668.946449] protocol 88fb is buggy, dev hsr_slave_0
[ 2668.946494] protocol 88fb is buggy, dev hsr_slave_1
[ 2668.951892] Bluetooth: hci0: sending frame failed (-49)
[ 2669.426485] protocol 88fb is buggy, dev hsr_slave_0
[ 2669.431606] protocol 88fb is buggy, dev hsr_slave_1
[ 2669.436858] protocol 88fb is buggy, dev hsr_slave_0
[ 2669.442034] protocol 88fb is buggy, dev hsr_slave_1
[ 2669.447217] protocol 88fb is buggy, dev hsr_slave_0
[ 2669.452392] protocol 88fb is buggy, dev hsr_slave_1
[ 2671.026540] Bluetooth: hci0: command 0x1001 tx timeout
[ 2671.031954] Bluetooth: hci0: sending frame failed (-49)
[ 2673.106580] Bluetooth: hci0: command 0x1009 tx timeout
[ 2673.586505] net_ratelimit: 18 callbacks suppressed
[ 2673.591637] protocol 88fb is buggy, dev hsr_slave_0
[ 2673.596764] protocol 88fb is buggy, dev hsr_slave_1
[ 2673.602063] protocol 88fb is buggy, dev hsr_slave_0
[ 2673.607155] protocol 88fb is buggy, dev hsr_slave_1
[ 2673.612491] protocol 88fb is buggy, dev hsr_slave_0
[ 2673.617634] protocol 88fb is buggy, dev hsr_slave_1
[ 2673.906470] protocol 88fb is buggy, dev hsr_slave_0
[ 2673.911619] protocol 88fb is buggy, dev hsr_slave_1
[ 2674.546487] protocol 88fb is buggy, dev hsr_slave_0
[ 2674.551648] protocol 88fb is buggy, dev hsr_slave_1
23:06:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x40049409, &(0x7f0000000080))

23:06:39 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020005000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:06:39 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:06:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

23:06:39 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x200, 0x10000, 0x10001, 0x7})
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000240)={"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"})

23:06:39 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000001000000bf000040000000009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

[ 2677.079971] f2fs_msg: 6 callbacks suppressed
[ 2677.079984] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:06:39 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)

23:06:39 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x5, 0x0)
r1 = add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000001c0)={r1, 0x3, 0x7fffffff}, &(0x7f0000000280)=ANY=[@ANYBLOB="656e633d6f61657020686173683d636d616328636173743529000000d15adeeb0b8c0801b91c7b66f0bd650000000000000000000000000000000000000000000000000000000000000000000000000400"/93], &(0x7f0000000440)="b23554cc113e7bb4678f41ca9ad609d3fee12793145bb793cab111ac5355c2ebe9e1c3676ae5387999d18166c6fbb219a63ab5807e0e2cf002c949a1267ce816f46f6cc7c71322841ec720406113fd4cc4fa4222acc68ef37c1453930f563154c7b23fac995548d2cbb274ae74bceda110589d42f1503656a7826c1e87520d04cd3c0660ad50e278bdb9e51bff26e6137f7732bae72b271b723f", &(0x7f0000000340)=""/238)
socket$inet_udplite(0x2, 0x2, 0x88)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fb5a24929f233b2ab5f0bec6642bca1daa04ffbbb6b41c0c63228b005afff39ff5903521885e0ef0d16f474e68e721a68aad8e6593cf8982"], 0x1, 0x0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000005c0)=0x80000000000002, &(0x7f0000000640)=0x44)
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x21)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x1000, 0x0, 0x9})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
userfaultfd(0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @ipv4={[], [], @rand_addr=0x6}, 0xe0}, 0x1c)
epoll_create1(0x0)
unshare(0x14010100)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2677.148351] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2677.166771] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (327682, 14)
23:06:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2677.226661] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2677.256860] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:06:39 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff, 0xfffffffffffffffc, 0x401, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0)

[ 2677.269767] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2677.279278] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (327682, 14)
[ 2677.297315] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2677.358710] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2677.385719] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:06:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3180d070")
r1 = timerfd_create(0x9, 0x0)
timerfd_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
timerfd_gettime(r1, &(0x7f00000000c0))

23:06:40 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f0000000000))

[ 2678.706444] net_ratelimit: 22 callbacks suppressed
[ 2678.706451] protocol 88fb is buggy, dev hsr_slave_0
[ 2678.716535] protocol 88fb is buggy, dev hsr_slave_1
[ 2679.186573] Bluetooth: hci0: command 0x1003 tx timeout
[ 2679.192033] Bluetooth: hci0: sending frame failed (-49)
[ 2679.346468] protocol 88fb is buggy, dev hsr_slave_0
[ 2679.351602] protocol 88fb is buggy, dev hsr_slave_1
[ 2679.826413] protocol 88fb is buggy, dev hsr_slave_0
[ 2679.831559] protocol 88fb is buggy, dev hsr_slave_1
[ 2679.836702] protocol 88fb is buggy, dev hsr_slave_0
[ 2679.841781] protocol 88fb is buggy, dev hsr_slave_1
[ 2679.847007] protocol 88fb is buggy, dev hsr_slave_0
[ 2679.852068] protocol 88fb is buggy, dev hsr_slave_1
[ 2681.266636] Bluetooth: hci0: command 0x1001 tx timeout
[ 2681.272064] Bluetooth: hci0: sending frame failed (-49)
[ 2683.346477] Bluetooth: hci0: command 0x1009 tx timeout
[ 2683.986505] net_ratelimit: 18 callbacks suppressed
[ 2683.991488] protocol 88fb is buggy, dev hsr_slave_0
[ 2683.996584] protocol 88fb is buggy, dev hsr_slave_1
[ 2684.001722] protocol 88fb is buggy, dev hsr_slave_0
[ 2684.006873] protocol 88fb is buggy, dev hsr_slave_1
[ 2684.012005] protocol 88fb is buggy, dev hsr_slave_0
[ 2684.017076] protocol 88fb is buggy, dev hsr_slave_1
[ 2684.306491] protocol 88fb is buggy, dev hsr_slave_0
[ 2684.311599] protocol 88fb is buggy, dev hsr_slave_1
[ 2684.946483] protocol 88fb is buggy, dev hsr_slave_0
[ 2684.951634] protocol 88fb is buggy, dev hsr_slave_1
23:06:49 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x40086602, &(0x7f0000000080))

23:06:49 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000180))
r1 = userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:06:49 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020006000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:06:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41)

23:06:49 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x480000, 0x0)
unshare(0x400)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x200000, 0x4)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:06:49 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@rose, @default, @bcast, @netrom, @default, @bcast, @rose, @null]}, 0x48)
accept(r0, 0x0, 0x0)

[ 2687.336287] f2fs_msg: 6 callbacks suppressed
[ 2687.336304] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2687.342432] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de
[ 2687.384639] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2687.412414] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (393218, 14)
23:06:50 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x4, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
bind$isdn(r0, &(0x7f0000000000)={0x22, 0x2, 0xff, 0x40, 0x1}, 0x6)
userfaultfd(0x0)
epoll_create1(0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100)=0x5, 0x4)
unshare(0x400)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0x32)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:06:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41)

[ 2687.438060] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2687.446901] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2687.460383] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2687.480795] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (393218, 14)
23:06:50 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x20, 0xce, "ea0efd4e2f3ef82d33f2f36fbf40e8ee6709ecd0d23c60140fc0dbb442c733d5c7076db0e205ea4d8fec5b95c225afc3608652f2a44940bfcf47942576a31a80d57a6127bfc81b44ae94d40ba7623428e05f9f321199e8fca65074ce3e2a2357bc4f24ab6fd1366d36b5d84d0fc5eaa36e077f98f6f2aeabedc500b86fb118b01751a3e61d47a232d3b73f665b5590189b47c3e48a997661769fc9bd2c8c6597c5d95f6226476423dc38c19781cf554f5f37d26013741906735202b9007d5e1e56cc03123ea832ff329fa00a23a1"}})
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2687.493219] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2687.547756] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:06:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "4f94a03538d607bb0353ab7ab64eee4ad0c3a1"})
read(r2, &(0x7f0000000040)=""/19, 0x1)

[ 2687.600510] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:06:50 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)
ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000100))
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:06:50 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
getrlimit(0xf, &(0x7f0000000000))

[ 2689.106502] net_ratelimit: 22 callbacks suppressed
[ 2689.106511] protocol 88fb is buggy, dev hsr_slave_0
[ 2689.116983] protocol 88fb is buggy, dev hsr_slave_1
[ 2689.426529] Bluetooth: hci0: command 0x1003 tx timeout
[ 2689.431963] Bluetooth: hci0: sending frame failed (-49)
[ 2689.746453] protocol 88fb is buggy, dev hsr_slave_0
[ 2689.751582] protocol 88fb is buggy, dev hsr_slave_1
[ 2690.226466] protocol 88fb is buggy, dev hsr_slave_0
[ 2690.231577] protocol 88fb is buggy, dev hsr_slave_1
[ 2690.236776] protocol 88fb is buggy, dev hsr_slave_0
[ 2690.241840] protocol 88fb is buggy, dev hsr_slave_1
[ 2690.247036] protocol 88fb is buggy, dev hsr_slave_0
[ 2690.252118] protocol 88fb is buggy, dev hsr_slave_1
[ 2691.506442] Bluetooth: hci0: command 0x1001 tx timeout
[ 2691.511895] Bluetooth: hci0: sending frame failed (-49)
[ 2693.586472] Bluetooth: hci0: command 0x1009 tx timeout
[ 2694.386501] net_ratelimit: 18 callbacks suppressed
[ 2694.391522] protocol 88fb is buggy, dev hsr_slave_0
[ 2694.396605] protocol 88fb is buggy, dev hsr_slave_1
[ 2694.401753] protocol 88fb is buggy, dev hsr_slave_0
[ 2694.406804] protocol 88fb is buggy, dev hsr_slave_1
[ 2694.411872] protocol 88fb is buggy, dev hsr_slave_0
[ 2694.416936] protocol 88fb is buggy, dev hsr_slave_1
[ 2694.706438] protocol 88fb is buggy, dev hsr_slave_0
[ 2694.711544] protocol 88fb is buggy, dev hsr_slave_1
[ 2695.346458] protocol 88fb is buggy, dev hsr_slave_0
[ 2695.351547] protocol 88fb is buggy, dev hsr_slave_1
23:07:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x40087602, &(0x7f0000000080))

23:07:00 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020007000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:07:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41)

23:07:00 executing program 3:
socketpair(0xb, 0x1, 0x5, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x101)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
ptrace$setsig(0x4203, r2, 0x0, &(0x7f0000000280)={0xf, 0x10000, 0x5})
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000180)="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")
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x3fd)
r4 = semget$private(0x0, 0x2, 0x106)
semctl$GETPID(r4, 0x6, 0xb, &(0x7f0000000300)=""/83)
pselect6(0x40, &(0x7f0000000140)={0x200}, 0x0, 0x0, 0x0, 0x0)

23:07:00 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0xef, &(0x7f0000000180)=0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000240)={0x800, 0x47ec8905, 0x9, 0x3ff, 0xd, 0x20, 0x4, 0x6c, 0x0, 0x2, 0x4, 0x1})
pselect6(0x40, &(0x7f00000001c0)={0xa8b, 0xffff, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4)

23:07:00 executing program 2:
r0 = timerfd_create(0x0, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1)
timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000004000/0x4000)=nil, 0x6000)

[ 2697.570009] f2fs_msg: 6 callbacks suppressed
[ 2697.570024] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2697.607771] Bluetooth: hci0: Frame reassembly failed (-84)
23:07:00 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x0, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x80c0)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2697.623968] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2697.636964] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (458754, 14)
[ 2697.656050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2697.676780] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2697.695758] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2697.703879] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (458754, 14)
23:07:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

23:07:00 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={<r1=>0x0, 0x18, "d87088bf6ab418e50f30383c8342b2f62a7c1fb0ea77b8d0"}, &(0x7f0000000080)=0x20)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r1, 0x9}, 0x8)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2697.721429] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:07:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
poll(&(0x7f0000000000)=[{r0, 0x8000}], 0x1, 0x4)
epoll_create1(0x0)
unshare(0x400)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x6)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2697.805987] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2697.863767] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:07:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000df00000f02"])

23:07:00 executing program 0:
fanotify_init(0x41, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x20000)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2699.506437] net_ratelimit: 22 callbacks suppressed
[ 2699.506443] protocol 88fb is buggy, dev hsr_slave_0
[ 2699.516482] protocol 88fb is buggy, dev hsr_slave_1
[ 2699.666443] Bluetooth: hci0: command 0x1003 tx timeout
[ 2699.671849] Bluetooth: hci0: sending frame failed (-49)
[ 2700.146436] protocol 88fb is buggy, dev hsr_slave_0
[ 2700.151537] protocol 88fb is buggy, dev hsr_slave_1
[ 2700.627338] protocol 88fb is buggy, dev hsr_slave_0
[ 2700.632433] protocol 88fb is buggy, dev hsr_slave_1
[ 2700.637613] protocol 88fb is buggy, dev hsr_slave_0
[ 2700.642674] protocol 88fb is buggy, dev hsr_slave_1
[ 2700.647940] protocol 88fb is buggy, dev hsr_slave_0
[ 2700.652995] protocol 88fb is buggy, dev hsr_slave_1
[ 2701.746509] Bluetooth: hci0: command 0x1001 tx timeout
[ 2701.751939] Bluetooth: hci0: sending frame failed (-49)
[ 2703.826563] Bluetooth: hci0: command 0x1009 tx timeout
[ 2704.786527] net_ratelimit: 18 callbacks suppressed
[ 2704.786533] protocol 88fb is buggy, dev hsr_slave_0
[ 2704.797286] protocol 88fb is buggy, dev hsr_slave_1
[ 2704.802961] protocol 88fb is buggy, dev hsr_slave_0
[ 2704.808308] protocol 88fb is buggy, dev hsr_slave_1
[ 2704.813536] protocol 88fb is buggy, dev hsr_slave_0
[ 2704.819093] protocol 88fb is buggy, dev hsr_slave_1
[ 2705.106530] protocol 88fb is buggy, dev hsr_slave_0
[ 2705.111923] protocol 88fb is buggy, dev hsr_slave_1
[ 2705.746511] protocol 88fb is buggy, dev hsr_slave_0
[ 2705.751769] protocol 88fb is buggy, dev hsr_slave_1
23:07:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x4020940d, &(0x7f0000000080))

23:07:10 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

23:07:10 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020009000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:07:10 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000400, 0x0)
r0 = gettid()
perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}}, r0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:10 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
r1 = fcntl$getown(r0, 0x9)
ptrace$setopts(0x4206, r1, 0x6, 0x8)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:10 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@rose, @default, @bcast, @netrom, @default, @bcast, @rose, @null]}, 0x48)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140))

[ 2707.810117] f2fs_msg: 6 callbacks suppressed
[ 2707.810131] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2707.823166] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de
23:07:10 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2707.879996] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2707.907019] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2707.915002] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (589826, 14)
23:07:10 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000180)='/dev/rtc#\x00', 0x3, 0x3e)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7f, 0x2, [0x40000002]})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x45e6, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x4000000000003fc)
r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="95b77e57572736eb2bb64f8ec08dd330b278c8417b15c2f525d75e7a49f61ef324acc83a98d8c34f604a04491dcb6729aa53157ec0fc8ea9de3b3ccb7f5ce7f313e9636132f7fdf93da273ab3ed8c2b531af214ed34ad1a0ae9beec584da7f71f8f2e54b2eaac26c211cc7d982625dabaa420e154e9a168f1a67cbb7c7734af54ccb838682a2b7fdeae3f0d49745b3e481126d4023abd3cded63ef6ce03715edfd97df24aed2d185ccab08f59d3011faa60d0e8f73ff5c6ede0093ad7ff761b7d2158dc7dfa0cbdcbd2b166740b70c551c59e3", 0xd3, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000340)={r4, 0x5349, 0x300000000}, &(0x7f0000000380)={'enc=', 'raw', ' hash=', {'sha3-384-generic\x00'}}, &(0x7f0000000400)="48cb4f606d083de623750944f0e10106e0f9a91a4aec", &(0x7f0000000440)=""/170)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:10 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x400000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2707.937991] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2707.955132] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2708.023965] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2708.044147] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (589826, 14)
[ 2708.053701] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:07:10 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x5, 0x70, 0x40, 0x9, 0x0, 0x0, 0x0, 0x1, 0x20000, 0x2, 0x5, 0x101, 0x0, 0x7, 0x6, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x9, 0x9, 0x81, 0x5, 0xfef, 0x0, 0x101, 0x0, 0x2, 0x3, 0x0, 0xbb8e, 0x0, 0x800, 0x6, 0x6, 0x0, 0x4, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x4}, 0x2000, 0x8, 0x1, 0x5, 0xffffffff, 0x9})
sched_setattr(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000300)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806)
lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.origin\x00')
read(r1, &(0x7f0000000000)=""/30, 0xfffffe4c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00')

23:07:10 executing program 0:
fanotify_init(0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000000)=""/15, 0xf}], 0x3, &(0x7f0000000400)=""/40, 0x28}, 0x2000)
r1 = syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0xf7e6, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000540)={0x5, 0x1ff, 0x8001, 'queue0\x00', 0x8})
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x1, @default, @netrom={'nr', 0x0}, 0x10001, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7fffffff, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0x8482, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x4000)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2708.140834] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2708.150524] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:07:10 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2708.185893] Unknown ioctl 1074275339
[ 2708.220271] Unknown ioctl 35234
[ 2709.906410] Bluetooth: hci0: command 0x1003 tx timeout
[ 2709.906439] net_ratelimit: 22 callbacks suppressed
[ 2709.906444] protocol 88fb is buggy, dev hsr_slave_0
[ 2709.921782] protocol 88fb is buggy, dev hsr_slave_1
[ 2709.926970] Bluetooth: hci0: sending frame failed (-49)
[ 2710.546432] protocol 88fb is buggy, dev hsr_slave_0
[ 2710.551587] protocol 88fb is buggy, dev hsr_slave_1
[ 2711.026446] protocol 88fb is buggy, dev hsr_slave_0
[ 2711.031628] protocol 88fb is buggy, dev hsr_slave_1
[ 2711.036781] protocol 88fb is buggy, dev hsr_slave_0
[ 2711.041956] protocol 88fb is buggy, dev hsr_slave_1
[ 2711.047143] protocol 88fb is buggy, dev hsr_slave_0
[ 2711.052241] protocol 88fb is buggy, dev hsr_slave_1
[ 2711.986676] Bluetooth: hci0: command 0x1001 tx timeout
[ 2711.992095] Bluetooth: hci0: sending frame failed (-49)
[ 2714.066665] Bluetooth: hci0: command 0x1009 tx timeout
[ 2715.186483] net_ratelimit: 18 callbacks suppressed
[ 2715.186489] protocol 88fb is buggy, dev hsr_slave_0
[ 2715.196714] protocol 88fb is buggy, dev hsr_slave_1
[ 2715.201889] protocol 88fb is buggy, dev hsr_slave_0
[ 2715.207141] protocol 88fb is buggy, dev hsr_slave_1
[ 2715.212215] protocol 88fb is buggy, dev hsr_slave_0
[ 2715.217388] protocol 88fb is buggy, dev hsr_slave_1
[ 2715.506446] protocol 88fb is buggy, dev hsr_slave_0
[ 2715.511570] protocol 88fb is buggy, dev hsr_slave_1
[ 2716.146561] protocol 88fb is buggy, dev hsr_slave_0
[ 2716.151768] protocol 88fb is buggy, dev hsr_slave_1
23:07:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x80045432, &(0x7f0000000080))

23:07:20 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:20 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000a000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:07:20 executing program 0:
r0 = fanotify_init(0x0, 0x0)
r1 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000700)=0x1, 0x4)
preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/66, 0x42}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/142, 0x8e}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000500)=""/135, 0x87}], 0x7, 0x0)
fsetxattr$security_smack_entry(r0, &(0x7f0000000180)='security.SMACK64IPIN\x00', &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x1f, 0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000000)=""/5, 0x5)
unshare(0x400)
ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000640)={0x7, 0x1, @raw_data=[0x80, 0x8, 0x3335, 0x6, 0x9, 0xfffffffffffffff7, 0x3, 0x5, 0x8, 0x2, 0xfc, 0x8, 0x0, 0x3, 0x7, 0xfff]})
pselect6(0xff98, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)

23:07:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

23:07:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCLINUX2(r1, 0x541c, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r2 = dup(r1)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0xfffffc93)
set_robust_list(0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x762)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
memfd_create(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
getpid()
getpriority(0x0, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x4030582a, 0x0)
ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xfffffffffffffd95)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x7fff, 0x80000005}, 0x14)
shutdown(r0, 0x1)

23:07:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2718.031358] f2fs_msg: 6 callbacks suppressed
[ 2718.031369] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2718.062630] Bluetooth: hci0: Frame reassembly failed (-84)
23:07:20 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x101000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0x80, 0xffff, 0x7, 0x7, 0xfffffffffffffffa, 0xe1, 0x9, 0xfc, 0x80000000, 0x20, 0x5}, 0xb)
userfaultfd(0x820)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r1=>0x0, &(0x7f0000000100)=0x4)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1}, 0x8)

23:07:20 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1)
unshare(0x400)
time(&(0x7f0000000180))
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2718.089484] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2718.098511] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (655362, 14)
[ 2718.106070] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:07:20 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x7fff, 0x410000)
accept4$bt_l2cap(r1, 0x0, &(0x7f0000000200), 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
socket$kcm(0x29, 0x7, 0x0)
r3 = epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000000))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={<r4=>0x0, 0x80000, r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={r4, 0x80000, r0})

[ 2718.129983] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2718.169159] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:07:20 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={<r2=>0x0, 0x8, 0x5, 0x7fffffff, 0x3, 0x1}, &(0x7f0000000080)=0x14)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0x3ff}, &(0x7f00000001c0)=0x8)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2718.178655] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (655362, 14)
[ 2718.202554] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2718.256682] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2718.263990] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2720.066432] Bluetooth: hci0: command 0x1003 tx timeout
[ 2720.071868] Bluetooth: hci0: sending frame failed (-49)
[ 2720.306462] net_ratelimit: 22 callbacks suppressed
[ 2720.306469] protocol 88fb is buggy, dev hsr_slave_0
[ 2720.316896] protocol 88fb is buggy, dev hsr_slave_1
[ 2720.946446] protocol 88fb is buggy, dev hsr_slave_0
[ 2720.951549] protocol 88fb is buggy, dev hsr_slave_1
[ 2721.426488] protocol 88fb is buggy, dev hsr_slave_0
[ 2721.431657] protocol 88fb is buggy, dev hsr_slave_1
[ 2721.436814] protocol 88fb is buggy, dev hsr_slave_0
[ 2721.441901] protocol 88fb is buggy, dev hsr_slave_1
[ 2721.447056] protocol 88fb is buggy, dev hsr_slave_0
[ 2721.452096] protocol 88fb is buggy, dev hsr_slave_1
[ 2722.146537] Bluetooth: hci0: command 0x1001 tx timeout
[ 2722.152242] Bluetooth: hci0: sending frame failed (-49)
[ 2724.226492] Bluetooth: hci0: command 0x1009 tx timeout
[ 2725.586570] net_ratelimit: 18 callbacks suppressed
[ 2725.591669] protocol 88fb is buggy, dev hsr_slave_0
[ 2725.596764] protocol 88fb is buggy, dev hsr_slave_1
[ 2725.602151] protocol 88fb is buggy, dev hsr_slave_0
[ 2725.607217] protocol 88fb is buggy, dev hsr_slave_1
[ 2725.612323] protocol 88fb is buggy, dev hsr_slave_0
[ 2725.617387] protocol 88fb is buggy, dev hsr_slave_1
[ 2725.906459] protocol 88fb is buggy, dev hsr_slave_0
[ 2725.911543] protocol 88fb is buggy, dev hsr_slave_1
[ 2726.556481] protocol 88fb is buggy, dev hsr_slave_0
[ 2726.561580] protocol 88fb is buggy, dev hsr_slave_1
23:07:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x80045440, &(0x7f0000000080))

23:07:30 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x111000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
accept4$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x80000)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
sendto$inet(r0, &(0x7f00000001c0)="526217af6cda7fc7bfc48a4dd4a64e19b3b7cb8dedd57f6babec5689dbf55261fe00157173585f6c77e34b4d01e2b4394e911a", 0x33, 0x4801, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:30 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000040)={@default, @bcast})

23:07:30 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa0000, 0x0)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x428)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

23:07:30 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000c000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2728.272113] f2fs_msg: 6 callbacks suppressed
[ 2728.272122] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2728.292755] Bluetooth: hci0: sending frame failed (-49)
23:07:30 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={<r1=>0x0, 0x8}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x3}, &(0x7f00000001c0)=0x8)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:30 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r0, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom, @netrom, @bcast, @default, @bcast, @remote, @bcast, @null]}, 0x48)

23:07:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2728.318876] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2728.336782] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (786434, 14)
[ 2728.352871] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2728.362912] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:07:31 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="027e932f6dd14c2fc3c92cdad25e717a01d1dc2ec0dc3c384d2c0d27cd57b606795323512837e382a4e16b4773fe57b6690d40c352988e35689eb1fdc41bf9fdf8826d9f387a0305f94482b2f476ef1e9a586a18776b171f01b70cf09263d7779217af1014841fe297cb2cf023f50aaa4a3c0e50d7b966a69a774e49843db0569120e0fd2eb0824d72d12c59830fd94a37143b4b067563ea0c646dff08fa0fccb28a834166895c5d3322b89368debe39ad9c6144e3e7d40e3fa5419b850679c8c26e64fd7ec96898778b3eecd64317e17dc8dc786bb2b915896e513e6b58d8cb0ccbcef904d5e6d8111ac2f4c2bf8c2cbe", 0xf1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000340)={r2, 0x1, 0x6, @local}, 0x10)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0xbf16, 0x200)

23:07:31 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000500))
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x200, 0x0)
userfaultfd(0x0)
r2 = epoll_create1(0x0)
unshare(0x400)
fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="f9c3384ae96f234fa9e700605eda339fb43e7a5db9ba0a6c337970ee374599042d61f68ac528beae53e599214014c71abdb1f5fa7d94e0ac38e8b0181860", 0x3e}], 0x0, &(0x7f0000000280)={[{@quota_account='quota=account'}, {@upgrade='upgrade'}, {@hostdata={'hostdata', 0x3d, '/dev/net/tun\x00'}}], [{@hash='hash'}, {@context={'context', 0x3d, 'sysadm_u'}}, {@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r3}}, {@obj_type={'obj_type', 0x3d, '/trusted,'}}, {@appraise='appraise'}]})
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={<r4=>0x0, 0x1}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @multicast2}}, [0x9, 0xbb, 0x0, 0x6, 0x4, 0x7, 0x7cc3afe1, 0x1, 0xfff, 0x17e5b1a, 0x5, 0x7, 0x8, 0x401, 0x3]}, &(0x7f00000004c0)=0x100)

23:07:31 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/4096, 0x1000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x880000000406)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2728.380455] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2728.390479] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (786434, 14)
[ 2728.409180] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2728.419779] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de
[ 2728.483732] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2728.531371] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2730.306492] Bluetooth: hci0: command 0x1003 tx timeout
[ 2730.311934] Bluetooth: hci0: sending frame failed (-49)
[ 2730.706478] net_ratelimit: 22 callbacks suppressed
[ 2730.706485] protocol 88fb is buggy, dev hsr_slave_0
[ 2730.716730] protocol 88fb is buggy, dev hsr_slave_1
[ 2731.346486] protocol 88fb is buggy, dev hsr_slave_0
[ 2731.351754] protocol 88fb is buggy, dev hsr_slave_1
[ 2731.826520] protocol 88fb is buggy, dev hsr_slave_0
[ 2731.831956] protocol 88fb is buggy, dev hsr_slave_1
[ 2731.837080] protocol 88fb is buggy, dev hsr_slave_0
[ 2731.842162] protocol 88fb is buggy, dev hsr_slave_1
[ 2731.847265] protocol 88fb is buggy, dev hsr_slave_0
[ 2731.852340] protocol 88fb is buggy, dev hsr_slave_1
[ 2732.386569] Bluetooth: hci0: command 0x1001 tx timeout
[ 2732.392455] Bluetooth: hci0: sending frame failed (-49)
[ 2734.466506] Bluetooth: hci0: command 0x1009 tx timeout
[ 2735.986504] net_ratelimit: 18 callbacks suppressed
[ 2735.991498] protocol 88fb is buggy, dev hsr_slave_0
[ 2735.996561] protocol 88fb is buggy, dev hsr_slave_1
[ 2736.001652] protocol 88fb is buggy, dev hsr_slave_0
[ 2736.006696] protocol 88fb is buggy, dev hsr_slave_1
[ 2736.011797] protocol 88fb is buggy, dev hsr_slave_0
[ 2736.016964] protocol 88fb is buggy, dev hsr_slave_1
[ 2736.306517] protocol 88fb is buggy, dev hsr_slave_0
[ 2736.311640] protocol 88fb is buggy, dev hsr_slave_1
[ 2736.946486] protocol 88fb is buggy, dev hsr_slave_0
[ 2736.951736] protocol 88fb is buggy, dev hsr_slave_1
23:07:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x80086601, &(0x7f0000000080))

23:07:41 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008855)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:41 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r0, &(0x7f0000000100)={{0x3, @rose, 0x8}, [@netrom, @netrom, @bcast, @default, @bcast, @remote, @bcast, @null]}, 0x48)
connect$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@rose, @default, @bcast, @netrom, @default, @bcast, @rose, @null]}, 0x48)

23:07:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

23:07:41 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020014000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:07:41 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2800, 0x4)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080))
sendmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=@canfd={{0x1, 0x3, 0x2, 0x100000001}, 0x1a, 0x2, 0x0, 0x0, "408fe33a5c994df7aa0f65c8049bf33d1b348161e1300324ae5e8b816d277dd652200db2990c534f9eb8d4f03acb582f3f6011de6b0782bbc69dc63ce5f82793"}, 0x48}}, 0x20000000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x40000000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2738.509946] f2fs_msg: 6 callbacks suppressed
[ 2738.509955] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2738.521501] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de
[ 2738.538344] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de
[ 2738.538862] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2738.564251] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2738.577580] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (1310722, 14)
[ 2738.585730] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2738.594787] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2738.600658] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de
23:07:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

23:07:41 executing program 0:
r0 = fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000080)=0xc)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x2, 0x0, 0x87a, 0x7, 0x0, 0x8000, 0x284, 0x5, 0xa46b, 0x1, 0x8, 0xffff, 0x3, 0x7, 0x39f7, 0xe868, 0xfffffffffffff000, 0x4, 0x10000, 0xfffffffffffffff7, 0x9, 0x5, 0x9564, 0x1, 0x5, 0x3, 0x400000000, 0x5, 0x0, 0x9, 0x5, 0x9, 0x5, 0x7fffffff, 0x7, 0x7, 0x0, 0x81, 0x0, @perf_config_ext={0x4, 0x80000000}, 0x40c0, 0x80000000, 0x5, 0x3, 0x3ff, 0x401, 0x7fffffff}, r2, 0x10, 0xffffffffffffff9c, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2738.602979] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2738.618761] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (1310722, 14)
[ 2738.627862] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:07:41 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4)

[ 2738.714784] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2738.746990] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:07:41 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020020000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:07:41 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x100000020000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x7f, 0x80000000, 0x8}})
unshare(0x400)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3fc0000)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2740.636455] Bluetooth: hci0: command 0x1003 tx timeout
[ 2740.641904] Bluetooth: hci0: sending frame failed (-49)
[ 2741.109091] net_ratelimit: 22 callbacks suppressed
[ 2741.109097] protocol 88fb is buggy, dev hsr_slave_0
[ 2741.119195] protocol 88fb is buggy, dev hsr_slave_1
[ 2741.746484] protocol 88fb is buggy, dev hsr_slave_0
[ 2741.751615] protocol 88fb is buggy, dev hsr_slave_1
[ 2742.226440] protocol 88fb is buggy, dev hsr_slave_0
[ 2742.231529] protocol 88fb is buggy, dev hsr_slave_1
[ 2742.236722] protocol 88fb is buggy, dev hsr_slave_0
[ 2742.241781] protocol 88fb is buggy, dev hsr_slave_1
[ 2742.246998] protocol 88fb is buggy, dev hsr_slave_0
[ 2742.252085] protocol 88fb is buggy, dev hsr_slave_1
[ 2742.706471] Bluetooth: hci0: command 0x1001 tx timeout
[ 2742.711889] Bluetooth: hci0: sending frame failed (-49)
[ 2744.786481] Bluetooth: hci0: command 0x1009 tx timeout
[ 2746.386471] net_ratelimit: 18 callbacks suppressed
[ 2746.386477] protocol 88fb is buggy, dev hsr_slave_0
[ 2746.396539] protocol 88fb is buggy, dev hsr_slave_1
[ 2746.401628] protocol 88fb is buggy, dev hsr_slave_0
[ 2746.406767] protocol 88fb is buggy, dev hsr_slave_1
[ 2746.411859] protocol 88fb is buggy, dev hsr_slave_0
[ 2746.417132] protocol 88fb is buggy, dev hsr_slave_1
[ 2746.706560] protocol 88fb is buggy, dev hsr_slave_0
[ 2746.712734] protocol 88fb is buggy, dev hsr_slave_1
[ 2747.346570] protocol 88fb is buggy, dev hsr_slave_0
[ 2747.354180] protocol 88fb is buggy, dev hsr_slave_1
23:07:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x80087601, &(0x7f0000000080))

23:07:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00')
getdents(r1, &(0x7f0000000180)=""/60, 0x32b)

23:07:51 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000100)=<r1=>0x0)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000200)=r1)
fchdir(r0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x400)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{}, {}, {}, {}]})
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:07:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

23:07:51 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020022000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:07:51 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
sysinfo(&(0x7f0000000180)=""/85)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2748.753162] overlayfs: failed to resolve './file1': -2
[ 2748.781885] f2fs_msg: 22 callbacks suppressed
[ 2748.781902] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:07:51 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
epoll_create1(0x800000)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2748.803663] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2748.853061] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2748.874764] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (2228226, 14)
[ 2748.892750] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2748.903593] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2748.921048] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2748.932973] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (2228226, 14)
23:07:51 executing program 0:
r0 = fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x9, 0x0, 0x4010000000, 0x6, 0x1b, 0x1000, 0xfffffffffffffffa, 0x5, 0x200})
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2748.959508] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:07:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

23:07:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000df00004001"])

[ 2749.036663] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2749.074581] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:07:51 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00')
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2749.119962] overlayfs: failed to resolve './file1': -2
23:07:51 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020023000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2750.866549] Bluetooth: hci0: command 0x1003 tx timeout
[ 2750.873161] Bluetooth: hci0: sending frame failed (-49)
[ 2751.506554] net_ratelimit: 22 callbacks suppressed
[ 2751.506564] protocol 88fb is buggy, dev hsr_slave_0
[ 2751.517729] protocol 88fb is buggy, dev hsr_slave_1
[ 2752.146592] protocol 88fb is buggy, dev hsr_slave_0
[ 2752.153245] protocol 88fb is buggy, dev hsr_slave_1
[ 2752.626557] protocol 88fb is buggy, dev hsr_slave_0
[ 2752.632556] protocol 88fb is buggy, dev hsr_slave_1
[ 2752.638257] protocol 88fb is buggy, dev hsr_slave_0
[ 2752.644423] protocol 88fb is buggy, dev hsr_slave_1
[ 2752.650309] protocol 88fb is buggy, dev hsr_slave_0
[ 2752.655854] protocol 88fb is buggy, dev hsr_slave_1
[ 2752.946542] Bluetooth: hci0: command 0x1001 tx timeout
[ 2752.953248] Bluetooth: hci0: sending frame failed (-49)
[ 2755.027229] Bluetooth: hci0: command 0x1009 tx timeout
[ 2756.786555] net_ratelimit: 18 callbacks suppressed
[ 2756.792146] protocol 88fb is buggy, dev hsr_slave_0
[ 2756.798145] protocol 88fb is buggy, dev hsr_slave_1
[ 2756.803812] protocol 88fb is buggy, dev hsr_slave_0
[ 2756.809825] protocol 88fb is buggy, dev hsr_slave_1
[ 2756.815289] protocol 88fb is buggy, dev hsr_slave_0
[ 2756.820731] protocol 88fb is buggy, dev hsr_slave_1
[ 2757.106460] protocol 88fb is buggy, dev hsr_slave_0
[ 2757.111742] protocol 88fb is buggy, dev hsr_slave_1
[ 2757.746514] protocol 88fb is buggy, dev hsr_slave_0
[ 2757.751682] protocol 88fb is buggy, dev hsr_slave_1
23:08:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0xc0045878, &(0x7f0000000080))

23:08:01 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000))

23:08:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

23:08:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/relabel\x00', 0x2, 0x0)
userfaultfd(0x0)
epoll_create1(0x0)
unshare(0x8000200)
pselect6(0x40, &(0x7f0000000140)={0x1ff, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9b, 0x1}, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hwsim0\x00', 0x3402})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x800, 0x0)

23:08:01 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000022e26000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:08:01 executing program 2:
r0 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00')
sendfile(r0, r1, 0x0, 0x6)

[ 2759.005919] f2fs_msg: 22 callbacks suppressed
[ 2759.005933] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2759.021808] overlayfs: failed to resolve './file1': -2
[ 2759.049140] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2759.074546] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (2502146, 14)
23:08:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2759.100220] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2759.115140] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2759.138251] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:08:01 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x4000)
ftruncate(r1, 0x8200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002580)=[0x0])
pkey_mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff)
sendfile(r1, r3, 0x0, 0x8000ffffffff)

23:08:01 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x620000, 0x0)
splice(r1, &(0x7f0000000080)=0x44, r0, &(0x7f0000000180), 0x6, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2759.162796] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2759.196970] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (2502146, 14)
[ 2759.214769] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:08:01 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback={0x0, 0x2}}, 0x80, 0x0}}], 0x80000000000011a, 0x0)

23:08:01 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xa1, 0x95, &(0x7f0000000240)="e7eb866629e3e95d857703e19330f4b39b8be6f9a194e3902fc72b6f5ded72c9ac864337c4da6d840d2545dcde2ca30a064f549cfd46b8370952eeddcc92eedbb402b6c7a648a7efe5ff6ff4af5df902395ca127fa32c42b8e9d05da5d0faa0e5691ceb4a2923d0f23136138bd136a31c745ea0270d98ee240593310702fa7882aa78e15814ada4c43a501762abac1a3d9a191649ad6bae809e9ceaca0201a78de", &(0x7f0000000300)=""/149, 0xfffffffffffffffd}, 0x28)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x5, 0x1d, 0x7, 0x5, "24a5a6a81b822f0eb59b896b5c37c6f025f944cb2426ebd8666491559cb7d71f"})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2759.294179] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2759.302277] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2759.305911] audit: type=1804 audit(1555369681.903:121): pid=15800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir362355961/syzkaller.YQyN6B/2451/bus" dev="sda1" ino=16786 res=1
23:08:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2759.480285] QAT: Invalid ioctl
[ 2761.186511] Bluetooth: hci0: command 0x1003 tx timeout
[ 2761.192944] Bluetooth: hci0: sending frame failed (-49)
[ 2761.916481] net_ratelimit: 22 callbacks suppressed
[ 2761.916490] protocol 88fb is buggy, dev hsr_slave_0
[ 2761.926675] protocol 88fb is buggy, dev hsr_slave_1
[ 2762.546534] protocol 88fb is buggy, dev hsr_slave_0
[ 2762.551685] protocol 88fb is buggy, dev hsr_slave_1
[ 2763.026477] protocol 88fb is buggy, dev hsr_slave_0
[ 2763.031642] protocol 88fb is buggy, dev hsr_slave_1
[ 2763.036831] protocol 88fb is buggy, dev hsr_slave_0
[ 2763.041941] protocol 88fb is buggy, dev hsr_slave_1
[ 2763.047134] protocol 88fb is buggy, dev hsr_slave_0
[ 2763.052221] protocol 88fb is buggy, dev hsr_slave_1
[ 2763.276483] Bluetooth: hci0: command 0x1001 tx timeout
[ 2763.281904] Bluetooth: hci0: sending frame failed (-49)
[ 2765.346542] Bluetooth: hci0: command 0x1009 tx timeout
[ 2767.186450] net_ratelimit: 18 callbacks suppressed
[ 2767.191451] protocol 88fb is buggy, dev hsr_slave_0
[ 2767.196749] protocol 88fb is buggy, dev hsr_slave_1
[ 2767.201825] protocol 88fb is buggy, dev hsr_slave_0
[ 2767.206886] protocol 88fb is buggy, dev hsr_slave_1
[ 2767.212021] protocol 88fb is buggy, dev hsr_slave_0
[ 2767.217065] protocol 88fb is buggy, dev hsr_slave_1
[ 2767.506524] protocol 88fb is buggy, dev hsr_slave_0
[ 2767.511724] protocol 88fb is buggy, dev hsr_slave_1
[ 2768.146481] protocol 88fb is buggy, dev hsr_slave_0
[ 2768.151582] protocol 88fb is buggy, dev hsr_slave_1
23:08:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0xc0045878, &(0x7f0000000080))

23:08:11 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000023426000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:08:11 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
connect$ax25(r0, &(0x7f0000000080)={{0x3, @null}, [@default, @remote, @rose, @rose, @rose, @bcast, @rose, @default]}, 0x48)

23:08:11 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose, @default, @remote, @rose, @rose, @rose, @bcast]}, 0x48)

23:08:11 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=r1)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0)

23:08:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000340)=""/65, 0x41)

[ 2769.223811] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de
[ 2769.242166] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de
[ 2769.261920] f2fs_msg: 6 callbacks suppressed
[ 2769.261935] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2769.279211] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:08:11 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x21a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c)

[ 2769.319860] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (2503682, 14)
[ 2769.319974] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2769.335722] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:08:11 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:08:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

[ 2769.366144] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2769.396570] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:08:12 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x1020000000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2769.425585] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (2503682, 14)
[ 2769.439691] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2769.456924] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:08:12 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6)
write$binfmt_elf64(r0, 0x0, 0x0)
syz_execute_func(&(0x7f00000006c0)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f")
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = gettid()
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000))
tkill(r2, 0x8001004000000016)

23:08:12 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x3fc)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2769.565435] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2769.601543] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2771.346940] Bluetooth: hci0: command 0x1003 tx timeout
[ 2771.353153] Bluetooth: hci0: sending frame failed (-49)
[ 2772.306487] net_ratelimit: 22 callbacks suppressed
[ 2772.306495] protocol 88fb is buggy, dev hsr_slave_0
[ 2772.316751] protocol 88fb is buggy, dev hsr_slave_1
[ 2772.946494] protocol 88fb is buggy, dev hsr_slave_0
[ 2772.951584] protocol 88fb is buggy, dev hsr_slave_1
[ 2773.426532] protocol 88fb is buggy, dev hsr_slave_0
[ 2773.426541] Bluetooth: hci0: command 0x1001 tx timeout
[ 2773.436681] Bluetooth: hci0: sending frame failed (-49)
[ 2773.437088] protocol 88fb is buggy, dev hsr_slave_1
[ 2773.447534] protocol 88fb is buggy, dev hsr_slave_0
[ 2773.452572] protocol 88fb is buggy, dev hsr_slave_1
[ 2773.457703] protocol 88fb is buggy, dev hsr_slave_0
[ 2773.462858] protocol 88fb is buggy, dev hsr_slave_1
[ 2775.506534] Bluetooth: hci0: command 0x1009 tx timeout
[ 2777.586478] net_ratelimit: 18 callbacks suppressed
[ 2777.591601] protocol 88fb is buggy, dev hsr_slave_0
[ 2777.596702] protocol 88fb is buggy, dev hsr_slave_1
[ 2777.601867] protocol 88fb is buggy, dev hsr_slave_0
[ 2777.606962] protocol 88fb is buggy, dev hsr_slave_1
[ 2777.612110] protocol 88fb is buggy, dev hsr_slave_0
[ 2777.617212] protocol 88fb is buggy, dev hsr_slave_1
[ 2777.906478] protocol 88fb is buggy, dev hsr_slave_0
[ 2777.911624] protocol 88fb is buggy, dev hsr_slave_1
[ 2778.546464] protocol 88fb is buggy, dev hsr_slave_0
[ 2778.551618] protocol 88fb is buggy, dev hsr_slave_1
23:08:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0xc0189436, &(0x7f0000000080))

23:08:22 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:08:22 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002042b000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:08:22 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00')
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x43, [], 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f00000002c0)=""/67}, &(0x7f0000000400)=0x78)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r2, 0xf00, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:08:22 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:08:22 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

[ 2779.482877] f2fs_msg: 6 callbacks suppressed
[ 2779.482890] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2779.509529] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:08:22 executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2779.543638] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (2819074, 14)
[ 2779.573481] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2779.584719] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2779.594122] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2779.603704] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2779.612276] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (2819074, 14)
[ 2779.621372] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:08:22 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3, 0x4)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

23:08:22 executing program 0:
fanotify_init(0x12, 0x0)
r0 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340))
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
connect$ax25(r0, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
io_setup(0x7, &(0x7f0000000000)=<r2=>0x0)
io_pgetevents(r2, 0x0, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={0xb}, 0x8})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2779.692555] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2779.704720] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:08:22 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002002c000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:08:22 executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:08:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 2780.058750] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2781.586538] Bluetooth: hci0: command 0x1003 tx timeout
[ 2781.591951] Bluetooth: hci0: sending frame failed (-49)
[ 2782.066674] Bluetooth: hci1: command 0x1003 tx timeout
[ 2782.072226] Bluetooth: hci1: sending frame failed (-49)
[ 2782.706481] net_ratelimit: 22 callbacks suppressed
[ 2782.706490] protocol 88fb is buggy, dev hsr_slave_0
[ 2782.716655] protocol 88fb is buggy, dev hsr_slave_1
[ 2783.346529] protocol 88fb is buggy, dev hsr_slave_0
[ 2783.351682] protocol 88fb is buggy, dev hsr_slave_1
[ 2783.666547] Bluetooth: hci0: command 0x1001 tx timeout
[ 2783.672011] Bluetooth: hci0: sending frame failed (-49)
[ 2783.826455] protocol 88fb is buggy, dev hsr_slave_0
[ 2783.831594] protocol 88fb is buggy, dev hsr_slave_1
[ 2783.836791] protocol 88fb is buggy, dev hsr_slave_0
[ 2783.841855] protocol 88fb is buggy, dev hsr_slave_1
[ 2783.847070] protocol 88fb is buggy, dev hsr_slave_0
[ 2783.852170] protocol 88fb is buggy, dev hsr_slave_1
[ 2784.146461] Bluetooth: hci1: command 0x1001 tx timeout
[ 2784.151876] Bluetooth: hci1: sending frame failed (-49)
[ 2785.746461] Bluetooth: hci0: command 0x1009 tx timeout
[ 2786.226598] Bluetooth: hci1: command 0x1009 tx timeout
[ 2787.986462] net_ratelimit: 18 callbacks suppressed
[ 2787.991496] protocol 88fb is buggy, dev hsr_slave_0
[ 2787.996598] protocol 88fb is buggy, dev hsr_slave_1
[ 2788.001704] protocol 88fb is buggy, dev hsr_slave_0
[ 2788.006789] protocol 88fb is buggy, dev hsr_slave_1
[ 2788.011894] protocol 88fb is buggy, dev hsr_slave_0
[ 2788.016978] protocol 88fb is buggy, dev hsr_slave_1
[ 2788.306465] protocol 88fb is buggy, dev hsr_slave_0
[ 2788.311553] protocol 88fb is buggy, dev hsr_slave_1
[ 2788.946472] protocol 88fb is buggy, dev hsr_slave_0
[ 2788.951561] protocol 88fb is buggy, dev hsr_slave_1
23:08:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0xc020660b, &(0x7f0000000080))

23:08:32 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x3)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:08:32 executing program 4:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:08:32 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002262e000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:08:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 2789.726807] f2fs_msg: 14 callbacks suppressed
[ 2789.726820] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:08:32 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2789.766993] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2789.772783] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2789.780729] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (3024386, 14)
[ 2789.802419] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2789.812804] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2789.824587] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2789.834489] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (3024386, 14)
[ 2789.853781] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2789.860047] overlayfs: failed to resolve './file1': -2
23:08:32 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
write$tun(r0, &(0x7f0000000180)={@val, @val={0x1, 0x80, 0x80, 0x2, 0x2, 0x32a9}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @broadcast, @mcast2, @broadcast, @loopback}}, 0x42)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0xb8b}, 0x28, 0x1)

23:08:32 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2789.867189] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2789.903506] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:08:32 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000022634000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2789.937130] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2789.975141] overlayfs: failed to resolve './file1': -2
23:08:32 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:08:32 executing program 0:
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, <r0=>0x0}, &(0x7f0000000080)=0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(r0, r1, r2)
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40000, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2790.102879] overlayfs: failed to resolve './file1': -2
23:08:32 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 2790.348167] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2791.826445] Bluetooth: hci2: command 0x1003 tx timeout
[ 2791.831959] Bluetooth: hci2: sending frame failed (-49)
[ 2791.906423] Bluetooth: hci0: command 0x1003 tx timeout
[ 2791.911929] Bluetooth: hci0: sending frame failed (-49)
[ 2792.386417] Bluetooth: hci1: command 0x1003 tx timeout
[ 2792.392036] Bluetooth: hci1: sending frame failed (-49)
[ 2793.106449] net_ratelimit: 22 callbacks suppressed
[ 2793.106455] protocol 88fb is buggy, dev hsr_slave_0
[ 2793.117427] protocol 88fb is buggy, dev hsr_slave_1
[ 2793.746458] protocol 88fb is buggy, dev hsr_slave_0
[ 2793.751750] protocol 88fb is buggy, dev hsr_slave_1
[ 2793.906442] Bluetooth: hci2: command 0x1001 tx timeout
[ 2793.911935] Bluetooth: hci2: sending frame failed (-49)
[ 2793.986461] Bluetooth: hci0: command 0x1001 tx timeout
[ 2793.991900] Bluetooth: hci0: sending frame failed (-49)
[ 2794.226475] protocol 88fb is buggy, dev hsr_slave_0
[ 2794.231565] protocol 88fb is buggy, dev hsr_slave_1
[ 2794.236771] protocol 88fb is buggy, dev hsr_slave_0
[ 2794.241823] protocol 88fb is buggy, dev hsr_slave_1
[ 2794.247003] protocol 88fb is buggy, dev hsr_slave_0
[ 2794.252064] protocol 88fb is buggy, dev hsr_slave_1
[ 2794.466596] Bluetooth: hci1: command 0x1001 tx timeout
[ 2794.472160] Bluetooth: hci1: sending frame failed (-49)
[ 2795.986492] Bluetooth: hci2: command 0x1009 tx timeout
[ 2796.066456] Bluetooth: hci0: command 0x1009 tx timeout
[ 2796.546503] Bluetooth: hci1: command 0x1009 tx timeout
[ 2798.386470] net_ratelimit: 18 callbacks suppressed
[ 2798.386476] protocol 88fb is buggy, dev hsr_slave_0
[ 2798.396917] protocol 88fb is buggy, dev hsr_slave_1
[ 2798.402364] protocol 88fb is buggy, dev hsr_slave_0
[ 2798.407990] protocol 88fb is buggy, dev hsr_slave_1
[ 2798.413164] protocol 88fb is buggy, dev hsr_slave_0
[ 2798.418306] protocol 88fb is buggy, dev hsr_slave_1
[ 2798.706483] protocol 88fb is buggy, dev hsr_slave_0
[ 2798.711598] protocol 88fb is buggy, dev hsr_slave_1
[ 2799.346478] protocol 88fb is buggy, dev hsr_slave_0
[ 2799.351578] protocol 88fb is buggy, dev hsr_slave_1
23:08:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)

23:08:42 executing program 0:
fanotify_init(0x0, 0x0)
r0 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000400)="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")
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000180)={0x81})
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14)
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000340)={0x6, 0x6, 0x5d, 0x1, 0x1000, 0x237b, 0x7ff})
fcntl$setflags(r1, 0x2, 0x1)
unshare(0x400)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={<r3=>0x0, 0x54, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x1, @empty, 0x757}, @in6={0xa, 0x4e23, 0x77d8, @local, 0x9}, @in6={0xa, 0x4e22, 0xfffffffffffffffe, @remote, 0x10001}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x4}, 0x8)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f0000000000)=0x80000000, 0x4)

23:08:42 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:08:42 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002003f000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:08:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:08:42 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200002, 0x0)
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000080)=0xae4)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x4, 0x92, 0x201e, 0x0, 0xb, 0x4, 0x3, 0x7}})

[ 2799.956160] f2fs_msg: 22 callbacks suppressed
[ 2799.956169] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2799.981254] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2799.982300] Bluetooth: hci0: Frame reassembly failed (-84)
23:08:42 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2800.001187] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2800.020284] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2800.028939] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4128770, 14)
[ 2800.038289] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2800.046248] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:08:42 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000180)=0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:08:42 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2800.053727] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2800.065257] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4128770, 14)
[ 2800.087609] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:08:42 executing program 0:
r0 = fanotify_init(0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000340)=0x18)
r1 = dup3(r0, r0, 0x80000)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="8f5c4ecafc9be9e3c26e559cc20dee0f385135e2214b1d7ffd71e6c16637a8e5e940c3e0f583c46478a10197d37d237b8de76ccb4564c8f78a08321984d5b14cd3988dd86cf72bdb2be289feb36772b98e7805630ced28f52fdd848301c456b16341881f8c0d5084a723d9714a7815897e9b214a2d742fd5eb69db20a4a18c05ebf5c166fc4480dcf31a36f4440d0b6b30ac60bf82adb986c996e74b608f0683be57235e2c29b3e9ec650250fceb9d201d8c21eae7f4fa8ed4c6219f9de126d23b4251f6ee94954397ef8cf11c376a15dadd8e57142d1a15b3d36726b3", 0xdd}], 0x1, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=<r2=>0x0)
fcntl$setown(r1, 0x8, r2)
accept4$nfc_llcp(r1, &(0x7f0000000380), &(0x7f0000000400)=0x60, 0x80000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xfffffffffffffffe, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/policy\x00', 0x0, 0x0)
write$9p(r3, &(0x7f0000000700)="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", 0xfe)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ff0000/0xd000)=nil, 0xfffffffffffffe00, 0x7, 0x60, &(0x7f0000ff9000/0x4000)=nil, 0xdd76})
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000680)={&(0x7f0000ffc000/0x3000)=nil, 0x8d0, 0x0, 0x20, &(0x7f0000ffc000/0x1000)=nil, 0x2})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
r4 = msgget(0x3, 0x101)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000540)=0xe8)
lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getegid()
msgctl$IPC_SET(r4, 0x1, &(0x7f0000000ac0)={{0x6, r5, r6, r7, r8, 0x68, 0xfffffffffffffff7}, 0x0, 0x28d, 0xaa4e, 0x7, 0x0, 0x6, r2, r2})
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20002040}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0xa9}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8000)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)

23:08:42 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2800.136296] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2800.145159] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:08:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 2800.579791] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2801.986454] Bluetooth: hci0: command 0x1003 tx timeout
[ 2801.991975] Bluetooth: hci0: sending frame failed (-49)
[ 2802.066606] Bluetooth: hci2: command 0x1003 tx timeout
[ 2802.072056] Bluetooth: hci2: sending frame failed (-49)
[ 2802.626421] Bluetooth: hci1: command 0x1003 tx timeout
[ 2802.631946] Bluetooth: hci1: sending frame failed (-49)
[ 2803.506446] net_ratelimit: 22 callbacks suppressed
[ 2803.506452] protocol 88fb is buggy, dev hsr_slave_0
[ 2803.516637] protocol 88fb is buggy, dev hsr_slave_1
[ 2804.066462] Bluetooth: hci0: command 0x1001 tx timeout
[ 2804.071888] Bluetooth: hci0: sending frame failed (-49)
[ 2804.146467] protocol 88fb is buggy, dev hsr_slave_0
[ 2804.146476] Bluetooth: hci2: command 0x1001 tx timeout
[ 2804.156978] protocol 88fb is buggy, dev hsr_slave_1
[ 2804.162231] Bluetooth: hci2: sending frame failed (-49)
[ 2804.626450] protocol 88fb is buggy, dev hsr_slave_0
[ 2804.631548] protocol 88fb is buggy, dev hsr_slave_1
[ 2804.636687] protocol 88fb is buggy, dev hsr_slave_0
[ 2804.644462] protocol 88fb is buggy, dev hsr_slave_1
[ 2804.649622] protocol 88fb is buggy, dev hsr_slave_0
[ 2804.654676] protocol 88fb is buggy, dev hsr_slave_1
[ 2804.706455] Bluetooth: hci1: command 0x1001 tx timeout
[ 2804.711897] Bluetooth: hci1: sending frame failed (-49)
[ 2806.146509] Bluetooth: hci0: command 0x1009 tx timeout
[ 2806.226726] Bluetooth: hci2: command 0x1009 tx timeout
[ 2806.786539] Bluetooth: hci1: command 0x1009 tx timeout
[ 2808.786470] net_ratelimit: 18 callbacks suppressed
[ 2808.786477] protocol 88fb is buggy, dev hsr_slave_0
[ 2808.796622] protocol 88fb is buggy, dev hsr_slave_1
[ 2808.801845] protocol 88fb is buggy, dev hsr_slave_0
[ 2808.807069] protocol 88fb is buggy, dev hsr_slave_1
[ 2808.812288] protocol 88fb is buggy, dev hsr_slave_0
[ 2808.817412] protocol 88fb is buggy, dev hsr_slave_1
[ 2809.106456] protocol 88fb is buggy, dev hsr_slave_0
[ 2809.111552] protocol 88fb is buggy, dev hsr_slave_1
[ 2809.746483] protocol 88fb is buggy, dev hsr_slave_0
[ 2809.751806] protocol 88fb is buggy, dev hsr_slave_1
23:08:52 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020040000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:08:52 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = getpgid(0xffffffffffffffff)
sched_getscheduler(r1)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000240)=""/168, &(0x7f0000000180)=0xa8)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200000, 0x0)
ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000080)={0x6, 0x1, 0x3})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x12000, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:08:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1d)

23:08:52 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:08:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 2810.193556] f2fs_msg: 6 callbacks suppressed
[ 2810.193569] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2810.248050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2810.276932] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2810.283278] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4194306, 14)
23:08:52 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2810.291783] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2810.300107] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2810.319413] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2810.333058] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4194306, 14)
[ 2810.340888] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:08:52 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

23:08:53 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2810.349008] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2810.387128] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2810.422008] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2810.436543] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2810.468336] overlayfs: missing 'lowerdir'
23:08:53 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:08:53 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020048000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:08:53 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000180)=""/73, &(0x7f0000000000)=0x49)

[ 2810.592816] overlayfs: missing 'lowerdir'
23:08:53 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:08:53 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002004c000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:08:53 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2810.827343] overlayfs: missing 'lowerdir'
[ 2812.316536] Bluetooth: hci0: command 0x1003 tx timeout
[ 2812.322045] Bluetooth: hci0: sending frame failed (-49)
[ 2812.386493] Bluetooth: hci2: command 0x1003 tx timeout
[ 2812.391954] Bluetooth: hci2: sending frame failed (-49)
[ 2813.906510] net_ratelimit: 22 callbacks suppressed
[ 2813.906519] protocol 88fb is buggy, dev hsr_slave_0
[ 2813.916620] protocol 88fb is buggy, dev hsr_slave_1
[ 2814.386534] Bluetooth: hci0: command 0x1001 tx timeout
[ 2814.391961] Bluetooth: hci0: sending frame failed (-49)
[ 2814.466490] Bluetooth: hci2: command 0x1001 tx timeout
[ 2814.472005] Bluetooth: hci2: sending frame failed (-49)
[ 2814.546493] protocol 88fb is buggy, dev hsr_slave_0
[ 2814.551594] protocol 88fb is buggy, dev hsr_slave_1
[ 2815.026475] protocol 88fb is buggy, dev hsr_slave_0
[ 2815.031681] protocol 88fb is buggy, dev hsr_slave_1
[ 2815.036877] protocol 88fb is buggy, dev hsr_slave_0
[ 2815.041981] protocol 88fb is buggy, dev hsr_slave_1
[ 2815.047193] protocol 88fb is buggy, dev hsr_slave_0
[ 2815.052232] protocol 88fb is buggy, dev hsr_slave_1
[ 2816.466597] Bluetooth: hci0: command 0x1009 tx timeout
[ 2816.546506] Bluetooth: hci2: command 0x1009 tx timeout
[ 2819.186488] net_ratelimit: 18 callbacks suppressed
[ 2819.191481] protocol 88fb is buggy, dev hsr_slave_0
[ 2819.196547] protocol 88fb is buggy, dev hsr_slave_1
[ 2819.201648] protocol 88fb is buggy, dev hsr_slave_0
[ 2819.206708] protocol 88fb is buggy, dev hsr_slave_1
[ 2819.211818] protocol 88fb is buggy, dev hsr_slave_0
[ 2819.216880] protocol 88fb is buggy, dev hsr_slave_1
[ 2819.506496] protocol 88fb is buggy, dev hsr_slave_0
[ 2819.511613] protocol 88fb is buggy, dev hsr_slave_1
[ 2820.146446] protocol 88fb is buggy, dev hsr_slave_0
[ 2820.151579] protocol 88fb is buggy, dev hsr_slave_1
23:09:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf00)

23:09:03 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40400)
ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000080)={0x2, 0x5, 0x5a54})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
accept$packet(r2, &(0x7f0000001cc0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001d00)=0x14)
fstat(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001dc0)={{{@in6=@mcast2, @in=@local, 0x4e22, 0x0, 0x4e20, 0x9, 0xa, 0xa0, 0xa0, 0x7f, r3, r4}, {0x0, 0x401, 0xffffffffffffffed, 0x4, 0x86, 0x51d0, 0xe7, 0x470}, {0xed1, 0x6, 0x9, 0x401}, 0xd6, 0x6e6bb8, 0x2, 0x0, 0x2, 0x3}, {{@in=@multicast2, 0x4d3, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3506, 0x3, 0x2, 0xff, 0x7fffffff, 0x3, 0x8000}}, 0xe8)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:09:03 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:09:03 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:09:03 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020060000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:09:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 2820.470787] overlayfs: missing 'lowerdir'
23:09:03 executing program 0:
r0 = fanotify_init(0x6, 0x1)
r1 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x8, 0x7d)
r2 = fcntl$dupfd(r0, 0x406, r1)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0)
ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000080)=0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r5 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x3f, 0x28000)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'gretap0\x00', @ifru_hwaddr=@local}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000300))
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x60001, 0x0)
write$P9_RSETATTR(r3, &(0x7f00000002c0)={0x7, 0x1b, 0x2}, 0x7)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x42)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2820.491775] f2fs_msg: 30 callbacks suppressed
[ 2820.491791] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2820.525626] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:09:03 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:09:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 2820.552338] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2820.560600] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6291458, 14)
[ 2820.589497] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2820.634357] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2820.670564] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:09:03 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2820.686622] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6291458, 14)
23:09:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 2820.735658] overlayfs: missing 'lowerdir'
[ 2820.738271] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:09:03 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00024038000100240001006f6f746966795f70656572735f636f756e740000000000000000000008005e0100fcffffc548110236a2dd8fb755ad738cd8aa8206f71f1e0218cb4746d248880f5b39e8f3b53a2961c5457f57d412be9f91d7ba156cf9a845d3efdea14442fee18194e696f313a0e35af85fe042453b674a34dc10badd1f36c1b3d8ab72f12dbfd45e5d944c9c935b7ba7dfc1213d3967614d86b90d9fcf2e66c7b6a0c2822a759d396c95791f68f88ac7ebbf10173437c2eca93d1ec2ffc1"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000240)=0x60, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000340)={0xfffffffffffffffb}, 0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2820.884632] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2820.926573] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2822.626424] Bluetooth: hci0: command 0x1003 tx timeout
[ 2822.631857] Bluetooth: hci0: sending frame failed (-49)
[ 2824.306469] net_ratelimit: 22 callbacks suppressed
[ 2824.311462] protocol 88fb is buggy, dev hsr_slave_0
[ 2824.316575] protocol 88fb is buggy, dev hsr_slave_1
[ 2824.706557] Bluetooth: hci0: command 0x1001 tx timeout
[ 2824.711972] Bluetooth: hci0: sending frame failed (-49)
[ 2824.946528] protocol 88fb is buggy, dev hsr_slave_0
[ 2824.951677] protocol 88fb is buggy, dev hsr_slave_1
[ 2825.426513] protocol 88fb is buggy, dev hsr_slave_0
[ 2825.431626] protocol 88fb is buggy, dev hsr_slave_1
[ 2825.436748] protocol 88fb is buggy, dev hsr_slave_0
[ 2825.441813] protocol 88fb is buggy, dev hsr_slave_1
[ 2825.446897] protocol 88fb is buggy, dev hsr_slave_0
[ 2825.452098] protocol 88fb is buggy, dev hsr_slave_1
[ 2826.786503] Bluetooth: hci0: command 0x1009 tx timeout
[ 2829.586454] net_ratelimit: 18 callbacks suppressed
[ 2829.586462] protocol 88fb is buggy, dev hsr_slave_0
[ 2829.596563] protocol 88fb is buggy, dev hsr_slave_1
[ 2829.601644] protocol 88fb is buggy, dev hsr_slave_0
[ 2829.606762] protocol 88fb is buggy, dev hsr_slave_1
[ 2829.611870] protocol 88fb is buggy, dev hsr_slave_0
[ 2829.616979] protocol 88fb is buggy, dev hsr_slave_1
[ 2829.906448] protocol 88fb is buggy, dev hsr_slave_0
[ 2829.911622] protocol 88fb is buggy, dev hsr_slave_1
[ 2830.546449] protocol 88fb is buggy, dev hsr_slave_0
[ 2830.551556] protocol 88fb is buggy, dev hsr_slave_1
23:09:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1d00)

23:09:13 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:09:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:09:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:09:13 executing program 0:
fanotify_init(0x10, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x1}, 0x28, 0x1)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:09:13 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020463000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2830.700507] f2fs_msg: 6 callbacks suppressed
[ 2830.700521] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2830.722654] overlayfs: missing 'lowerdir'
23:09:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:09:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 2830.747903] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2830.755966] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2830.767594] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6489090, 14)
23:09:13 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2830.801743] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2830.840046] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:09:13 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:09:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 2830.863264] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2830.884436] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6489090, 14)
[ 2830.897471] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:09:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 2830.952567] overlayfs: missing 'lowerdir'
[ 2830.979326] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2831.022370] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2832.786475] Bluetooth: hci0: command 0x1003 tx timeout
[ 2832.792039] Bluetooth: hci0: sending frame failed (-49)
[ 2834.706487] net_ratelimit: 22 callbacks suppressed
[ 2834.711513] protocol 88fb is buggy, dev hsr_slave_0
[ 2834.716861] protocol 88fb is buggy, dev hsr_slave_1
[ 2834.866460] Bluetooth: hci0: command 0x1001 tx timeout
[ 2834.872061] Bluetooth: hci0: sending frame failed (-49)
[ 2835.346449] protocol 88fb is buggy, dev hsr_slave_0
[ 2835.351593] protocol 88fb is buggy, dev hsr_slave_1
[ 2835.826483] protocol 88fb is buggy, dev hsr_slave_0
[ 2835.831619] protocol 88fb is buggy, dev hsr_slave_1
[ 2835.836753] protocol 88fb is buggy, dev hsr_slave_0
[ 2835.841872] protocol 88fb is buggy, dev hsr_slave_1
[ 2835.846976] protocol 88fb is buggy, dev hsr_slave_0
[ 2835.852044] protocol 88fb is buggy, dev hsr_slave_1
[ 2836.946520] Bluetooth: hci0: command 0x1009 tx timeout
[ 2839.986512] net_ratelimit: 18 callbacks suppressed
[ 2839.991525] protocol 88fb is buggy, dev hsr_slave_0
[ 2839.996660] protocol 88fb is buggy, dev hsr_slave_1
[ 2840.001924] protocol 88fb is buggy, dev hsr_slave_0
[ 2840.007026] protocol 88fb is buggy, dev hsr_slave_1
[ 2840.012101] protocol 88fb is buggy, dev hsr_slave_0
[ 2840.017242] protocol 88fb is buggy, dev hsr_slave_1
[ 2840.306483] protocol 88fb is buggy, dev hsr_slave_0
[ 2840.311645] protocol 88fb is buggy, dev hsr_slave_1
23:09:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3f00)

23:09:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

23:09:23 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:09:23 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000))
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

23:09:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080))

23:09:23 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020464000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2840.898170] overlayfs: missing 'lowerdir'
[ 2840.905436] f2fs_msg: 6 callbacks suppressed
[ 2840.905445] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:09:23 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:09:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080))

23:09:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

23:09:23 executing program 0:
r0 = fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000280)={0x0, {{0xa, 0x4e20, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20}}}, 0x88)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x20301)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000014c0)={0x0, 0xffffffffffffffff, 0x1000, 0xffff, @buffer={0x0, 0x5a, &(0x7f0000000340)=""/90}, &(0x7f00000003c0)="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", &(0x7f00000013c0)=""/156, 0x538, 0x1, 0x3, &(0x7f0000001480)})
ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4000000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000200), 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x8004}, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000180)=""/94)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4)

[ 2840.946443] protocol 88fb is buggy, dev hsr_slave_0
[ 2840.947261] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2840.951532] protocol 88fb is buggy, dev hsr_slave_1
[ 2840.969471] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2840.983865] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6554626, 14)
23:09:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

[ 2841.005154] overlayfs: missing 'lowerdir'
[ 2841.020786] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2841.039455] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:09:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080))

[ 2841.061504] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2841.105103] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6554626, 14)
[ 2841.120149] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2841.180487] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2841.191802] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2842.946418] Bluetooth: hci0: command 0x1003 tx timeout
[ 2842.951856] Bluetooth: hci0: sending frame failed (-49)
[ 2845.026443] Bluetooth: hci0: command 0x1001 tx timeout
[ 2845.032092] Bluetooth: hci0: sending frame failed (-49)
[ 2845.106480] net_ratelimit: 22 callbacks suppressed
[ 2845.111621] protocol 88fb is buggy, dev hsr_slave_0
[ 2845.116733] protocol 88fb is buggy, dev hsr_slave_1
[ 2845.746497] protocol 88fb is buggy, dev hsr_slave_0
[ 2845.751627] protocol 88fb is buggy, dev hsr_slave_1
[ 2846.226466] protocol 88fb is buggy, dev hsr_slave_0
[ 2846.231594] protocol 88fb is buggy, dev hsr_slave_1
[ 2846.236754] protocol 88fb is buggy, dev hsr_slave_0
[ 2846.241870] protocol 88fb is buggy, dev hsr_slave_1
[ 2846.247037] protocol 88fb is buggy, dev hsr_slave_0
[ 2846.252228] protocol 88fb is buggy, dev hsr_slave_1
[ 2847.106447] Bluetooth: hci0: command 0x1009 tx timeout
[ 2850.386477] net_ratelimit: 18 callbacks suppressed
[ 2850.386483] protocol 88fb is buggy, dev hsr_slave_0
[ 2850.396563] protocol 88fb is buggy, dev hsr_slave_1
[ 2850.401663] protocol 88fb is buggy, dev hsr_slave_0
[ 2850.406768] protocol 88fb is buggy, dev hsr_slave_1
[ 2850.411867] protocol 88fb is buggy, dev hsr_slave_0
[ 2850.417003] protocol 88fb is buggy, dev hsr_slave_1
[ 2850.706512] protocol 88fb is buggy, dev hsr_slave_0
[ 2850.711624] protocol 88fb is buggy, dev hsr_slave_1
23:09:33 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x4000)

23:09:33 executing program 0:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x402040, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x10001, 0x101000000, 0x3, {0xb, @sdr={0x39565559, 0x200}}})
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000009c0)={0x1, 0x1, [0x3b, 0x0, 0x1ff, 0x1, 0x1, 0x0, 0x6, 0x7]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfc, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)={0x8, 0x0, [{0x17001, 0x8b, &(0x7f0000000180)=""/139}, {0x6000, 0xaa, &(0x7f0000000340)=""/170}, {0xf000, 0x15, &(0x7f0000000080)=""/21}, {0x7002, 0xfe, &(0x7f0000000400)=""/254}, {0x1000, 0x86, &(0x7f0000000500)=""/134}, {0x15001, 0x7, &(0x7f00000005c0)=""/7}, {0xf000, 0xa, &(0x7f0000000600)=""/10}, {0x13002, 0xc8, &(0x7f0000000640)=""/200}]})
r1 = request_key(&(0x7f0000000880)='syzkaller\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)='/dev/rtc#\x00', 0xfffffffffffffff8)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000940)='id_legacy\x00', &(0x7f0000000980)=@secondary='builtin_and_secondary_trusted\x00')
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc)

23:09:33 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:09:33 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

23:09:33 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080))

23:09:33 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020465000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2851.168362] overlayfs: unrecognized mount option "lowerdir" or missing value
[ 2851.175735] f2fs_msg: 6 callbacks suppressed
[ 2851.175750] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2851.201208] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2851.232392] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2851.238658] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2851.253083] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2851.254982] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6620162, 14)
23:09:33 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:09:33 executing program 0:
fanotify_init(0x0, 0x0)
syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x5)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x400)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)

[ 2851.282787] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2851.296044] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2851.307857] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2851.322900] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6620162, 14)
[ 2851.346493] protocol 88fb is buggy, dev hsr_slave_0
[ 2851.351696] protocol 88fb is buggy, dev hsr_slave_1
[ 2851.363822] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:09:34 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:09:34 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fanotify_init(0x0, 0x0)
r2 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={<r3=>0x0}, &(0x7f0000000240)=0xc)
r4 = getpgid(0x0)
kcmp(r3, r4, 0x3, r1, r2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
unshare(0x60000)
pselect6(0x40, &(0x7f0000000140)={0x1ff}, 0x0, 0x0, 0x0, 0x0)
signalfd(r5, &(0x7f0000000180)={0x20}, 0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000000)={<r7=>0x0, 0x3}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000001c0)={r7, 0x80e, 0x3, 0x20, 0x577, 0xb3}, 0x14)
ioctl$RTC_UIE_ON(r2, 0x7003)
socket$vsock_stream(0x28, 0x1, 0x0)

[ 2851.393269] overlayfs: unrecognized mount option "lowerdir" or missing value
23:09:34 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc5}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8000)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2851.458059] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2851.490347] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:09:34 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020466000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2851.536563] overlayfs: unrecognized mount option "lowerdir" or missing value
[ 2853.266454] Bluetooth: hci0: command 0x1003 tx timeout
[ 2853.266461] Bluetooth: hci2: command 0x1003 tx timeout
[ 2853.266499] Bluetooth: hci1: command 0x1003 tx timeout
[ 2853.272018] Bluetooth: hci2: sending frame failed (-49)
[ 2853.287928] Bluetooth: hci0: sending frame failed (-49)
[ 2853.290910] Bluetooth: hci1: sending frame failed (-49)
[ 2855.346539] Bluetooth: hci1: command 0x1001 tx timeout
[ 2855.346558] Bluetooth: hci0: command 0x1001 tx timeout
[ 2855.351951] Bluetooth: hci1: sending frame failed (-49)
[ 2855.363024] Bluetooth: hci2: command 0x1001 tx timeout
[ 2855.363082] Bluetooth: hci0: sending frame failed (-49)
[ 2855.368425] Bluetooth: hci2: sending frame failed (-49)
[ 2855.506488] net_ratelimit: 22 callbacks suppressed
[ 2855.511472] protocol 88fb is buggy, dev hsr_slave_0
[ 2855.516561] protocol 88fb is buggy, dev hsr_slave_1
[ 2856.146544] protocol 88fb is buggy, dev hsr_slave_0
[ 2856.151722] protocol 88fb is buggy, dev hsr_slave_1
[ 2856.626468] protocol 88fb is buggy, dev hsr_slave_0
[ 2856.631551] protocol 88fb is buggy, dev hsr_slave_1
[ 2856.636717] protocol 88fb is buggy, dev hsr_slave_0
[ 2856.641767] protocol 88fb is buggy, dev hsr_slave_1
[ 2856.646909] protocol 88fb is buggy, dev hsr_slave_0
[ 2856.651957] protocol 88fb is buggy, dev hsr_slave_1
[ 2857.426521] Bluetooth: hci2: command 0x1009 tx timeout
[ 2857.426528] Bluetooth: hci0: command 0x1009 tx timeout
[ 2857.426571] Bluetooth: hci1: command 0x1009 tx timeout
[ 2860.786505] net_ratelimit: 18 callbacks suppressed
[ 2860.786510] protocol 88fb is buggy, dev hsr_slave_0
[ 2860.796565] protocol 88fb is buggy, dev hsr_slave_1
[ 2860.801665] protocol 88fb is buggy, dev hsr_slave_0
[ 2860.806766] protocol 88fb is buggy, dev hsr_slave_1
[ 2860.811849] protocol 88fb is buggy, dev hsr_slave_0
[ 2860.816967] protocol 88fb is buggy, dev hsr_slave_1
[ 2861.106450] protocol 88fb is buggy, dev hsr_slave_0
[ 2861.111571] protocol 88fb is buggy, dev hsr_slave_1
23:09:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1000000)

23:09:44 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,wor'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:09:44 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020467000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:09:44 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x140, &(0x7f0000000080)={@local, @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0)

23:09:44 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

23:09:44 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080))

[ 2861.443666] overlayfs: unrecognized mount option "wor" or missing value
[ 2861.481345] f2fs_msg: 22 callbacks suppressed
[ 2861.481361] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:09:44 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2fffffffe}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd})

[ 2861.503232] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2861.509772] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2861.531711] Bluetooth: hci0: Frame reassembly failed (-84)
23:09:44 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,wor'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2861.572145] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2861.587207] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6751234, 14)
[ 2861.590656] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2861.597721] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2861.609812] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2861.618145] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2861.627553] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6751234, 14)
[ 2861.643422] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2861.654682] overlayfs: unrecognized mount option "wor" or missing value
23:09:44 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,wor'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:09:44 executing program 0:
r0 = socket(0x0, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
unshare(0x400)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(r1, 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$VT_OPENQRY(r1, 0x5600, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(r0, 0x9)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xb)
socket$inet_tcp(0x2, 0x1, 0x0)

[ 2861.697362] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2861.704775] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:09:44 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020068000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2861.746481] protocol 88fb is buggy, dev hsr_slave_0
[ 2861.751676] protocol 88fb is buggy, dev hsr_slave_1
[ 2861.781293] overlayfs: unrecognized mount option "wor" or missing value
23:09:44 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=.'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2861.926794] overlayfs: workdir and upperdir must be separate subtrees
[ 2863.506424] Bluetooth: hci1: command 0x1003 tx timeout
[ 2863.511880] Bluetooth: hci1: sending frame failed (-49)
[ 2863.586420] Bluetooth: hci2: command 0x1003 tx timeout
[ 2863.586450] Bluetooth: hci0: command 0x1003 tx timeout
[ 2863.591950] Bluetooth: hci2: sending frame failed (-49)
[ 2863.603227] Bluetooth: hci0: sending frame failed (-49)
[ 2865.586515] Bluetooth: hci1: command 0x1001 tx timeout
[ 2865.592680] Bluetooth: hci1: sending frame failed (-49)
[ 2865.666531] Bluetooth: hci0: command 0x1001 tx timeout
[ 2865.671927] Bluetooth: hci0: sending frame failed (-49)
[ 2865.677528] Bluetooth: hci2: command 0x1001 tx timeout
[ 2865.682883] Bluetooth: hci2: sending frame failed (-49)
[ 2865.906456] net_ratelimit: 22 callbacks suppressed
[ 2865.911435] protocol 88fb is buggy, dev hsr_slave_0
[ 2865.916556] protocol 88fb is buggy, dev hsr_slave_1
[ 2866.546540] protocol 88fb is buggy, dev hsr_slave_0
[ 2866.551713] protocol 88fb is buggy, dev hsr_slave_1
[ 2867.026452] protocol 88fb is buggy, dev hsr_slave_0
[ 2867.031611] protocol 88fb is buggy, dev hsr_slave_1
[ 2867.036752] protocol 88fb is buggy, dev hsr_slave_0
[ 2867.041838] protocol 88fb is buggy, dev hsr_slave_1
[ 2867.046976] protocol 88fb is buggy, dev hsr_slave_0
[ 2867.052075] protocol 88fb is buggy, dev hsr_slave_1
[ 2867.666517] Bluetooth: hci1: command 0x1009 tx timeout
[ 2867.746486] Bluetooth: hci2: command 0x1009 tx timeout
[ 2867.746541] Bluetooth: hci0: command 0x1009 tx timeout
[ 2871.186441] net_ratelimit: 18 callbacks suppressed
[ 2871.186456] protocol 88fb is buggy, dev hsr_slave_0
[ 2871.196561] protocol 88fb is buggy, dev hsr_slave_1
[ 2871.201655] protocol 88fb is buggy, dev hsr_slave_0
[ 2871.206735] protocol 88fb is buggy, dev hsr_slave_1
[ 2871.211827] protocol 88fb is buggy, dev hsr_slave_0
[ 2871.216933] protocol 88fb is buggy, dev hsr_slave_1
[ 2871.506504] protocol 88fb is buggy, dev hsr_slave_0
[ 2871.511623] protocol 88fb is buggy, dev hsr_slave_1
23:09:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf000000)

23:09:54 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=.'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:09:54 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020468000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:09:54 executing program 0:
r0 = socket(0x0, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
unshare(0x400)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(r1, 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$VT_OPENQRY(r1, 0x5600, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(r0, 0x9)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xb)
socket$inet_tcp(0x2, 0x1, 0x0)

23:09:54 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080))

23:09:54 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[ 2871.654355] overlayfs: workdir and upperdir must be separate subtrees
[ 2871.700442] f2fs_msg: 22 callbacks suppressed
[ 2871.700471] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2871.726903] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2871.730079] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2871.756607] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2871.766067] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2871.767771] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6816770, 14)
[ 2871.780145] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2871.782185] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2871.788440] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:09:54 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=.'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2871.801495] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2871.810963] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6816770, 14)
[ 2871.819298] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:09:54 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./fi'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2871.879436] overlayfs: workdir and upperdir must be separate subtrees
23:09:54 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./fi'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2871.952754] overlayfs: failed to resolve './fi': -2
23:09:54 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./fi'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2872.073706] overlayfs: failed to resolve './fi': -2
[ 2872.089888] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2872.116984] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2872.146482] protocol 88fb is buggy, dev hsr_slave_0
[ 2872.151630] protocol 88fb is buggy, dev hsr_slave_1
23:09:54 executing program 0:
r0 = socket(0x0, 0x0, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
unshare(0x400)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(r1, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$VT_OPENQRY(r1, 0x5600, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

23:09:54 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020469000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2872.209197] overlayfs: failed to resolve './fi': -2
[ 2873.746418] Bluetooth: hci0: command 0x1003 tx timeout
[ 2873.752228] Bluetooth: hci0: sending frame failed (-49)
[ 2873.836428] Bluetooth: hci1: command 0x1003 tx timeout
[ 2873.842082] Bluetooth: hci1: sending frame failed (-49)
[ 2873.847768] Bluetooth: hci2: command 0x1003 tx timeout
[ 2873.853216] Bluetooth: hci2: sending frame failed (-49)
[ 2875.826472] Bluetooth: hci0: command 0x1001 tx timeout
[ 2875.832933] Bluetooth: hci0: sending frame failed (-49)
[ 2875.906486] Bluetooth: hci2: command 0x1001 tx timeout
[ 2875.911851] Bluetooth: hci1: command 0x1001 tx timeout
[ 2875.911935] Bluetooth: hci2: sending frame failed (-49)
[ 2875.923649] Bluetooth: hci1: sending frame failed (-49)
[ 2876.306435] net_ratelimit: 22 callbacks suppressed
[ 2876.311445] protocol 88fb is buggy, dev hsr_slave_0
[ 2876.316544] protocol 88fb is buggy, dev hsr_slave_1
[ 2876.946505] protocol 88fb is buggy, dev hsr_slave_0
[ 2876.951648] protocol 88fb is buggy, dev hsr_slave_1
[ 2877.426524] protocol 88fb is buggy, dev hsr_slave_0
[ 2877.431600] protocol 88fb is buggy, dev hsr_slave_1
[ 2877.436753] protocol 88fb is buggy, dev hsr_slave_0
[ 2877.441806] protocol 88fb is buggy, dev hsr_slave_1
[ 2877.446947] protocol 88fb is buggy, dev hsr_slave_0
[ 2877.452008] protocol 88fb is buggy, dev hsr_slave_1
[ 2877.906478] Bluetooth: hci0: command 0x1009 tx timeout
[ 2877.986550] Bluetooth: hci1: command 0x1009 tx timeout
[ 2877.991905] Bluetooth: hci2: command 0x1009 tx timeout
[ 2881.586471] net_ratelimit: 18 callbacks suppressed
[ 2881.586477] protocol 88fb is buggy, dev hsr_slave_0
[ 2881.596631] protocol 88fb is buggy, dev hsr_slave_1
[ 2881.601750] protocol 88fb is buggy, dev hsr_slave_0
[ 2881.606885] protocol 88fb is buggy, dev hsr_slave_1
[ 2881.612007] protocol 88fb is buggy, dev hsr_slave_0
[ 2881.617152] protocol 88fb is buggy, dev hsr_slave_1
23:10:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1d000000)

23:10:04 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:04 executing program 0:
setuid(0xee01)
syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0)

23:10:04 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002046a000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:10:04 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080))

23:10:04 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[ 2881.901580] overlayfs: failed to resolve './file': -2
[ 2881.906996] protocol 88fb is buggy, dev hsr_slave_0
[ 2881.907061] protocol 88fb is buggy, dev hsr_slave_1
23:10:04 executing program 0:
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x100, @loopback}, 0xffffffffffffff32)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000000100)={'U+', 0x572}, 0x28, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000000c0), 0x235)

[ 2881.943318] f2fs_msg: 22 callbacks suppressed
[ 2881.943334] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2882.005102] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2882.023432] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6947842, 14)
[ 2882.035984] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2882.036313] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2882.062327] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2882.068482] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2882.072443] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2882.074243] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2882.096166] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:10:04 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070")
r1 = socket(0x2, 0x802, 0x88)
r2 = socket$netlink(0x10, 0x3, 0x4)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
writev(r2, &(0x7f0000fb1000)=[{&(0x7f00000001c0)="480000001400197f09004b0109048c590a88bfffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e0000000000d5a49b19007a9eace3dbe8b12c000000000000000000", 0x48}], 0x1)

23:10:04 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2882.118939] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2882.141346] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (6947842, 14)
[ 2882.155627] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2882.162660] overlayfs: failed to resolve './file': -2
[ 2882.224203] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2882.257041] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:10:04 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2882.290987] overlayfs: failed to resolve './file': -2
23:10:04 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002046b000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2882.556503] protocol 88fb is buggy, dev hsr_slave_0
[ 2882.561654] protocol 88fb is buggy, dev hsr_slave_1
[ 2884.066559] Bluetooth: hci1: command 0x1003 tx timeout
[ 2884.072082] Bluetooth: hci1: sending frame failed (-49)
[ 2884.077753] Bluetooth: hci0: command 0x1003 tx timeout
[ 2884.083187] Bluetooth: hci0: sending frame failed (-49)
[ 2884.146728] Bluetooth: hci2: command 0x1003 tx timeout
[ 2884.152153] Bluetooth: hci2: sending frame failed (-49)
[ 2886.146516] Bluetooth: hci0: command 0x1001 tx timeout
[ 2886.146568] Bluetooth: hci1: command 0x1001 tx timeout
[ 2886.151938] Bluetooth: hci0: sending frame failed (-49)
[ 2886.162644] Bluetooth: hci1: sending frame failed (-49)
[ 2886.226483] Bluetooth: hci2: command 0x1001 tx timeout
[ 2886.231945] Bluetooth: hci2: sending frame failed (-49)
[ 2886.706485] net_ratelimit: 22 callbacks suppressed
[ 2886.706492] protocol 88fb is buggy, dev hsr_slave_0
[ 2886.716605] protocol 88fb is buggy, dev hsr_slave_1
[ 2887.346472] protocol 88fb is buggy, dev hsr_slave_0
[ 2887.351681] protocol 88fb is buggy, dev hsr_slave_1
[ 2887.826425] protocol 88fb is buggy, dev hsr_slave_0
[ 2887.831766] protocol 88fb is buggy, dev hsr_slave_1
[ 2887.836881] protocol 88fb is buggy, dev hsr_slave_0
[ 2887.841945] protocol 88fb is buggy, dev hsr_slave_1
[ 2887.847037] protocol 88fb is buggy, dev hsr_slave_0
[ 2887.852107] protocol 88fb is buggy, dev hsr_slave_1
[ 2888.226478] Bluetooth: hci1: command 0x1009 tx timeout
[ 2888.226590] Bluetooth: hci0: command 0x1009 tx timeout
[ 2888.306445] Bluetooth: hci2: command 0x1009 tx timeout
[ 2891.986437] net_ratelimit: 18 callbacks suppressed
[ 2891.986443] protocol 88fb is buggy, dev hsr_slave_0
[ 2891.996554] protocol 88fb is buggy, dev hsr_slave_1
[ 2892.001653] protocol 88fb is buggy, dev hsr_slave_0
[ 2892.006765] protocol 88fb is buggy, dev hsr_slave_1
[ 2892.011862] protocol 88fb is buggy, dev hsr_slave_0
[ 2892.016970] protocol 88fb is buggy, dev hsr_slave_1
23:10:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3f000000)

23:10:14 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:14 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:14 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002006c000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2892.111887] f2fs_msg: 22 callbacks suppressed
[ 2892.111900] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2892.127437] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2892.156134] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (7077890, 14)
[ 2892.190396] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2892.206821] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2892.222887] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2892.239805] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2892.248352] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (7077890, 14)
[ 2892.255959] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2892.306453] protocol 88fb is buggy, dev hsr_slave_0
[ 2892.311609] protocol 88fb is buggy, dev hsr_slave_1
[ 2892.323619] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2892.331689] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:10:15 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:15 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080))

23:10:15 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

23:10:15 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:15 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002046c000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2892.763422] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2892.772809] Bluetooth: hci1: Frame reassembly failed (-84)
23:10:15 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:15 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:15 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002046d000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2892.946456] protocol 88fb is buggy, dev hsr_slave_0
[ 2892.951586] protocol 88fb is buggy, dev hsr_slave_1
[ 2894.236501] Bluetooth: hci0: command 0x1003 tx timeout
[ 2894.242030] Bluetooth: hci0: sending frame failed (-49)
[ 2894.786482] Bluetooth: hci1: command 0x1003 tx timeout
[ 2894.792040] Bluetooth: hci1: sending frame failed (-49)
[ 2894.876418] Bluetooth: hci2: command 0x1003 tx timeout
[ 2894.881998] Bluetooth: hci2: sending frame failed (-49)
[ 2896.306428] Bluetooth: hci0: command 0x1001 tx timeout
[ 2896.311851] Bluetooth: hci0: sending frame failed (-49)
[ 2896.866436] Bluetooth: hci1: command 0x1001 tx timeout
[ 2896.871877] Bluetooth: hci1: sending frame failed (-49)
[ 2896.946429] Bluetooth: hci2: command 0x1001 tx timeout
[ 2896.951848] Bluetooth: hci2: sending frame failed (-49)
[ 2897.106440] net_ratelimit: 22 callbacks suppressed
[ 2897.111437] protocol 88fb is buggy, dev hsr_slave_0
[ 2897.116548] protocol 88fb is buggy, dev hsr_slave_1
[ 2897.746544] protocol 88fb is buggy, dev hsr_slave_0
[ 2897.751706] protocol 88fb is buggy, dev hsr_slave_1
[ 2898.226441] protocol 88fb is buggy, dev hsr_slave_0
[ 2898.231576] protocol 88fb is buggy, dev hsr_slave_1
[ 2898.236727] protocol 88fb is buggy, dev hsr_slave_0
[ 2898.241806] protocol 88fb is buggy, dev hsr_slave_1
[ 2898.248341] protocol 88fb is buggy, dev hsr_slave_0
[ 2898.253442] protocol 88fb is buggy, dev hsr_slave_1
[ 2898.386495] Bluetooth: hci0: command 0x1009 tx timeout
[ 2898.946436] Bluetooth: hci1: command 0x1009 tx timeout
[ 2899.026399] Bluetooth: hci2: command 0x1009 tx timeout
23:10:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x40000000)

23:10:24 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:24 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:24 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002046e000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:10:25 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2902.377335] f2fs_msg: 38 callbacks suppressed
[ 2902.377349] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2902.389154] net_ratelimit: 18 callbacks suppressed
[ 2902.389162] protocol 88fb is buggy, dev hsr_slave_0
[ 2902.389223] protocol 88fb is buggy, dev hsr_slave_1
[ 2902.389339] protocol 88fb is buggy, dev hsr_slave_0
[ 2902.389387] protocol 88fb is buggy, dev hsr_slave_1
[ 2902.389493] protocol 88fb is buggy, dev hsr_slave_0
[ 2902.389548] protocol 88fb is buggy, dev hsr_slave_1
[ 2902.405809] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2902.434052] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (7209986, 14)
[ 2902.445523] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2902.453378] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2902.460537] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2902.468180] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (7209986, 14)
[ 2902.475648] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2902.531088] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2902.547120] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2902.706452] protocol 88fb is buggy, dev hsr_slave_0
[ 2902.711593] protocol 88fb is buggy, dev hsr_slave_1
23:10:25 executing program 2:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080))

23:10:25 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:25 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:25 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020074000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:10:25 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[ 2903.029592] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2903.046265] Bluetooth: hci1: Frame reassembly failed (-84)
23:10:25 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:25 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2903.083419] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2903.346464] protocol 88fb is buggy, dev hsr_slave_0
[ 2903.351657] protocol 88fb is buggy, dev hsr_slave_1
[ 2904.466459] Bluetooth: hci0: command 0x1003 tx timeout
[ 2904.471947] Bluetooth: hci0: sending frame failed (-49)
[ 2905.106465] Bluetooth: hci2: command 0x1003 tx timeout
[ 2905.111938] Bluetooth: hci2: sending frame failed (-49)
[ 2905.117565] Bluetooth: hci1: command 0x1003 tx timeout
[ 2905.123092] Bluetooth: hci1: sending frame failed (-49)
[ 2906.546427] Bluetooth: hci0: command 0x1001 tx timeout
[ 2906.551851] Bluetooth: hci0: sending frame failed (-49)
[ 2907.186434] Bluetooth: hci2: command 0x1001 tx timeout
[ 2907.186459] Bluetooth: hci1: command 0x1001 tx timeout
[ 2907.191866] Bluetooth: hci2: sending frame failed (-49)
[ 2907.197156] Bluetooth: hci1: sending frame failed (-49)
[ 2907.506458] net_ratelimit: 22 callbacks suppressed
[ 2907.511610] protocol 88fb is buggy, dev hsr_slave_0
[ 2907.516723] protocol 88fb is buggy, dev hsr_slave_1
[ 2908.146618] protocol 88fb is buggy, dev hsr_slave_0
[ 2908.151786] protocol 88fb is buggy, dev hsr_slave_1
[ 2908.626491] protocol 88fb is buggy, dev hsr_slave_0
[ 2908.631586] protocol 88fb is buggy, dev hsr_slave_1
[ 2908.636812] protocol 88fb is buggy, dev hsr_slave_0
[ 2908.641884] protocol 88fb is buggy, dev hsr_slave_1
[ 2908.647091] protocol 88fb is buggy, dev hsr_slave_0
[ 2908.652144] protocol 88fb is buggy, dev hsr_slave_1
[ 2908.657618] Bluetooth: hci0: command 0x1009 tx timeout
[ 2909.266453] Bluetooth: hci1: command 0x1009 tx timeout
[ 2909.266463] Bluetooth: hci2: command 0x1009 tx timeout
23:10:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xfeffffff)

23:10:35 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002007a000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:10:35 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:35 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2912.609170] f2fs_msg: 22 callbacks suppressed
[ 2912.609185] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2912.638536] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:10:35 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2912.655239] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (7995394, 14)
[ 2912.663305] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2912.671849] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2912.682216] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2912.690194] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2912.691221] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2912.699531] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (7995394, 14)
[ 2912.711776] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2912.786467] net_ratelimit: 18 callbacks suppressed
[ 2912.786475] protocol 88fb is buggy, dev hsr_slave_0
[ 2912.796652] protocol 88fb is buggy, dev hsr_slave_1
[ 2912.801836] protocol 88fb is buggy, dev hsr_slave_0
[ 2912.807001] protocol 88fb is buggy, dev hsr_slave_1
[ 2912.812172] protocol 88fb is buggy, dev hsr_slave_0
[ 2912.817317] protocol 88fb is buggy, dev hsr_slave_1
[ 2912.834210] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2912.851088] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2913.106460] protocol 88fb is buggy, dev hsr_slave_0
[ 2913.111676] protocol 88fb is buggy, dev hsr_slave_1
23:10:35 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080))

23:10:35 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:35 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:35 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002c0ed000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:10:35 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

23:10:35 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:35 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2913.252603] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2913.260325] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2913.297122] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2913.746441] protocol 88fb is buggy, dev hsr_slave_0
[ 2913.751584] protocol 88fb is buggy, dev hsr_slave_1
[ 2914.706446] Bluetooth: hci0: command 0x1003 tx timeout
[ 2914.711872] Bluetooth: hci0: sending frame failed (-49)
[ 2915.266415] Bluetooth: hci1: command 0x1003 tx timeout
[ 2915.272020] Bluetooth: hci1: sending frame failed (-49)
[ 2915.346432] Bluetooth: hci2: command 0x1003 tx timeout
[ 2915.351894] Bluetooth: hci2: sending frame failed (-49)
[ 2916.786474] Bluetooth: hci0: command 0x1001 tx timeout
[ 2916.791960] Bluetooth: hci0: sending frame failed (-49)
[ 2917.346601] Bluetooth: hci1: command 0x1001 tx timeout
[ 2917.352510] Bluetooth: hci1: sending frame failed (-49)
[ 2917.426500] Bluetooth: hci2: command 0x1001 tx timeout
[ 2917.432030] Bluetooth: hci2: sending frame failed (-49)
[ 2917.906462] net_ratelimit: 22 callbacks suppressed
[ 2917.906468] protocol 88fb is buggy, dev hsr_slave_0
[ 2917.916653] protocol 88fb is buggy, dev hsr_slave_1
[ 2918.546475] protocol 88fb is buggy, dev hsr_slave_0
[ 2918.551657] protocol 88fb is buggy, dev hsr_slave_1
[ 2918.866433] Bluetooth: hci0: command 0x1009 tx timeout
[ 2919.026458] protocol 88fb is buggy, dev hsr_slave_0
[ 2919.031554] protocol 88fb is buggy, dev hsr_slave_1
[ 2919.036704] protocol 88fb is buggy, dev hsr_slave_0
[ 2919.041736] protocol 88fb is buggy, dev hsr_slave_1
[ 2919.046849] protocol 88fb is buggy, dev hsr_slave_0
[ 2919.051894] protocol 88fb is buggy, dev hsr_slave_1
[ 2919.426470] Bluetooth: hci1: command 0x1009 tx timeout
[ 2919.506464] Bluetooth: hci2: command 0x1009 tx timeout
23:10:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xffffff7f)

23:10:45 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000201fe000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:10:45 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:45 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:45 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2922.821979] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2922.833082] f2fs_msg: 22 callbacks suppressed
[ 2922.833089] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2922.865527] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2922.874748] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (16646402, 14)
[ 2922.884070] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2922.892036] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2922.899897] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2922.907758] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (16646402, 14)
[ 2922.915558] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2922.952296] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2922.968343] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2923.186449] net_ratelimit: 18 callbacks suppressed
[ 2923.186455] protocol 88fb is buggy, dev hsr_slave_0
[ 2923.196568] protocol 88fb is buggy, dev hsr_slave_1
[ 2923.201665] protocol 88fb is buggy, dev hsr_slave_0
[ 2923.206730] protocol 88fb is buggy, dev hsr_slave_1
[ 2923.211897] protocol 88fb is buggy, dev hsr_slave_0
[ 2923.217092] protocol 88fb is buggy, dev hsr_slave_1
23:10:46 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:46 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:46 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080))

23:10:46 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020fff000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:10:46 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[ 2923.457224] overlayfs: failed to resolve './file1': -2
23:10:46 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2923.506444] protocol 88fb is buggy, dev hsr_slave_0
[ 2923.511594] protocol 88fb is buggy, dev hsr_slave_1
[ 2923.527907] Bluetooth: hci1: Frame reassembly failed (-84)
23:10:46 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2923.555059] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2923.561123] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2923.616850] overlayfs: failed to resolve './file1': -2
[ 2923.697480] overlayfs: missing 'lowerdir'
[ 2924.146443] protocol 88fb is buggy, dev hsr_slave_0
[ 2924.151815] protocol 88fb is buggy, dev hsr_slave_1
[ 2924.876454] Bluetooth: hci0: command 0x1003 tx timeout
[ 2924.882019] Bluetooth: hci0: sending frame failed (-49)
[ 2925.586432] Bluetooth: hci2: command 0x1003 tx timeout
[ 2925.586611] Bluetooth: hci1: command 0x1003 tx timeout
[ 2925.595025] Bluetooth: hci2: sending frame failed (-49)
[ 2925.597300] Bluetooth: hci1: sending frame failed (-49)
[ 2926.946553] Bluetooth: hci0: command 0x1001 tx timeout
[ 2926.952081] Bluetooth: hci0: sending frame failed (-49)
[ 2927.666471] Bluetooth: hci2: command 0x1001 tx timeout
[ 2927.670639] Bluetooth: hci1: command 0x1001 tx timeout
[ 2927.671979] Bluetooth: hci2: sending frame failed (-49)
[ 2927.677810] Bluetooth: hci1: sending frame failed (-49)
[ 2928.306482] net_ratelimit: 22 callbacks suppressed
[ 2928.306498] protocol 88fb is buggy, dev hsr_slave_0
[ 2928.316775] protocol 88fb is buggy, dev hsr_slave_1
[ 2928.946518] protocol 88fb is buggy, dev hsr_slave_0
[ 2928.951669] protocol 88fb is buggy, dev hsr_slave_1
[ 2929.026415] Bluetooth: hci0: command 0x1009 tx timeout
[ 2929.426478] protocol 88fb is buggy, dev hsr_slave_0
[ 2929.431577] protocol 88fb is buggy, dev hsr_slave_1
[ 2929.436811] protocol 88fb is buggy, dev hsr_slave_0
[ 2929.441860] protocol 88fb is buggy, dev hsr_slave_1
[ 2929.447042] protocol 88fb is buggy, dev hsr_slave_0
[ 2929.452079] protocol 88fb is buggy, dev hsr_slave_1
[ 2929.746466] Bluetooth: hci2: command 0x1009 tx timeout
[ 2929.746734] Bluetooth: hci1: command 0x1009 tx timeout
23:10:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xfffffffe)

23:10:55 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:55 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000040000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:10:55 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2933.076844] f2fs_msg: 22 callbacks suppressed
[ 2933.076859] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2933.097820] overlayfs: failed to resolve './file1': -2
[ 2933.099965] overlayfs: missing 'lowerdir'
23:10:55 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:10:55 executing program 0:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2933.142837] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2933.152457] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
[ 2933.165821] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2933.176834] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2933.184174] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:10:55 executing program 0:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2933.192363] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
[ 2933.202418] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2933.264722] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2933.279057] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2933.290847] overlayfs: missing 'lowerdir'
[ 2933.586456] net_ratelimit: 18 callbacks suppressed
[ 2933.586463] protocol 88fb is buggy, dev hsr_slave_0
[ 2933.596696] protocol 88fb is buggy, dev hsr_slave_1
[ 2933.601790] protocol 88fb is buggy, dev hsr_slave_0
[ 2933.606969] protocol 88fb is buggy, dev hsr_slave_1
[ 2933.612087] protocol 88fb is buggy, dev hsr_slave_0
[ 2933.617217] protocol 88fb is buggy, dev hsr_slave_1
23:10:56 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080))

23:10:56 executing program 0:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:10:56 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

23:10:56 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000100000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:10:56 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2933.705298] overlayfs: missing 'lowerdir'
[ 2933.743245] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2933.803383] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2933.809377] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2933.906566] protocol 88fb is buggy, dev hsr_slave_0
[ 2933.911719] protocol 88fb is buggy, dev hsr_slave_1
[ 2934.546528] protocol 88fb is buggy, dev hsr_slave_0
[ 2934.551667] protocol 88fb is buggy, dev hsr_slave_1
[ 2935.186524] Bluetooth: hci0: command 0x1003 tx timeout
[ 2935.191940] Bluetooth: hci0: sending frame failed (-49)
[ 2935.746446] Bluetooth: hci1: command 0x1003 tx timeout
[ 2935.751991] Bluetooth: hci1: sending frame failed (-49)
[ 2935.826442] Bluetooth: hci2: command 0x1003 tx timeout
[ 2935.831950] Bluetooth: hci2: sending frame failed (-49)
[ 2937.266736] Bluetooth: hci0: command 0x1001 tx timeout
[ 2937.272161] Bluetooth: hci0: sending frame failed (-49)
[ 2937.826475] Bluetooth: hci1: command 0x1001 tx timeout
[ 2937.831934] Bluetooth: hci1: sending frame failed (-49)
[ 2937.906451] Bluetooth: hci2: command 0x1001 tx timeout
[ 2937.911895] Bluetooth: hci2: sending frame failed (-49)
[ 2938.706452] net_ratelimit: 22 callbacks suppressed
[ 2938.711564] protocol 88fb is buggy, dev hsr_slave_0
[ 2938.716664] protocol 88fb is buggy, dev hsr_slave_1
[ 2939.346520] protocol 88fb is buggy, dev hsr_slave_0
[ 2939.346576] Bluetooth: hci0: command 0x1009 tx timeout
[ 2939.351669] protocol 88fb is buggy, dev hsr_slave_1
[ 2939.826462] protocol 88fb is buggy, dev hsr_slave_0
[ 2939.831561] protocol 88fb is buggy, dev hsr_slave_1
[ 2939.836763] protocol 88fb is buggy, dev hsr_slave_0
[ 2939.841826] protocol 88fb is buggy, dev hsr_slave_1
[ 2939.846986] protocol 88fb is buggy, dev hsr_slave_0
[ 2939.852081] protocol 88fb is buggy, dev hsr_slave_1
[ 2939.906490] Bluetooth: hci1: command 0x1009 tx timeout
[ 2939.986439] Bluetooth: hci2: command 0x1009 tx timeout
23:11:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x100000000000000)

23:11:05 executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:05 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:11:05 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002ffff1f0000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2943.307420] f2fs_msg: 22 callbacks suppressed
[ 2943.307436] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2943.341867] overlayfs: missing 'lowerdir'
23:11:05 executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:06 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2943.368480] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2943.386660] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (536870658, 14)
[ 2943.395270] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2943.404059] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2943.411357] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:11:06 executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2943.419137] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (536870658, 14)
[ 2943.427153] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2943.491454] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2943.503636] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2943.528587] overlayfs: missing 'lowerdir'
23:11:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:11:06 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:11:06 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:11:06 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000026b6b6b0000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2943.945623] overlayfs: failed to resolve './file1': -2
[ 2943.986476] net_ratelimit: 18 callbacks suppressed
[ 2943.986483] protocol 88fb is buggy, dev hsr_slave_0
[ 2943.996637] protocol 88fb is buggy, dev hsr_slave_1
[ 2944.001798] protocol 88fb is buggy, dev hsr_slave_0
[ 2944.007106] protocol 88fb is buggy, dev hsr_slave_1
[ 2944.012274] protocol 88fb is buggy, dev hsr_slave_0
[ 2944.017400] protocol 88fb is buggy, dev hsr_slave_1
[ 2944.021559] overlayfs: missing 'lowerdir'
[ 2944.060158] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2944.090129] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2944.096274] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2944.316490] protocol 88fb is buggy, dev hsr_slave_0
[ 2944.321702] protocol 88fb is buggy, dev hsr_slave_1
[ 2944.946457] protocol 88fb is buggy, dev hsr_slave_0
[ 2944.951586] protocol 88fb is buggy, dev hsr_slave_1
[ 2945.426514] Bluetooth: hci0: command 0x1003 tx timeout
[ 2945.431987] Bluetooth: hci0: sending frame failed (-49)
[ 2946.066468] Bluetooth: hci1: command 0x1003 tx timeout
[ 2946.072226] Bluetooth: hci1: sending frame failed (-49)
[ 2946.146419] Bluetooth: hci2: command 0x1003 tx timeout
[ 2946.146442] Bluetooth: hci3: command 0x1003 tx timeout
[ 2946.156202] Bluetooth: hci2: sending frame failed (-49)
[ 2946.162612] Bluetooth: hci3: sending frame failed (-49)
[ 2947.506585] Bluetooth: hci0: command 0x1001 tx timeout
[ 2947.512005] Bluetooth: hci0: sending frame failed (-49)
[ 2948.146714] Bluetooth: hci1: command 0x1001 tx timeout
[ 2948.152367] Bluetooth: hci1: sending frame failed (-49)
[ 2948.226470] Bluetooth: hci3: command 0x1001 tx timeout
[ 2948.231850] Bluetooth: hci2: command 0x1001 tx timeout
[ 2948.231946] Bluetooth: hci3: sending frame failed (-49)
[ 2948.241666] Bluetooth: hci2: sending frame failed (-49)
[ 2949.106472] net_ratelimit: 22 callbacks suppressed
[ 2949.111500] protocol 88fb is buggy, dev hsr_slave_0
[ 2949.116624] protocol 88fb is buggy, dev hsr_slave_1
[ 2949.586467] Bluetooth: hci0: command 0x1009 tx timeout
[ 2949.746534] protocol 88fb is buggy, dev hsr_slave_0
[ 2949.751669] protocol 88fb is buggy, dev hsr_slave_1
[ 2950.226431] protocol 88fb is buggy, dev hsr_slave_0
[ 2950.226499] Bluetooth: hci1: command 0x1009 tx timeout
[ 2950.231522] protocol 88fb is buggy, dev hsr_slave_1
[ 2950.241917] protocol 88fb is buggy, dev hsr_slave_0
[ 2950.247009] protocol 88fb is buggy, dev hsr_slave_1
[ 2950.252090] protocol 88fb is buggy, dev hsr_slave_0
[ 2950.257297] protocol 88fb is buggy, dev hsr_slave_1
[ 2950.306477] Bluetooth: hci2: command 0x1009 tx timeout
[ 2950.306506] Bluetooth: hci3: command 0x1009 tx timeout
23:11:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf00000000000000)

23:11:16 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:16 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:11:16 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000100000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:11:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:11:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 2954.191097] overlayfs: failed to resolve './file1': -2
[ 2954.204626] overlayfs: missing 'lowerdir'
[ 2954.206963] f2fs_msg: 22 callbacks suppressed
[ 2954.206971] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2954.264972] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2954.266195] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2954.278657] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 2954.288965] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2954.298069] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:11:16 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:16 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2954.311581] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2954.313829] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2954.320315] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2954.332344] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2954.340829] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 2954.348975] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:11:17 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:17 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2954.374293] overlayfs: failed to resolve './file1': -2
[ 2954.386420] net_ratelimit: 18 callbacks suppressed
[ 2954.386425] protocol 88fb is buggy, dev hsr_slave_0
[ 2954.396466] protocol 88fb is buggy, dev hsr_slave_1
[ 2954.401531] protocol 88fb is buggy, dev hsr_slave_0
[ 2954.406586] protocol 88fb is buggy, dev hsr_slave_1
[ 2954.411764] protocol 88fb is buggy, dev hsr_slave_0
[ 2954.416826] protocol 88fb is buggy, dev hsr_slave_1
23:11:17 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, 0x0, &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:17 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000200000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2954.438012] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2954.447699] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2954.487375] overlayfs: missing 'lowerdir'
[ 2954.706467] protocol 88fb is buggy, dev hsr_slave_0
[ 2954.711710] protocol 88fb is buggy, dev hsr_slave_1
[ 2955.346453] protocol 88fb is buggy, dev hsr_slave_0
[ 2955.351629] protocol 88fb is buggy, dev hsr_slave_1
[ 2956.306427] Bluetooth: hci1: command 0x1003 tx timeout
[ 2956.311956] Bluetooth: hci1: sending frame failed (-49)
[ 2956.317474] Bluetooth: hci0: command 0x1003 tx timeout
[ 2956.322895] Bluetooth: hci0: sending frame failed (-49)
[ 2956.386522] Bluetooth: hci2: command 0x1003 tx timeout
[ 2956.391971] Bluetooth: hci2: sending frame failed (-49)
[ 2958.386543] Bluetooth: hci0: command 0x1001 tx timeout
[ 2958.386550] Bluetooth: hci1: command 0x1001 tx timeout
[ 2958.397248] Bluetooth: hci1: sending frame failed (-49)
[ 2958.402739] Bluetooth: hci0: sending frame failed (-49)
[ 2958.466629] Bluetooth: hci2: command 0x1001 tx timeout
[ 2958.472063] Bluetooth: hci2: sending frame failed (-49)
[ 2959.506435] net_ratelimit: 22 callbacks suppressed
[ 2959.511434] protocol 88fb is buggy, dev hsr_slave_0
[ 2959.516533] protocol 88fb is buggy, dev hsr_slave_1
[ 2960.146545] protocol 88fb is buggy, dev hsr_slave_0
[ 2960.151730] protocol 88fb is buggy, dev hsr_slave_1
[ 2960.466480] Bluetooth: hci0: command 0x1009 tx timeout
[ 2960.466499] Bluetooth: hci1: command 0x1009 tx timeout
[ 2960.546535] Bluetooth: hci2: command 0x1009 tx timeout
[ 2960.626493] protocol 88fb is buggy, dev hsr_slave_0
[ 2960.631641] protocol 88fb is buggy, dev hsr_slave_1
[ 2960.636937] protocol 88fb is buggy, dev hsr_slave_0
[ 2960.642036] protocol 88fb is buggy, dev hsr_slave_1
[ 2960.647128] protocol 88fb is buggy, dev hsr_slave_0
[ 2960.652254] protocol 88fb is buggy, dev hsr_slave_1
23:11:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1d00000000000000)

23:11:27 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:11:27 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:27 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000300000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:11:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:11:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:11:27 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2964.479098] f2fs_msg: 22 callbacks suppressed
[ 2964.479112] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2964.499991] overlayfs: unrecognized mount option "lowerdir" or missing value
[ 2964.570714] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2964.582005] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2964.605392] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 2964.634931] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2964.642706] Bluetooth: hci1: sending frame failed (-49)
[ 2964.650566] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2964.668856] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:11:27 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2964.678093] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 2964.690799] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2964.699141] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2964.765992] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2964.785152] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2964.786458] net_ratelimit: 18 callbacks suppressed
[ 2964.786466] protocol 88fb is buggy, dev hsr_slave_0
[ 2964.803219] protocol 88fb is buggy, dev hsr_slave_1
[ 2964.808443] protocol 88fb is buggy, dev hsr_slave_0
[ 2964.813553] protocol 88fb is buggy, dev hsr_slave_1
[ 2964.818746] protocol 88fb is buggy, dev hsr_slave_0
[ 2964.823861] protocol 88fb is buggy, dev hsr_slave_1
23:11:27 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:27 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000400000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:11:27 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2964.922214] overlayfs: unrecognized mount option "lowerdir" or missing value
23:11:27 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2964.979106] overlayfs: missing 'lowerdir'
[ 2965.083480] overlayfs: unrecognized mount option "lowerdir" or missing value
[ 2965.116490] protocol 88fb is buggy, dev hsr_slave_0
[ 2965.121610] protocol 88fb is buggy, dev hsr_slave_1
[ 2965.746417] protocol 88fb is buggy, dev hsr_slave_0
[ 2965.751554] protocol 88fb is buggy, dev hsr_slave_1
[ 2966.626477] Bluetooth: hci0: command 0x1003 tx timeout
[ 2966.632055] Bluetooth: hci0: sending frame failed (-49)
[ 2966.706488] Bluetooth: hci1: command 0x1003 tx timeout
[ 2966.706496] Bluetooth: hci2: command 0x1003 tx timeout
[ 2966.714460] Bluetooth: hci1: sending frame failed (-49)
[ 2966.717503] Bluetooth: hci2: sending frame failed (-49)
[ 2968.706440] Bluetooth: hci0: command 0x1001 tx timeout
[ 2968.711841] Bluetooth: hci0: sending frame failed (-49)
[ 2968.786468] Bluetooth: hci2: command 0x1001 tx timeout
[ 2968.786486] Bluetooth: hci1: command 0x1001 tx timeout
[ 2968.792877] Bluetooth: hci2: sending frame failed (-49)
[ 2968.797277] Bluetooth: hci1: sending frame failed (-49)
[ 2969.906474] net_ratelimit: 22 callbacks suppressed
[ 2969.906480] protocol 88fb is buggy, dev hsr_slave_0
[ 2969.916583] protocol 88fb is buggy, dev hsr_slave_1
[ 2970.546488] protocol 88fb is buggy, dev hsr_slave_0
[ 2970.551688] protocol 88fb is buggy, dev hsr_slave_1
[ 2970.786616] Bluetooth: hci0: command 0x1009 tx timeout
[ 2970.866462] Bluetooth: hci2: command 0x1009 tx timeout
[ 2970.866511] Bluetooth: hci1: command 0x1009 tx timeout
[ 2971.026449] protocol 88fb is buggy, dev hsr_slave_0
[ 2971.031555] protocol 88fb is buggy, dev hsr_slave_1
[ 2971.036703] protocol 88fb is buggy, dev hsr_slave_0
[ 2971.041759] protocol 88fb is buggy, dev hsr_slave_1
[ 2971.046903] protocol 88fb is buggy, dev hsr_slave_0
[ 2971.051967] protocol 88fb is buggy, dev hsr_slave_1
23:11:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3f00000000000000)

23:11:37 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:37 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000500000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:11:37 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2974.667962] f2fs_msg: 14 callbacks suppressed
[ 2974.667975] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2974.681963] overlayfs: missing 'lowerdir'
[ 2974.700393] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2974.712107] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2974.722857] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 2974.729262] overlayfs: failed to resolve 'f': -2
[ 2974.736940] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2974.744739] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2974.752115] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2974.759850] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 2974.768253] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2974.831276] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2974.850191] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2975.186594] net_ratelimit: 18 callbacks suppressed
[ 2975.186603] protocol 88fb is buggy, dev hsr_slave_0
[ 2975.196707] protocol 88fb is buggy, dev hsr_slave_1
[ 2975.201804] protocol 88fb is buggy, dev hsr_slave_0
[ 2975.206934] protocol 88fb is buggy, dev hsr_slave_1
[ 2975.212028] protocol 88fb is buggy, dev hsr_slave_0
[ 2975.217133] protocol 88fb is buggy, dev hsr_slave_1
23:11:37 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:11:37 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:37 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:11:37 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000600000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:11:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 2975.302833] overlayfs: failed to resolve 'f': -2
[ 2975.343985] overlayfs: missing 'lowerdir'
23:11:38 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:11:38 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2975.383009] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2975.390199] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2975.419190] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2975.443336] overlayfs: missing 'lowerdir'
23:11:38 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000700000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2975.506433] protocol 88fb is buggy, dev hsr_slave_0
[ 2975.511572] protocol 88fb is buggy, dev hsr_slave_1
[ 2975.539951] overlayfs: failed to resolve 'f': -2
[ 2976.146475] protocol 88fb is buggy, dev hsr_slave_0
[ 2976.151876] protocol 88fb is buggy, dev hsr_slave_1
[ 2976.786411] Bluetooth: hci0: command 0x1003 tx timeout
[ 2976.791818] Bluetooth: hci0: sending frame failed (-49)
[ 2977.426468] Bluetooth: hci2: command 0x1003 tx timeout
[ 2977.426491] Bluetooth: hci1: command 0x1003 tx timeout
[ 2977.437240] Bluetooth: hci2: sending frame failed (-49)
[ 2977.442814] Bluetooth: hci1: sending frame failed (-49)
[ 2977.506415] Bluetooth: hci3: command 0x1003 tx timeout
[ 2977.511874] Bluetooth: hci3: sending frame failed (-49)
[ 2978.866669] Bluetooth: hci0: command 0x1001 tx timeout
[ 2978.872112] Bluetooth: hci0: sending frame failed (-49)
[ 2979.506470] Bluetooth: hci1: command 0x1001 tx timeout
[ 2979.511830] Bluetooth: hci2: command 0x1001 tx timeout
[ 2979.511892] Bluetooth: hci1: sending frame failed (-49)
[ 2979.517257] Bluetooth: hci2: sending frame failed (-49)
[ 2979.586471] Bluetooth: hci3: command 0x1001 tx timeout
[ 2979.591902] Bluetooth: hci3: sending frame failed (-49)
[ 2980.306494] net_ratelimit: 22 callbacks suppressed
[ 2980.311508] protocol 88fb is buggy, dev hsr_slave_0
[ 2980.316626] protocol 88fb is buggy, dev hsr_slave_1
[ 2980.946483] Bluetooth: hci0: command 0x1009 tx timeout
[ 2980.946489] protocol 88fb is buggy, dev hsr_slave_0
[ 2980.946622] protocol 88fb is buggy, dev hsr_slave_1
[ 2981.426516] protocol 88fb is buggy, dev hsr_slave_0
[ 2981.431631] protocol 88fb is buggy, dev hsr_slave_1
[ 2981.436789] protocol 88fb is buggy, dev hsr_slave_0
[ 2981.441844] protocol 88fb is buggy, dev hsr_slave_1
[ 2981.446975] protocol 88fb is buggy, dev hsr_slave_0
[ 2981.452025] protocol 88fb is buggy, dev hsr_slave_1
[ 2981.586439] Bluetooth: hci1: command 0x1009 tx timeout
[ 2981.586446] Bluetooth: hci2: command 0x1009 tx timeout
[ 2981.666430] Bluetooth: hci3: command 0x1009 tx timeout
23:11:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x4000000000000000)

23:11:48 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:48 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:11:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:11:48 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000900000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:11:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 2985.586459] net_ratelimit: 18 callbacks suppressed
[ 2985.586467] protocol 88fb is buggy, dev hsr_slave_0
[ 2985.591521] protocol 88fb is buggy, dev hsr_slave_1
[ 2985.601911] protocol 88fb is buggy, dev hsr_slave_0
[ 2985.607037] protocol 88fb is buggy, dev hsr_slave_1
[ 2985.612260] protocol 88fb is buggy, dev hsr_slave_0
[ 2985.617393] protocol 88fb is buggy, dev hsr_slave_1
[ 2985.638369] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2985.649157] overlayfs: missing 'lowerdir'
[ 2985.675557] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2985.681475] f2fs_msg: 30 callbacks suppressed
[ 2985.681490] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:11:48 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2985.721109] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2985.728579] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2985.752329] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2985.760350] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:11:48 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2985.770836] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2985.789044] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2985.802813] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2985.805821] overlayfs: missing 'lowerdir'
23:11:48 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2985.812267] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 2985.822660] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2985.863061] overlayfs: missing 'lowerdir'
[ 2985.887725] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2985.906439] protocol 88fb is buggy, dev hsr_slave_0
[ 2985.911513] protocol 88fb is buggy, dev hsr_slave_1
[ 2985.920740] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:11:48 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:48 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2985.936034] overlayfs: failed to resolve 'fil': -2
23:11:48 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000a00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2985.984649] overlayfs: missing 'lowerdir'
[ 2986.060920] overlayfs: failed to resolve 'fil': -2
[ 2986.546424] protocol 88fb is buggy, dev hsr_slave_0
[ 2986.551739] protocol 88fb is buggy, dev hsr_slave_1
[ 2987.666979] Bluetooth: hci0: command 0x1003 tx timeout
[ 2987.672386] Bluetooth: hci0: sending frame failed (-49)
[ 2987.746434] Bluetooth: hci2: command 0x1003 tx timeout
[ 2987.751854] Bluetooth: hci2: sending frame failed (-49)
[ 2987.757361] Bluetooth: hci1: command 0x1003 tx timeout
[ 2987.762722] Bluetooth: hci1: sending frame failed (-49)
[ 2989.746521] Bluetooth: hci0: command 0x1001 tx timeout
[ 2989.751975] Bluetooth: hci0: sending frame failed (-49)
[ 2989.826501] Bluetooth: hci1: command 0x1001 tx timeout
[ 2989.831849] Bluetooth: hci2: command 0x1001 tx timeout
[ 2989.831936] Bluetooth: hci1: sending frame failed (-49)
[ 2989.844253] Bluetooth: hci2: sending frame failed (-49)
[ 2990.706459] net_ratelimit: 22 callbacks suppressed
[ 2990.706465] protocol 88fb is buggy, dev hsr_slave_0
[ 2990.716566] protocol 88fb is buggy, dev hsr_slave_1
[ 2991.346481] protocol 88fb is buggy, dev hsr_slave_0
[ 2991.351661] protocol 88fb is buggy, dev hsr_slave_1
[ 2991.826441] protocol 88fb is buggy, dev hsr_slave_0
[ 2991.826450] Bluetooth: hci0: command 0x1009 tx timeout
[ 2991.836872] protocol 88fb is buggy, dev hsr_slave_1
[ 2991.841954] protocol 88fb is buggy, dev hsr_slave_0
[ 2991.847084] protocol 88fb is buggy, dev hsr_slave_1
[ 2991.852207] protocol 88fb is buggy, dev hsr_slave_0
[ 2991.857306] protocol 88fb is buggy, dev hsr_slave_1
[ 2991.906518] Bluetooth: hci2: command 0x1009 tx timeout
[ 2991.911897] Bluetooth: hci1: command 0x1009 tx timeout
23:11:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xfeffffff00000000)

23:11:58 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:58 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:11:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:11:58 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000c00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:11:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 2995.836913] f2fs_msg: 14 callbacks suppressed
[ 2995.836927] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2995.848501] overlayfs: missing 'lowerdir'
[ 2995.876627] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2995.881508] overlayfs: failed to resolve 'file': -2
[ 2995.897222] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 2995.909490] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2995.947485] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2995.959147] Bluetooth: hci2: Frame reassembly failed (-84)
[ 2995.960054] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2995.965278] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2995.986460] net_ratelimit: 18 callbacks suppressed
[ 2995.986467] protocol 88fb is buggy, dev hsr_slave_0
23:11:58 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 2995.996231] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 2995.996609] protocol 88fb is buggy, dev hsr_slave_1
[ 2996.004283] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2996.008780] protocol 88fb is buggy, dev hsr_slave_0
[ 2996.016745] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 2996.021300] protocol 88fb is buggy, dev hsr_slave_1
[ 2996.029566] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 2996.034166] protocol 88fb is buggy, dev hsr_slave_0
23:11:58 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2996.046734] protocol 88fb is buggy, dev hsr_slave_1
[ 2996.082895] overlayfs: unrecognized mount option "lowerdir" or missing value
[ 2996.112956] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:11:58 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 2996.144129] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2996.176234] overlayfs: unrecognized mount option "lowerdir" or missing value
23:11:58 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:11:58 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:11:58 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000001000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 2996.214097] overlayfs: failed to resolve 'file': -2
[ 2996.254804] overlayfs: unrecognized mount option "lowerdir" or missing value
[ 2996.306481] protocol 88fb is buggy, dev hsr_slave_0
[ 2996.311640] protocol 88fb is buggy, dev hsr_slave_1
[ 2996.348908] overlayfs: failed to resolve 'file': -2
[ 2996.724988] Bluetooth: hci3: Frame reassembly failed (-84)
[ 2996.730954] Bluetooth: hci3: Frame reassembly failed (-84)
[ 2996.946431] protocol 88fb is buggy, dev hsr_slave_0
[ 2996.951569] protocol 88fb is buggy, dev hsr_slave_1
[ 2997.986630] Bluetooth: hci1: command 0x1003 tx timeout
[ 2997.992010] Bluetooth: hci2: command 0x1003 tx timeout
[ 2997.992044] Bluetooth: hci1: sending frame failed (-49)
[ 2997.997737] Bluetooth: hci0: command 0x1003 tx timeout
[ 2998.002873] Bluetooth: hci2: sending frame failed (-49)
[ 2998.008565] Bluetooth: hci0: sending frame failed (-49)
[ 2998.786489] Bluetooth: hci3: command 0x1003 tx timeout
[ 2998.792070] Bluetooth: hci3: sending frame failed (-49)
[ 3000.066448] Bluetooth: hci0: command 0x1001 tx timeout
[ 3000.066455] Bluetooth: hci2: command 0x1001 tx timeout
[ 3000.077258] Bluetooth: hci2: sending frame failed (-49)
[ 3000.082720] Bluetooth: hci1: command 0x1001 tx timeout
[ 3000.082758] Bluetooth: hci0: sending frame failed (-49)
[ 3000.088503] Bluetooth: hci1: sending frame failed (-49)
[ 3000.866462] Bluetooth: hci3: command 0x1001 tx timeout
[ 3000.871920] Bluetooth: hci3: sending frame failed (-49)
[ 3001.106460] net_ratelimit: 22 callbacks suppressed
[ 3001.111436] protocol 88fb is buggy, dev hsr_slave_0
[ 3001.116470] protocol 88fb is buggy, dev hsr_slave_1
[ 3001.746483] protocol 88fb is buggy, dev hsr_slave_0
[ 3001.751701] protocol 88fb is buggy, dev hsr_slave_1
[ 3002.146470] Bluetooth: hci1: command 0x1009 tx timeout
[ 3002.146477] Bluetooth: hci0: command 0x1009 tx timeout
[ 3002.157327] Bluetooth: hci2: command 0x1009 tx timeout
[ 3002.226453] protocol 88fb is buggy, dev hsr_slave_0
[ 3002.231536] protocol 88fb is buggy, dev hsr_slave_1
[ 3002.236709] protocol 88fb is buggy, dev hsr_slave_0
[ 3002.241744] protocol 88fb is buggy, dev hsr_slave_1
[ 3002.246850] protocol 88fb is buggy, dev hsr_slave_0
[ 3002.251883] protocol 88fb is buggy, dev hsr_slave_1
[ 3002.946450] Bluetooth: hci3: command 0x1009 tx timeout
[ 3006.386475] net_ratelimit: 18 callbacks suppressed
[ 3006.386482] protocol 88fb is buggy, dev hsr_slave_0
[ 3006.396568] protocol 88fb is buggy, dev hsr_slave_1
[ 3006.401668] protocol 88fb is buggy, dev hsr_slave_0
[ 3006.406766] protocol 88fb is buggy, dev hsr_slave_1
[ 3006.411840] protocol 88fb is buggy, dev hsr_slave_0
[ 3006.416919] protocol 88fb is buggy, dev hsr_slave_1
[ 3006.706460] protocol 88fb is buggy, dev hsr_slave_0
[ 3006.711559] protocol 88fb is buggy, dev hsr_slave_1
23:12:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xffffff7f00000000)

23:12:09 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,wor'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:12:09 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:12:09 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002f2f5201000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:12:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:12:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 3007.314311] f2fs_msg: 22 callbacks suppressed
[ 3007.314323] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3007.346460] protocol 88fb is buggy, dev hsr_slave_0
[ 3007.351632] protocol 88fb is buggy, dev hsr_slave_1
[ 3007.368314] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3007.379739] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3007.383162] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (552989186, 14)
23:12:10 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

[ 3007.410529] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3007.412455] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3007.419945] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3007.430849] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3007.439465] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3007.449390] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (552989186, 14)
[ 3007.457633] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3007.464476] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:12:10 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,wor'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3007.519067] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3007.533285] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:12:10 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000001400000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:12:10 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000340)=""/65, 0x41)

23:12:10 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,wor'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3007.583522] overlayfs: unrecognized mount option "wor" or missing value
23:12:10 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=.'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3007.655155] overlayfs: unrecognized mount option "wor" or missing value
[ 3007.752071] overlayfs: workdir and upperdir must be separate subtrees
[ 3008.139389] Bluetooth: hci3: Frame reassembly failed (-84)
[ 3009.426616] Bluetooth: hci1: command 0x1003 tx timeout
[ 3009.432609] Bluetooth: hci0: command 0x1003 tx timeout
[ 3009.432638] Bluetooth: hci1: sending frame failed (-49)
[ 3009.439707] Bluetooth: hci0: sending frame failed (-49)
[ 3009.506448] Bluetooth: hci2: command 0x1003 tx timeout
[ 3009.512471] Bluetooth: hci2: sending frame failed (-49)
[ 3010.146439] Bluetooth: hci3: command 0x1003 tx timeout
[ 3010.152844] Bluetooth: hci3: sending frame failed (-49)
[ 3011.506541] Bluetooth: hci0: command 0x1001 tx timeout
[ 3011.506607] net_ratelimit: 22 callbacks suppressed
[ 3011.506615] protocol 88fb is buggy, dev hsr_slave_0
[ 3011.512070] Bluetooth: hci0: sending frame failed (-49)
[ 3011.517044] protocol 88fb is buggy, dev hsr_slave_1
[ 3011.533947] Bluetooth: hci1: command 0x1001 tx timeout
[ 3011.539689] Bluetooth: hci1: sending frame failed (-49)
[ 3011.586546] Bluetooth: hci2: command 0x1001 tx timeout
[ 3011.592256] Bluetooth: hci2: sending frame failed (-49)
[ 3012.146543] protocol 88fb is buggy, dev hsr_slave_0
[ 3012.151868] protocol 88fb is buggy, dev hsr_slave_1
[ 3012.226528] Bluetooth: hci3: command 0x1001 tx timeout
[ 3012.232316] Bluetooth: hci3: sending frame failed (-49)
[ 3012.626497] protocol 88fb is buggy, dev hsr_slave_0
[ 3012.632096] protocol 88fb is buggy, dev hsr_slave_1
[ 3012.637641] protocol 88fb is buggy, dev hsr_slave_0
[ 3012.643171] protocol 88fb is buggy, dev hsr_slave_1
[ 3012.648378] protocol 88fb is buggy, dev hsr_slave_0
[ 3012.653612] protocol 88fb is buggy, dev hsr_slave_1
[ 3013.586537] Bluetooth: hci1: command 0x1009 tx timeout
[ 3013.593355] Bluetooth: hci0: command 0x1009 tx timeout
[ 3013.666540] Bluetooth: hci2: command 0x1009 tx timeout
[ 3014.306447] Bluetooth: hci3: command 0x1009 tx timeout
[ 3016.786428] net_ratelimit: 18 callbacks suppressed
[ 3016.791405] protocol 88fb is buggy, dev hsr_slave_0
[ 3016.796470] protocol 88fb is buggy, dev hsr_slave_1
[ 3016.801578] protocol 88fb is buggy, dev hsr_slave_0
[ 3016.806621] protocol 88fb is buggy, dev hsr_slave_1
[ 3016.811680] protocol 88fb is buggy, dev hsr_slave_0
[ 3016.816732] protocol 88fb is buggy, dev hsr_slave_1
[ 3017.106451] protocol 88fb is buggy, dev hsr_slave_0
[ 3017.111539] protocol 88fb is buggy, dev hsr_slave_1
[ 3017.746470] protocol 88fb is buggy, dev hsr_slave_0
[ 3017.751556] protocol 88fb is buggy, dev hsr_slave_1
23:12:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:12:20 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41)

23:12:20 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=.'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:12:20 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000002000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:12:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:12:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 3018.202958] overlayfs: workdir and upperdir must be separate subtrees
[ 3018.204418] f2fs_msg: 22 callbacks suppressed
[ 3018.204430] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3018.226210] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3018.237963] Bluetooth: hci0: Frame reassembly failed (-84)
23:12:20 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41)

23:12:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x9, 0x6, 0x80000000, 0x5}, 0x6)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000240))
ioctl$KDADDIO(r1, 0x400455c8, 0x3)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x1, 0x0)

[ 3018.293792] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3018.308488] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3018.320035] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:12:20 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=.'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3018.345376] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3018.366750] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:12:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x140)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000001c0))
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200400)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:12:21 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./fi'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3018.419578] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3018.420354] overlayfs: workdir and upperdir must be separate subtrees
[ 3018.445942] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:12:21 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41)

[ 3018.513345] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3018.525242] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3018.538612] overlayfs: failed to resolve './fi': -2
23:12:21 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./fi'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3018.569292] Bluetooth: hci2: Frame reassembly failed (-84)
23:12:21 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000002200000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3018.610066] overlayfs: failed to resolve './fi': -2
23:12:21 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./fi'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:12:21 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

[ 3018.715507] overlayfs: failed to resolve './fi': -2
[ 3020.226507] Bluetooth: hci0: command 0x1003 tx timeout
[ 3020.233080] Bluetooth: hci0: sending frame failed (-49)
[ 3020.306468] Bluetooth: hci1: command 0x1003 tx timeout
[ 3020.312005] Bluetooth: hci1: sending frame failed (-49)
[ 3020.626451] Bluetooth: hci2: command 0x1003 tx timeout
[ 3020.631966] Bluetooth: hci2: sending frame failed (-49)
[ 3021.346481] Bluetooth: hci3: command 0x1003 tx timeout
[ 3021.351921] Bluetooth: hci3: sending frame failed (-49)
[ 3021.906442] net_ratelimit: 22 callbacks suppressed
[ 3021.906448] protocol 88fb is buggy, dev hsr_slave_0
[ 3021.916586] protocol 88fb is buggy, dev hsr_slave_1
[ 3022.306431] Bluetooth: hci0: command 0x1001 tx timeout
[ 3022.311859] Bluetooth: hci0: sending frame failed (-49)
[ 3022.386514] Bluetooth: hci1: command 0x1001 tx timeout
[ 3022.391953] Bluetooth: hci1: sending frame failed (-49)
[ 3022.546502] protocol 88fb is buggy, dev hsr_slave_0
[ 3022.551634] protocol 88fb is buggy, dev hsr_slave_1
[ 3022.706425] Bluetooth: hci2: command 0x1001 tx timeout
[ 3022.711837] Bluetooth: hci2: sending frame failed (-49)
[ 3023.026470] protocol 88fb is buggy, dev hsr_slave_0
[ 3023.031629] protocol 88fb is buggy, dev hsr_slave_1
[ 3023.036775] protocol 88fb is buggy, dev hsr_slave_0
[ 3023.041877] protocol 88fb is buggy, dev hsr_slave_1
[ 3023.046999] protocol 88fb is buggy, dev hsr_slave_0
[ 3023.052080] protocol 88fb is buggy, dev hsr_slave_1
[ 3023.426674] Bluetooth: hci3: command 0x1001 tx timeout
[ 3023.432093] Bluetooth: hci3: sending frame failed (-49)
[ 3024.386540] Bluetooth: hci0: command 0x1009 tx timeout
[ 3024.466665] Bluetooth: hci1: command 0x1009 tx timeout
[ 3024.786526] Bluetooth: hci2: command 0x1009 tx timeout
[ 3025.506632] Bluetooth: hci3: command 0x1009 tx timeout
[ 3027.186452] net_ratelimit: 18 callbacks suppressed
[ 3027.186458] protocol 88fb is buggy, dev hsr_slave_0
[ 3027.196533] protocol 88fb is buggy, dev hsr_slave_1
[ 3027.201628] protocol 88fb is buggy, dev hsr_slave_0
[ 3027.206730] protocol 88fb is buggy, dev hsr_slave_1
[ 3027.223858] protocol 88fb is buggy, dev hsr_slave_0
[ 3027.229724] protocol 88fb is buggy, dev hsr_slave_1
[ 3027.506482] protocol 88fb is buggy, dev hsr_slave_0
[ 3027.511563] protocol 88fb is buggy, dev hsr_slave_1
[ 3028.146458] protocol 88fb is buggy, dev hsr_slave_0
[ 3028.151579] protocol 88fb is buggy, dev hsr_slave_1
23:12:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:12:31 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:12:31 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000002300000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:12:31 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

23:12:31 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 3028.459864] overlayfs: failed to resolve './file': -2
[ 3028.479128] f2fs_msg: 22 callbacks suppressed
[ 3028.479141] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3028.512551] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3028.526646] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3028.541208] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3028.553131] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3028.568884] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3028.569713] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3028.584396] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3028.592180] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3028.600308] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3028.610595] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3028.698301] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3028.705526] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:12:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x101000, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0))
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x600100, 0x0)
ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/143)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10)

23:12:32 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
chdir(&(0x7f0000000280)='./file0\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

23:12:32 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:12:32 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000042b00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3029.730497] overlayfs: failed to resolve './file': -2
23:12:32 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:12:32 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000002c00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:12:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8)

[ 3029.796464] QAT: Invalid ioctl
[ 3029.799743] overlayfs: failed to resolve './file': -2
[ 3029.826022] QAT: Invalid ioctl
[ 3030.546437] Bluetooth: hci0: command 0x1003 tx timeout
[ 3030.551856] Bluetooth: hci0: sending frame failed (-49)
[ 3030.626452] Bluetooth: hci1: command 0x1003 tx timeout
[ 3030.631922] Bluetooth: hci1: sending frame failed (-49)
[ 3032.306515] net_ratelimit: 22 callbacks suppressed
[ 3032.311519] protocol 88fb is buggy, dev hsr_slave_0
[ 3032.316583] protocol 88fb is buggy, dev hsr_slave_1
[ 3032.626477] Bluetooth: hci0: command 0x1001 tx timeout
[ 3032.631948] Bluetooth: hci0: sending frame failed (-49)
[ 3032.706473] Bluetooth: hci1: command 0x1001 tx timeout
[ 3032.712843] Bluetooth: hci1: sending frame failed (-49)
[ 3032.946494] protocol 88fb is buggy, dev hsr_slave_0
[ 3032.951610] protocol 88fb is buggy, dev hsr_slave_1
[ 3033.426498] protocol 88fb is buggy, dev hsr_slave_0
[ 3033.431681] protocol 88fb is buggy, dev hsr_slave_1
[ 3033.436794] protocol 88fb is buggy, dev hsr_slave_0
[ 3033.441852] protocol 88fb is buggy, dev hsr_slave_1
[ 3033.446975] protocol 88fb is buggy, dev hsr_slave_0
[ 3033.452024] protocol 88fb is buggy, dev hsr_slave_1
[ 3034.706519] Bluetooth: hci0: command 0x1009 tx timeout
[ 3034.786532] Bluetooth: hci1: command 0x1009 tx timeout
[ 3037.586476] net_ratelimit: 18 callbacks suppressed
[ 3037.586483] protocol 88fb is buggy, dev hsr_slave_0
[ 3037.597075] protocol 88fb is buggy, dev hsr_slave_1
[ 3037.602162] protocol 88fb is buggy, dev hsr_slave_0
[ 3037.607381] protocol 88fb is buggy, dev hsr_slave_1
[ 3037.612616] protocol 88fb is buggy, dev hsr_slave_0
[ 3037.617936] protocol 88fb is buggy, dev hsr_slave_1
[ 3037.906451] protocol 88fb is buggy, dev hsr_slave_0
[ 3037.911598] protocol 88fb is buggy, dev hsr_slave_1
[ 3038.546467] protocol 88fb is buggy, dev hsr_slave_0
[ 3038.551776] protocol 88fb is buggy, dev hsr_slave_1
23:12:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:12:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x202080)
write$sndseq(r2, &(0x7f0000000040)=[{0xff, 0x1ff, 0x0, 0x0, @tick=0xffffffffffffffff, {0x5, 0x1}, {0x63e08d0f, 0xefb}, @raw8={"2f2199f0619c732f89739cca"}}], 0x30)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:12:41 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, 0x0, &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:12:41 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{}, 'port0\x00'})

23:12:41 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000262e00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:12:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:12:41 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)

23:12:41 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, 0x0, &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3038.680839] f2fs_msg: 38 callbacks suppressed
[ 3038.680847] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3038.708256] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3038.726051] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (637534210, 14)
[ 3038.735435] Bluetooth: hci2: Frame reassembly failed (-84)
[ 3038.742035] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3038.752219] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3038.762344] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3038.764118] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3038.770590] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (637534210, 14)
[ 3038.787110] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:12:41 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, 0x0, &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:12:41 executing program 4:
r0 = socket(0x0, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
unshare(0x400)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(r1, 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$VT_OPENQRY(r1, 0x5600, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

[ 3038.848923] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3038.856204] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:12:41 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000263400000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:12:41 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3040.706475] Bluetooth: hci0: command 0x1003 tx timeout
[ 3040.711922] Bluetooth: hci0: sending frame failed (-49)
[ 3040.786480] Bluetooth: hci2: command 0x1003 tx timeout
[ 3040.786487] Bluetooth: hci1: command 0x1003 tx timeout
[ 3040.786568] Bluetooth: hci1: sending frame failed (-49)
[ 3040.797576] Bluetooth: hci2: sending frame failed (-49)
[ 3041.506471] Bluetooth: hci3: command 0x1003 tx timeout
[ 3041.511906] Bluetooth: hci3: sending frame failed (-49)
[ 3042.706469] net_ratelimit: 22 callbacks suppressed
[ 3042.711555] protocol 88fb is buggy, dev hsr_slave_0
[ 3042.716602] protocol 88fb is buggy, dev hsr_slave_1
[ 3042.786458] Bluetooth: hci0: command 0x1001 tx timeout
[ 3042.792023] Bluetooth: hci0: sending frame failed (-49)
[ 3042.866448] Bluetooth: hci2: command 0x1001 tx timeout
[ 3042.866464] Bluetooth: hci1: command 0x1001 tx timeout
[ 3042.872001] Bluetooth: hci2: sending frame failed (-49)
[ 3042.877695] Bluetooth: hci1: sending frame failed (-49)
[ 3043.346459] protocol 88fb is buggy, dev hsr_slave_0
[ 3043.351783] protocol 88fb is buggy, dev hsr_slave_1
[ 3043.586465] Bluetooth: hci3: command 0x1001 tx timeout
[ 3043.592008] Bluetooth: hci3: sending frame failed (-49)
[ 3043.826456] protocol 88fb is buggy, dev hsr_slave_0
[ 3043.831607] protocol 88fb is buggy, dev hsr_slave_1
[ 3043.836724] protocol 88fb is buggy, dev hsr_slave_0
[ 3043.841826] protocol 88fb is buggy, dev hsr_slave_1
[ 3043.846905] protocol 88fb is buggy, dev hsr_slave_0
[ 3043.851970] protocol 88fb is buggy, dev hsr_slave_1
[ 3044.866455] Bluetooth: hci0: command 0x1009 tx timeout
[ 3044.946426] Bluetooth: hci1: command 0x1009 tx timeout
[ 3044.947570] Bluetooth: hci2: command 0x1009 tx timeout
[ 3045.666501] Bluetooth: hci3: command 0x1009 tx timeout
[ 3047.986504] net_ratelimit: 18 callbacks suppressed
[ 3047.991523] protocol 88fb is buggy, dev hsr_slave_0
[ 3047.996594] protocol 88fb is buggy, dev hsr_slave_1
[ 3048.001720] protocol 88fb is buggy, dev hsr_slave_0
[ 3048.006783] protocol 88fb is buggy, dev hsr_slave_1
[ 3048.012085] protocol 88fb is buggy, dev hsr_slave_0
[ 3048.017278] protocol 88fb is buggy, dev hsr_slave_1
[ 3048.306445] protocol 88fb is buggy, dev hsr_slave_0
[ 3048.311597] protocol 88fb is buggy, dev hsr_slave_1
23:12:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dc86055e0bceec7be070")
syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="5000000090780000"], 0x0)

[ 3048.946451] protocol 88fb is buggy, dev hsr_slave_0
[ 3048.951536] protocol 88fb is buggy, dev hsr_slave_1
23:12:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xfffffffffffffffe)

23:12:52 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:12:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:12:52 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000003f00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:12:52 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:12:52 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$unix(0x1, 0x1000000000000001, 0x0)
close(r1)
close(r0)
pipe(&(0x7f00000000c0))
write$binfmt_misc(r1, &(0x7f0000000200)={'syz0'}, 0x8762c13b)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000002180)="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", 0xee3}], 0x1, 0x8)

[ 3049.542839] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3049.550275] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3049.558711] f2fs_msg: 22 callbacks suppressed
[ 3049.558718] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3049.582751] Bluetooth: hci2: Frame reassembly failed (-84)
23:12:52 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:12:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_setup(0x2, &(0x7f00000001c0))

[ 3049.584654] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3049.596596] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3049.606783] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3049.614563] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3049.622421] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3049.631588] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3049.641328] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:12:52 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000004000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:12:52 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3049.702603] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3049.710255] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:12:52 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3049.797824] overlayfs: missing 'lowerdir'
23:12:52 executing program 4:
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12)

[ 3049.889845] overlayfs: missing 'lowerdir'
[ 3051.586427] Bluetooth: hci2: command 0x1003 tx timeout
[ 3051.586459] Bluetooth: hci1: command 0x1003 tx timeout
[ 3051.591957] Bluetooth: hci0: command 0x1003 tx timeout
[ 3051.597146] Bluetooth: hci2: sending frame failed (-49)
[ 3051.603770] Bluetooth: hci1: sending frame failed (-49)
[ 3051.612686] Bluetooth: hci0: sending frame failed (-49)
[ 3053.106539] net_ratelimit: 22 callbacks suppressed
[ 3053.111573] protocol 88fb is buggy, dev hsr_slave_0
[ 3053.116728] protocol 88fb is buggy, dev hsr_slave_1
[ 3053.666516] Bluetooth: hci1: command 0x1001 tx timeout
[ 3053.666523] Bluetooth: hci0: command 0x1001 tx timeout
[ 3053.667379] Bluetooth: hci0: sending frame failed (-49)
[ 3053.671935] Bluetooth: hci1: sending frame failed (-49)
[ 3053.688167] Bluetooth: hci2: command 0x1001 tx timeout
[ 3053.693555] Bluetooth: hci2: sending frame failed (-49)
[ 3053.746476] protocol 88fb is buggy, dev hsr_slave_0
[ 3053.751582] protocol 88fb is buggy, dev hsr_slave_1
[ 3054.226462] protocol 88fb is buggy, dev hsr_slave_0
[ 3054.231753] protocol 88fb is buggy, dev hsr_slave_1
[ 3054.237023] protocol 88fb is buggy, dev hsr_slave_0
[ 3054.242083] protocol 88fb is buggy, dev hsr_slave_1
[ 3054.247405] protocol 88fb is buggy, dev hsr_slave_0
[ 3054.252451] protocol 88fb is buggy, dev hsr_slave_1
[ 3055.746476] Bluetooth: hci1: command 0x1009 tx timeout
[ 3055.746483] Bluetooth: hci2: command 0x1009 tx timeout
[ 3055.746554] Bluetooth: hci0: command 0x1009 tx timeout
[ 3058.386517] net_ratelimit: 18 callbacks suppressed
[ 3058.386524] protocol 88fb is buggy, dev hsr_slave_0
[ 3058.397027] protocol 88fb is buggy, dev hsr_slave_1
[ 3058.402301] protocol 88fb is buggy, dev hsr_slave_0
[ 3058.407631] protocol 88fb is buggy, dev hsr_slave_1
[ 3058.412892] protocol 88fb is buggy, dev hsr_slave_0
[ 3058.418314] protocol 88fb is buggy, dev hsr_slave_1
[ 3058.706519] protocol 88fb is buggy, dev hsr_slave_0
[ 3058.711943] protocol 88fb is buggy, dev hsr_slave_1
[ 3059.346564] protocol 88fb is buggy, dev hsr_slave_0
[ 3059.353068] protocol 88fb is buggy, dev hsr_slave_1
23:13:02 executing program 1:
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', 'vboxnet0md5sum\x7f\x00'}, &(0x7f0000000140)='/dev/ptmx\x00', 0xa, 0x1)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='y$%em1proc', 0xfffffffffffffffa)
keyctl$revoke(0x3, r1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x5, 0x100)
getdents(r2, &(0x7f0000000380)=""/100, 0x64)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
finit_module(r0, &(0x7f0000000340)='&\x00', 0x2)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x20000, 0x0)

23:13:02 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000004800000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:13:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:13:02 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:13:02 executing program 4:
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000080206, 0x0)
truncate(&(0x7f0000000100)='./file0\x00', 0x608020001)
lseek(r0, 0x0, 0x1000000000003)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0)

23:13:02 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 3059.792672] overlayfs: missing 'lowerdir'
[ 3059.802148] f2fs_msg: 22 callbacks suppressed
[ 3059.802155] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3059.817943] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3059.855748] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3059.859142] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3059.872025] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3059.881765] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3059.890425] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:13:02 executing program 4:
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
unshare(0x400)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(r0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000400), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$VT_OPENQRY(r0, 0x5600, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

23:13:02 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3059.899706] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3059.909110] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3059.924250] Bluetooth: hci2: Frame reassembly failed (-84)
23:13:02 executing program 4:
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)
timer_gettime(0x0, 0x0)
epoll_create1(0x80000)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5)

23:13:02 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000004c00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3059.974975] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3059.992701] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:13:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x2, &(0x7f00000001c0))

23:13:02 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3060.090433] overlayfs: missing 'lowerdir'
[ 3060.156496] overlayfs: missing 'lowerdir'
[ 3061.906479] Bluetooth: hci0: command 0x1003 tx timeout
[ 3061.906560] Bluetooth: hci1: command 0x1003 tx timeout
[ 3061.912973] Bluetooth: hci0: sending frame failed (-49)
[ 3061.926173] Bluetooth: hci1: sending frame failed (-49)
[ 3061.986542] Bluetooth: hci2: command 0x1003 tx timeout
[ 3061.992147] Bluetooth: hci2: sending frame failed (-49)
[ 3063.506531] net_ratelimit: 22 callbacks suppressed
[ 3063.512433] protocol 88fb is buggy, dev hsr_slave_0
[ 3063.518370] protocol 88fb is buggy, dev hsr_slave_1
[ 3063.986534] Bluetooth: hci1: command 0x1001 tx timeout
[ 3063.992686] Bluetooth: hci0: command 0x1001 tx timeout
[ 3063.992801] Bluetooth: hci1: sending frame failed (-49)
[ 3064.000449] Bluetooth: hci0: sending frame failed (-49)
[ 3064.066496] Bluetooth: hci2: command 0x1001 tx timeout
[ 3064.072463] Bluetooth: hci2: sending frame failed (-49)
[ 3064.146540] protocol 88fb is buggy, dev hsr_slave_0
[ 3064.152854] protocol 88fb is buggy, dev hsr_slave_1
[ 3064.626522] protocol 88fb is buggy, dev hsr_slave_0
[ 3064.632946] protocol 88fb is buggy, dev hsr_slave_1
[ 3064.638701] protocol 88fb is buggy, dev hsr_slave_0
[ 3064.644569] protocol 88fb is buggy, dev hsr_slave_1
[ 3064.651202] protocol 88fb is buggy, dev hsr_slave_0
[ 3064.657091] protocol 88fb is buggy, dev hsr_slave_1
[ 3066.066494] Bluetooth: hci0: command 0x1009 tx timeout
[ 3066.066697] Bluetooth: hci1: command 0x1009 tx timeout
[ 3066.146589] Bluetooth: hci2: command 0x1009 tx timeout
[ 3068.786483] net_ratelimit: 18 callbacks suppressed
[ 3068.791481] protocol 88fb is buggy, dev hsr_slave_0
[ 3068.796550] protocol 88fb is buggy, dev hsr_slave_1
[ 3068.802253] protocol 88fb is buggy, dev hsr_slave_0
[ 3068.807330] protocol 88fb is buggy, dev hsr_slave_1
[ 3068.812553] protocol 88fb is buggy, dev hsr_slave_0
[ 3068.817629] protocol 88fb is buggy, dev hsr_slave_1
[ 3069.106488] protocol 88fb is buggy, dev hsr_slave_0
[ 3069.111732] protocol 88fb is buggy, dev hsr_slave_1
[ 3069.746465] protocol 88fb is buggy, dev hsr_slave_0
[ 3069.751607] protocol 88fb is buggy, dev hsr_slave_1
23:13:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0xbd, 0x2ff, 0x6, 0x22}, 0x8)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000400)=""/107)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x200000400)
ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000040))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r3, 0x400455c8, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080))

23:13:12 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000006000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:13:12 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:13:12 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0)
r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405)
r3 = dup2(r2, r1)
io_setup(0x8, 0x0)
dup2(r3, r0)

23:13:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319b")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:13:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319b")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 3070.037087] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3070.039989] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3070.062848] f2fs_msg: 14 callbacks suppressed
[ 3070.062858] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3070.084871] overlayfs: missing 'lowerdir'
[ 3070.091019] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3070.108155] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3070.124758] Bluetooth: hci1: sending frame failed (-49)
23:13:12 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:13:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x2, &(0x7f00000001c0))

[ 3070.125200] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3070.144581] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3070.152342] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3070.162885] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3070.174747] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:13:12 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046300000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:13:12 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3070.225301] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3070.233492] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3070.240473] overlayfs: missing 'lowerdir'
23:13:12 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:13:12 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046400000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3070.324783] overlayfs: missing 'lowerdir'
[ 3070.401865] overlayfs: missing 'lowerdir'
[ 3072.066419] Bluetooth: hci0: command 0x1003 tx timeout
[ 3072.071898] Bluetooth: hci0: sending frame failed (-49)
[ 3072.146430] Bluetooth: hci1: command 0x1003 tx timeout
[ 3072.151769] Bluetooth: hci2: command 0x1003 tx timeout
[ 3072.151836] Bluetooth: hci1: sending frame failed (-49)
[ 3072.162845] Bluetooth: hci2: sending frame failed (-49)
[ 3073.906434] net_ratelimit: 22 callbacks suppressed
[ 3073.911418] protocol 88fb is buggy, dev hsr_slave_0
[ 3073.916511] protocol 88fb is buggy, dev hsr_slave_1
[ 3074.146530] Bluetooth: hci0: command 0x1001 tx timeout
[ 3074.151965] Bluetooth: hci0: sending frame failed (-49)
[ 3074.226496] Bluetooth: hci2: command 0x1001 tx timeout
[ 3074.231860] Bluetooth: hci1: command 0x1001 tx timeout
[ 3074.231936] Bluetooth: hci2: sending frame failed (-49)
[ 3074.237315] Bluetooth: hci1: sending frame failed (-49)
[ 3074.546516] protocol 88fb is buggy, dev hsr_slave_0
[ 3074.551676] protocol 88fb is buggy, dev hsr_slave_1
[ 3075.026442] protocol 88fb is buggy, dev hsr_slave_0
[ 3075.031530] protocol 88fb is buggy, dev hsr_slave_1
[ 3075.036698] protocol 88fb is buggy, dev hsr_slave_0
[ 3075.041767] protocol 88fb is buggy, dev hsr_slave_1
[ 3075.046936] protocol 88fb is buggy, dev hsr_slave_0
[ 3075.051985] protocol 88fb is buggy, dev hsr_slave_1
[ 3076.226448] Bluetooth: hci0: command 0x1009 tx timeout
[ 3076.306476] Bluetooth: hci1: command 0x1009 tx timeout
[ 3076.306483] Bluetooth: hci2: command 0x1009 tx timeout
[ 3079.186442] net_ratelimit: 18 callbacks suppressed
[ 3079.191435] protocol 88fb is buggy, dev hsr_slave_0
[ 3079.196534] protocol 88fb is buggy, dev hsr_slave_1
[ 3079.201664] protocol 88fb is buggy, dev hsr_slave_0
[ 3079.206752] protocol 88fb is buggy, dev hsr_slave_1
[ 3079.211892] protocol 88fb is buggy, dev hsr_slave_0
[ 3079.216957] protocol 88fb is buggy, dev hsr_slave_1
[ 3079.506485] protocol 88fb is buggy, dev hsr_slave_0
[ 3079.511619] protocol 88fb is buggy, dev hsr_slave_1
[ 3080.146462] protocol 88fb is buggy, dev hsr_slave_0
[ 3080.151554] protocol 88fb is buggy, dev hsr_slave_1
23:13:22 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:13:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
r1 = memfd_create(&(0x7f0000000280)='IPVS\x00', 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
fallocate(r0, 0x11, 0x0, 0xc00000)

23:13:22 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046500000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:13:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319b")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:13:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000))
r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2)
getsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000080), &(0x7f0000000140)=0x4)

23:13:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319b")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 3080.336484] f2fs_msg: 38 callbacks suppressed
[ 3080.336501] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3080.365936] Bluetooth: hci0: sending frame failed (-49)
[ 3080.381183] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3080.388048] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3080.394919] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3080.414423] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
[ 3080.422503] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3080.432715] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3080.441590] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3080.449576] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
[ 3080.457681] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3080.468676] Bluetooth: hci2: Frame reassembly failed (-84)
23:13:23 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3080.522837] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3080.532732] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:13:23 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046600000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:13:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000001a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e28", 0x25}], 0x1}, 0x0)

23:13:23 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3080.736803] overlayfs: unrecognized mount option "lowerdir" or missing value
23:13:23 executing program 4:

23:13:23 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046700000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:13:23 executing program 4:

23:13:23 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3080.933375] overlayfs: unrecognized mount option "lowerdir" or missing value
23:13:23 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000006800000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3081.060174] overlayfs: failed to resolve 'f': -2
[ 3082.386516] Bluetooth: hci1: command 0x1003 tx timeout
[ 3082.393432] Bluetooth: hci1: sending frame failed (-49)
[ 3082.398895] Bluetooth: hci0: command 0x1003 tx timeout
[ 3082.404244] Bluetooth: hci0: sending frame failed (-49)
[ 3082.546413] Bluetooth: hci2: command 0x1003 tx timeout
[ 3082.551972] Bluetooth: hci2: sending frame failed (-49)
[ 3083.266498] Bluetooth: hci3: command 0x1003 tx timeout
[ 3083.272021] Bluetooth: hci3: sending frame failed (-49)
[ 3084.306486] net_ratelimit: 22 callbacks suppressed
[ 3084.306492] protocol 88fb is buggy, dev hsr_slave_0
[ 3084.316582] protocol 88fb is buggy, dev hsr_slave_1
[ 3084.466471] Bluetooth: hci0: command 0x1001 tx timeout
[ 3084.466478] Bluetooth: hci1: command 0x1001 tx timeout
[ 3084.468286] Bluetooth: hci1: sending frame failed (-49)
[ 3084.471934] Bluetooth: hci0: sending frame failed (-49)
[ 3084.626444] Bluetooth: hci2: command 0x1001 tx timeout
[ 3084.631880] Bluetooth: hci2: sending frame failed (-49)
[ 3084.946475] protocol 88fb is buggy, dev hsr_slave_0
[ 3084.951566] protocol 88fb is buggy, dev hsr_slave_1
[ 3085.346465] Bluetooth: hci3: command 0x1001 tx timeout
[ 3085.351912] Bluetooth: hci3: sending frame failed (-49)
[ 3085.426517] protocol 88fb is buggy, dev hsr_slave_0
[ 3085.431603] protocol 88fb is buggy, dev hsr_slave_1
[ 3085.436728] protocol 88fb is buggy, dev hsr_slave_0
[ 3085.441759] protocol 88fb is buggy, dev hsr_slave_1
[ 3085.446867] protocol 88fb is buggy, dev hsr_slave_0
[ 3085.451925] protocol 88fb is buggy, dev hsr_slave_1
[ 3086.546443] Bluetooth: hci1: command 0x1009 tx timeout
[ 3086.546462] Bluetooth: hci0: command 0x1009 tx timeout
[ 3086.706466] Bluetooth: hci2: command 0x1009 tx timeout
[ 3087.426494] Bluetooth: hci3: command 0x1009 tx timeout
[ 3089.586436] net_ratelimit: 18 callbacks suppressed
[ 3089.586442] protocol 88fb is buggy, dev hsr_slave_0
[ 3089.596493] protocol 88fb is buggy, dev hsr_slave_1
[ 3089.601587] protocol 88fb is buggy, dev hsr_slave_0
[ 3089.606696] protocol 88fb is buggy, dev hsr_slave_1
[ 3089.611777] protocol 88fb is buggy, dev hsr_slave_0
[ 3089.616884] protocol 88fb is buggy, dev hsr_slave_1
[ 3089.906468] protocol 88fb is buggy, dev hsr_slave_0
[ 3089.911639] protocol 88fb is buggy, dev hsr_slave_1
23:13:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319b")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 3090.546463] protocol 88fb is buggy, dev hsr_slave_0
[ 3090.551583] protocol 88fb is buggy, dev hsr_slave_1
23:13:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc400, 0x0)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0xb, 0x2, 0x6, {0x9, 0x8, 0x4, 0x3}})

23:13:34 executing program 4:

23:13:34 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:13:34 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046800000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:13:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319b")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 3091.799908] f2fs_msg: 54 callbacks suppressed
[ 3091.799922] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3091.817206] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:13:34 executing program 4:

[ 3091.841476] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
[ 3091.854484] Bluetooth: hci2: Frame reassembly failed (-84)
[ 3091.868328] overlayfs: failed to resolve 'f': -2
23:13:34 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:f'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:13:34 executing program 4:

[ 3091.887840] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3091.887964] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3091.908138] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3091.923949] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:13:34 executing program 4:

[ 3091.935944] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
[ 3091.950381] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:13:34 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TCSETSW(r0, 0x5403, 0x0)

[ 3092.021599] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3092.051145] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:13:34 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046900000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3092.130733] overlayfs: failed to resolve 'f': -2
[ 3092.546415] Bluetooth: hci0: command 0x1003 tx timeout
[ 3092.552003] Bluetooth: hci0: sending frame failed (-49)
[ 3093.906464] Bluetooth: hci1: command 0x1003 tx timeout
[ 3093.911837] Bluetooth: hci2: command 0x1003 tx timeout
[ 3093.911891] Bluetooth: hci1: sending frame failed (-49)
[ 3093.921521] Bluetooth: hci2: sending frame failed (-49)
[ 3094.626451] Bluetooth: hci0: command 0x1001 tx timeout
[ 3094.626470] Bluetooth: hci3: command 0x1003 tx timeout
[ 3094.632157] Bluetooth: hci0: sending frame failed (-49)
[ 3094.643530] Bluetooth: hci3: sending frame failed (-49)
[ 3094.706443] net_ratelimit: 22 callbacks suppressed
[ 3094.706450] protocol 88fb is buggy, dev hsr_slave_0
[ 3094.716694] protocol 88fb is buggy, dev hsr_slave_1
[ 3095.346513] protocol 88fb is buggy, dev hsr_slave_0
[ 3095.351720] protocol 88fb is buggy, dev hsr_slave_1
[ 3095.826428] protocol 88fb is buggy, dev hsr_slave_0
[ 3095.831534] protocol 88fb is buggy, dev hsr_slave_1
[ 3095.836782] protocol 88fb is buggy, dev hsr_slave_0
[ 3095.841862] protocol 88fb is buggy, dev hsr_slave_1
[ 3095.847122] protocol 88fb is buggy, dev hsr_slave_0
[ 3095.852166] protocol 88fb is buggy, dev hsr_slave_1
[ 3095.986418] Bluetooth: hci1: command 0x1001 tx timeout
[ 3095.991981] Bluetooth: hci1: sending frame failed (-49)
[ 3095.997701] Bluetooth: hci2: command 0x1001 tx timeout
[ 3096.003065] Bluetooth: hci2: sending frame failed (-49)
[ 3096.706478] Bluetooth: hci3: command 0x1001 tx timeout
[ 3096.711888] Bluetooth: hci0: command 0x1009 tx timeout
[ 3096.711977] Bluetooth: hci3: sending frame failed (-49)
[ 3098.066463] Bluetooth: hci2: command 0x1009 tx timeout
[ 3098.071975] Bluetooth: hci1: command 0x1009 tx timeout
[ 3098.786460] Bluetooth: hci3: command 0x1009 tx timeout
[ 3099.986423] net_ratelimit: 18 callbacks suppressed
[ 3099.991465] protocol 88fb is buggy, dev hsr_slave_0
[ 3099.996572] protocol 88fb is buggy, dev hsr_slave_1
[ 3100.001740] protocol 88fb is buggy, dev hsr_slave_0
[ 3100.006824] protocol 88fb is buggy, dev hsr_slave_1
[ 3100.012119] protocol 88fb is buggy, dev hsr_slave_0
[ 3100.017223] protocol 88fb is buggy, dev hsr_slave_1
[ 3100.306462] protocol 88fb is buggy, dev hsr_slave_0
[ 3100.311581] protocol 88fb is buggy, dev hsr_slave_1
23:13:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd0")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 3100.741803] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3100.946439] protocol 88fb is buggy, dev hsr_slave_0
[ 3100.951615] protocol 88fb is buggy, dev hsr_slave_1
23:13:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r1, 0x0, 0x0)
stat(&(0x7f0000000200)='./file0\x00', 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xc68, 0x400000)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040))
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0xef, "64872c8b0fe6a4aa013b9b9745efcfaee75401b2b8d5ac25d69d57ad5942b2b0d8231b866b72aade7d3c15fc48ef66c55eddfaa969eb94b5a9a3f7bce769d87afe7d8975b2224d4c7dec254bd33d787ca9156379779ede005edb55a726784b2e3f391264c7af3be0cec365fd74493f3223f396b93f5a8596f8c05d84fb0f6c9d7bd0ec8b9642741f4ebb3461f6d9c52a856f54defda5987b08359a690450d4f88718e2a5fb97e0ed29e77c0219560fe5e5808494eb62d499ef395a298884323ce5dfcb8b3838746de65a8fa0c64590e618aaa6cf6a8b5ab5ead44d7469b43196d3a4548f26c515c9493cdb7d135f0f"}, &(0x7f0000000000)=0x113)

23:13:45 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:13:45 executing program 4:
memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
syz_open_dev$loop(0x0, 0x0, 0x105082)

23:13:45 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046a00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:13:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd0")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 3102.668010] f2fs_msg: 22 callbacks suppressed
[ 3102.668024] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3102.696171] overlayfs: failed to resolve 'fil': -2
[ 3102.706569] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3102.715423] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3102.716296] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3102.732915] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3102.740776] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
23:13:45 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3102.768659] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3102.781071] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3102.788539] Bluetooth: hci0: command 0x1003 tx timeout
[ 3102.790221] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3102.794864] Bluetooth: hci0: sending frame failed (-49)
[ 3102.807965] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
23:13:45 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_execute_func(&(0x7f0000000140)="98cd8080000cc4c125d0120fad870000202169d00fd1b02db5d9000000ec22840568ea0000c483356f1d0af30f514e2200093c3b6446c4e199e81a0bdc9d670f381d6a2f67450f483bd9e863465776c161660f55790b9688a07a980000c4a1fae6ae34f896dce145e22cd9ec0f0000049f")

[ 3102.815550] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3102.826710] Bluetooth: hci2: sending frame failed (-49)
23:13:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000006c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000000000000000000ac1414bb00"/268], 0x1}}, 0x0)

[ 3102.889200] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3102.911988] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3102.912142] overlayfs: failed to resolve 'fil': -2
23:13:45 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:fil'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:13:45 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x20, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0)
r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
r3 = dup2(r2, r1)
dup2(r3, r0)

23:13:45 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046b00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3103.085505] overlayfs: failed to resolve 'fil': -2
[ 3104.706527] Bluetooth: hci1: command 0x1003 tx timeout
[ 3104.711959] Bluetooth: hci1: sending frame failed (-49)
[ 3104.866439] Bluetooth: hci2: command 0x1003 tx timeout
[ 3104.871811] Bluetooth: hci0: command 0x1001 tx timeout
[ 3104.871878] Bluetooth: hci2: sending frame failed (-49)
[ 3104.882921] Bluetooth: hci0: sending frame failed (-49)
[ 3105.106478] net_ratelimit: 22 callbacks suppressed
[ 3105.106485] protocol 88fb is buggy, dev hsr_slave_0
[ 3105.116721] protocol 88fb is buggy, dev hsr_slave_1
[ 3105.746490] protocol 88fb is buggy, dev hsr_slave_0
[ 3105.751688] protocol 88fb is buggy, dev hsr_slave_1
[ 3106.226486] protocol 88fb is buggy, dev hsr_slave_0
[ 3106.231762] protocol 88fb is buggy, dev hsr_slave_1
[ 3106.236886] protocol 88fb is buggy, dev hsr_slave_0
[ 3106.241945] protocol 88fb is buggy, dev hsr_slave_1
[ 3106.247178] protocol 88fb is buggy, dev hsr_slave_0
[ 3106.252394] protocol 88fb is buggy, dev hsr_slave_1
[ 3106.786478] Bluetooth: hci1: command 0x1001 tx timeout
[ 3106.792016] Bluetooth: hci1: sending frame failed (-49)
[ 3106.946518] Bluetooth: hci0: command 0x1009 tx timeout
[ 3106.951907] Bluetooth: hci2: command 0x1001 tx timeout
[ 3106.957494] Bluetooth: hci2: sending frame failed (-49)
[ 3108.866610] Bluetooth: hci1: command 0x1009 tx timeout
[ 3109.026457] Bluetooth: hci2: command 0x1009 tx timeout
[ 3110.386575] net_ratelimit: 18 callbacks suppressed
[ 3110.391688] protocol 88fb is buggy, dev hsr_slave_0
[ 3110.396834] protocol 88fb is buggy, dev hsr_slave_1
[ 3110.402159] protocol 88fb is buggy, dev hsr_slave_0
[ 3110.407478] protocol 88fb is buggy, dev hsr_slave_1
[ 3110.412683] protocol 88fb is buggy, dev hsr_slave_0
[ 3110.417831] protocol 88fb is buggy, dev hsr_slave_1
[ 3110.706547] protocol 88fb is buggy, dev hsr_slave_0
[ 3110.711737] protocol 88fb is buggy, dev hsr_slave_1
23:13:53 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd0")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 3110.988739] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3111.346463] protocol 88fb is buggy, dev hsr_slave_0
[ 3111.351749] protocol 88fb is buggy, dev hsr_slave_1
23:13:55 executing program 1:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getresuid(&(0x7f0000000380), &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000400))
syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xdf, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="515f75d783d1693eeddfed95febd7c2557c75772c2cf3d7c3000eede89", 0x1d, 0x4}, {&(0x7f0000000300)="364e12fcfa2af010f6cd2a833b62f844c1eb255a7ade61dbee", 0x19, 0x80000000}], 0x4400, &(0x7f0000000440)={[{@abort='abort'}, {@test_dummy_encryption='test_dummy_encryption'}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6000000000}}, {@nomblk_io_submit='nomblk_io_submit'}, {@noacl='noacl'}, {@min_batch_time={'min_batch_time', 0x3d, 0x1f}}, {@stripe={'stripe', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}], [{@dont_appraise='dont_appraise'}, {@fowner_gt={'fowner>', r2}}]})
ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r3, 0x400455c8, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000580)=0x5)

23:13:55 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffb, 0x4)
sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c8cae, 0x0, 0x0, 0xffffffffffffff06)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x9, 0x8, 0x8, 0x800}]}, 0x10)
close(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070")

23:13:55 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

23:13:55 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002006b6b6b00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:13:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd0")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 3112.909566] f2fs_msg: 22 callbacks suppressed
[ 3112.909575] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3112.924872] overlayfs: failed to resolve 'file': -2
[ 3112.933072] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3112.951694] Bluetooth: hci1: Frame reassembly failed (-84)
23:13:55 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3112.955622] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (1802174466, 14)
[ 3112.959117] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3112.969083] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3112.990224] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3112.998062] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:13:55 executing program 4:
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(r0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000400), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

23:13:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x1, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f00000002c0)={0x8, 0xc55})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x680080}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c1fa8614619000000", @ANYRES16=r4, @ANYBLOB="000028bd7000ffdbdf25010c000800600000000000000002000600020000000000000008000100"/54], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)

[ 3113.015228] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (1802174466, 14)
[ 3113.023457] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3113.030216] Bluetooth: hci0: command 0x1003 tx timeout
[ 3113.039667] Bluetooth: hci0: sending frame failed (-49)
23:13:55 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x0)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
fstat(0xffffffffffffffff, 0x0)
lstat(0x0, 0x0)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0)
setregid(0x0, 0x0)

[ 3113.092959] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3113.105830] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:13:55 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000006c00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:13:55 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3113.149387] overlayfs: failed to resolve 'file': -2
[ 3113.256257] overlayfs: failed to resolve 'file': -2
[ 3115.026435] Bluetooth: hci1: command 0x1003 tx timeout
[ 3115.032823] Bluetooth: hci1: sending frame failed (-49)
[ 3115.106414] Bluetooth: hci0: command 0x1001 tx timeout
[ 3115.112050] Bluetooth: hci0: sending frame failed (-49)
[ 3115.186649] Bluetooth: hci2: command 0x1003 tx timeout
[ 3115.192088] Bluetooth: hci2: sending frame failed (-49)
[ 3115.506434] net_ratelimit: 22 callbacks suppressed
[ 3115.506440] protocol 88fb is buggy, dev hsr_slave_0
[ 3115.516535] protocol 88fb is buggy, dev hsr_slave_1
[ 3115.986523] Bluetooth: hci3: command 0x1003 tx timeout
[ 3115.992094] Bluetooth: hci3: sending frame failed (-49)
[ 3116.146491] protocol 88fb is buggy, dev hsr_slave_0
[ 3116.151847] protocol 88fb is buggy, dev hsr_slave_1
[ 3116.626430] protocol 88fb is buggy, dev hsr_slave_0
[ 3116.631684] protocol 88fb is buggy, dev hsr_slave_1
[ 3116.636803] protocol 88fb is buggy, dev hsr_slave_0
[ 3116.641912] protocol 88fb is buggy, dev hsr_slave_1
[ 3116.647088] protocol 88fb is buggy, dev hsr_slave_0
[ 3116.652216] protocol 88fb is buggy, dev hsr_slave_1
[ 3117.106473] Bluetooth: hci1: command 0x1001 tx timeout
[ 3117.111984] Bluetooth: hci1: sending frame failed (-49)
[ 3117.186477] Bluetooth: hci0: command 0x1009 tx timeout
[ 3117.266451] Bluetooth: hci2: command 0x1001 tx timeout
[ 3117.272103] Bluetooth: hci2: sending frame failed (-49)
[ 3118.066575] Bluetooth: hci3: command 0x1001 tx timeout
[ 3118.072157] Bluetooth: hci3: sending frame failed (-49)
[ 3119.186564] Bluetooth: hci1: command 0x1009 tx timeout
[ 3119.346600] Bluetooth: hci2: command 0x1009 tx timeout
[ 3120.146525] Bluetooth: hci3: command 0x1009 tx timeout
[ 3120.786478] net_ratelimit: 18 callbacks suppressed
[ 3120.791720] protocol 88fb is buggy, dev hsr_slave_0
[ 3120.796781] protocol 88fb is buggy, dev hsr_slave_1
[ 3120.801859] protocol 88fb is buggy, dev hsr_slave_0
[ 3120.806976] protocol 88fb is buggy, dev hsr_slave_1
[ 3120.812064] protocol 88fb is buggy, dev hsr_slave_0
[ 3120.817088] protocol 88fb is buggy, dev hsr_slave_1
[ 3121.106508] protocol 88fb is buggy, dev hsr_slave_0
[ 3121.111662] protocol 88fb is buggy, dev hsr_slave_1
23:14:03 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd0")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:03 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046c00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:14:03 executing program 4:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x105082)

23:14:03 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3121.220841] f2fs_msg: 14 callbacks suppressed
[ 3121.220850] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3121.233486] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3121.242693] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
[ 3121.250876] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:14:03 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3121.265373] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3121.273124] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3121.280923] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
[ 3121.290524] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3121.334450] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3121.345171] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3121.746459] protocol 88fb is buggy, dev hsr_slave_0
[ 3121.751597] protocol 88fb is buggy, dev hsr_slave_1
23:14:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd0")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:05 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040), 0x4)

23:14:05 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')

[ 3123.141267] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3123.150290] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3123.153289] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3123.346457] Bluetooth: hci0: command 0x1003 tx timeout
[ 3123.351979] Bluetooth: hci0: sending frame failed (-49)
23:14:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80102)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=<r3=>0x0)
sched_getaffinity(r3, 0x8, &(0x7f0000000140))

23:14:07 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046d00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:14:07 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000140)='./file0/file0\x00')

23:14:07 executing program 4:
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x400)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(r0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000400), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$VT_OPENQRY(r0, 0x5600, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

[ 3124.436141] Bluetooth: hci2: Frame reassembly failed (-84)
[ 3125.186421] Bluetooth: hci1: command 0x1003 tx timeout
[ 3125.191847] Bluetooth: hci1: sending frame failed (-49)
[ 3125.426479] Bluetooth: hci0: command 0x1001 tx timeout
[ 3125.431983] Bluetooth: hci0: sending frame failed (-49)
[ 3125.906433] net_ratelimit: 22 callbacks suppressed
[ 3125.906439] protocol 88fb is buggy, dev hsr_slave_0
[ 3125.916743] protocol 88fb is buggy, dev hsr_slave_1
[ 3126.466428] Bluetooth: hci2: command 0x1003 tx timeout
[ 3126.471886] Bluetooth: hci2: sending frame failed (-49)
[ 3126.546505] protocol 88fb is buggy, dev hsr_slave_0
[ 3126.551679] protocol 88fb is buggy, dev hsr_slave_1
[ 3127.026430] protocol 88fb is buggy, dev hsr_slave_0
[ 3127.031534] protocol 88fb is buggy, dev hsr_slave_1
[ 3127.036677] protocol 88fb is buggy, dev hsr_slave_0
[ 3127.041766] protocol 88fb is buggy, dev hsr_slave_1
[ 3127.046878] protocol 88fb is buggy, dev hsr_slave_0
[ 3127.051933] protocol 88fb is buggy, dev hsr_slave_1
[ 3127.266451] Bluetooth: hci1: command 0x1001 tx timeout
[ 3127.272094] Bluetooth: hci1: sending frame failed (-49)
[ 3127.506435] Bluetooth: hci0: command 0x1009 tx timeout
[ 3128.546522] Bluetooth: hci2: command 0x1001 tx timeout
[ 3128.552014] Bluetooth: hci2: sending frame failed (-49)
[ 3129.346508] Bluetooth: hci1: command 0x1009 tx timeout
[ 3130.626478] Bluetooth: hci2: command 0x1009 tx timeout
[ 3131.186460] net_ratelimit: 18 callbacks suppressed
[ 3131.186466] protocol 88fb is buggy, dev hsr_slave_0
[ 3131.206782] protocol 88fb is buggy, dev hsr_slave_1
[ 3131.211870] protocol 88fb is buggy, dev hsr_slave_0
[ 3131.216966] protocol 88fb is buggy, dev hsr_slave_1
[ 3131.222050] protocol 88fb is buggy, dev hsr_slave_0
[ 3131.227152] protocol 88fb is buggy, dev hsr_slave_1
23:14:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:14 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000140)='./file0/file0\x00')

23:14:14 executing program 4:
r0 = memfd_create(&(0x7f0000000200)='[\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x5)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

23:14:14 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000046e00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:14:14 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(0x0, &(0x7f0000000140)='./file0/file0\x00')

[ 3131.458212] f2fs_msg: 22 callbacks suppressed
[ 3131.458220] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3131.481672] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3131.499978] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
[ 3131.506429] protocol 88fb is buggy, dev hsr_slave_0
[ 3131.511573] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3131.512801] protocol 88fb is buggy, dev hsr_slave_1
[ 3131.520993] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3131.539113] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3131.556256] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (67108866, 14)
[ 3131.567017] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3131.614038] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3131.622025] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3132.146485] protocol 88fb is buggy, dev hsr_slave_0
[ 3132.151590] protocol 88fb is buggy, dev hsr_slave_1
23:14:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:15 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007400000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:14:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r2 = dup2(r1, r1)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001740)={<r3=>0x0, 0x1}, &(0x7f0000001780)=0xc)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000002a40)={<r4=>0x0, 0xc0, 0x800, 0x9}, &(0x7f0000002a80)=0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000004180)={<r5=>0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1f}}}, [0x5, 0x9, 0x5, 0x1590, 0xcb3, 0x7, 0x5, 0x5, 0x101, 0x8, 0xfb4, 0x29c, 0x7, 0x1, 0x6]}, &(0x7f0000004280)=0x100)
sendmmsg$inet_sctp(r2, &(0x7f0000005600)=[{&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x1ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}, 0xffff}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="fc55d321427c48073b6d4306504ab8b924fe11a40599502d72e570e27deed20c80008354b41f65668b9f4772ee5ec14d824b07558fd11209051dae5c615f55d299b1c21b", 0x44}, {&(0x7f0000000140)="536b744b22e55d720dbf2183d5a4c5958a5333b18358ffc63985b42821a6b7fdb96207", 0x23}, {&(0x7f0000000240)="374dda966cd50a4a4862", 0xa}], 0x3, &(0x7f00000002c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @init={0x18, 0x84, 0x0, {0x7ff, 0x80, 0x5, 0x67}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @init={0x18, 0x84, 0x0, {0x100000001, 0x401, 0x47, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}], 0x78, 0x40}, {&(0x7f0000000340)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000380)="4de0baa11ddb39483670fe96ae781df6c263315566a6be20691c0a60f3b43595a84a45f7716e273583565c9e0323166f0b5158cdea70de5c3ab638585e009b0c9e1d7d814335db1220df102953937cfdf88f02f5e0ab6a12337961f8a3dca8958fb4254df6b0efa4804a92eefb47e48c8b1133dabcbb38d7dac7621cc27f9595dc71b763e6135c817b210d4011622cf5164514aa77da37baf0113b5b9c56b81316b7d0a9cd02a438e0532c9569b29994f318f0e30f207a31cbafe93cbd7b1acea19f3be965ae3b905115f9bcc03711038b83bf7a", 0xd4}, {&(0x7f0000000480)="041627a4dbab8ff9dd64d23a146c39b4012c976b762b97b1b94be3bf860f9ea3091aedfa095bd8af1287aa21d6042693153eb23c0e100f75ce756a1f4161ed1c92ac924f16c38d0d2a90ec2a0a2ff80a4e49425ff16b85a35952d7f10f342a54cded6f1d57900fa7851fcd9ac23fc429edb1d7d8932bcd110c03e6688cab674291ed2068339435c21117d0ea403345d9bf077666bd4bef749acc7ecea5a73972057480212f3b540bf6b0808bf0fa985155cd425d4cdeb8c391ebb093f9e02f1a98eebf28", 0xc4}, {&(0x7f0000000580)="1b51f327ea1a44c707a99f60f3b84a6e633913990c84c832682fd727c61af32bff1cdffa6d80b421297f4e7a0c4a9b134db37f64bb5b6a8801a7059d38df193345d1250e59643fecbe1838c8aafcda72c97e928df3e1cc6af2170950e075ae7971472620ed0ace72ad0e0c442c9e138c75b8b4057aa68851d71aac368fef1dfa94ffda64985ac34bad6de1dd19b16a5364e6f9153c4c5de8ea4bccda7f92e33ccee70c7e646edc38d87f494360b071c3e9be9e7587fdad46abc77346a5be9824a25eedbe888568e4af78", 0xca}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="4f879aeb68f213618e176f418ef193303cc591", 0x13}], 0x5, &(0x7f00000017c0)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @prinfo={0x18, 0x84, 0x5, {0x30}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0xffffffffffffffe0, 0x1, 0xad8c, 0x80, 0x7, 0x3ff, 0x0, r3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @init={0x18, 0x84, 0x0, {0x0, 0x7af, 0x9, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="7bc0aae76d4713aa2b8f4c8fbcf949bd"}], 0xe8, 0x1}, {&(0x7f00000018c0)=@in6={0xa, 0x4e21, 0x89, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000001900)="44bc7c39a26cdef3c4c484c621f29fc53dbb371dbbcab0624c53f66d61ea439387faf1cb2b650c9bbb8605b2a113a9500f33902d894ed0e97b4378156f2b4fdbb7095aa45ed9e112d977d9dcebd2289e253fff6f3870d14720574f", 0x5b}, {&(0x7f0000001980)="1d86b4fe5159fa23bd05bed69895a09aba446b4e732f9214b8c9b33151c7e23bdfe92ff27041e42b0a3bf5f5881c138047e05a062ed516a7931cc0d6159168d52a5821d5f0ceddc8169345", 0x4b}, {&(0x7f0000001a00)="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", 0x1000}], 0x3, &(0x7f0000005980)=ANY=[@ANYBLOB="18000000f10000008400000006000000020000000000000018000000000000008400000007000000ffffffff00000000300000046b000000840000000100000001003f00000000004000000086a00000ff010000ff0000000200000098f12738b73143af4cbcb86632c6526be3247ef87264d9c2c2da0592eae4aabfda7f17d88819e545a1f3c05e76d939c87f30e85719a2e5ecb15152d8ae6ea49e1f370d2e", @ANYRES32=r4, @ANYBLOB="180000000000000084000000050000003000000000000000c86a805102518bb7f511a8703970619eaf20a876a257a7f5bfdda936267f19754643f992ca54a54a10d39427c8d36d84e9396804517dbbe9e4211476c8820bed6ecdca4887f14a2898c9a55a9c8237c4577bd2c17fb3e22b178ae78b85a4131dc6ff6a718c8248c48b859cb133a33a1f7b6f66496c3c30c442be9479abf77ef50e9b69ca1f889a0c530a143cf8f8978095af873563c38f6202d997741c7e0671679337510ecddc496a360cb0684aa6bcea30fe224499fda566fc"], 0x78, 0x24008000}, {&(0x7f0000002b40)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002d80)=[{&(0x7f0000002b80)="ead64883e217ea4fc5ac39717a21111549eb61430a67e2cc92948e00cd925f3a6e1a0531b1ac907bfde8a46abd26838c773468419bda5b8cdfc5940337c0e4c5e144d0bbf221c4e4db0590c803be6a92c50aa5cae26b0b31bed04be9d2a6ed4d865535cafcce9fad3a", 0x69}, {&(0x7f0000002c00)="0cd12d24f252800aea5eb23075253677b0326c43eb368ec8c3c89fe767156fedb9a9da5e58b103fb3cda41221baa14b99e78f8c32f67f8df31ff8d742018d17984696c1f00bf4e5c1da4c810281e215ebb820342a97bf62c5cdb8b6d15b10d0838ab0d5b2ef04fabfba032b609", 0x6d}, {&(0x7f0000002c80)="3f7e377edc3cb5e19a45a7a28b549380cd75a592d3198f681b270c9e4349e52c3e54993ece10271d54df14b550a4ff70a36fd7fc00b73eaeb6d087905b109c3049f332c0839a349e30b1a13085bd869874f72cd8f60ac1bab5890b726ad26c920523f3c5eb98b96daf2400927b9eadbf144564b3f704e34182f76094958e758784e5ba66bff9290c6a2a2acaaf91326a8d9f22ee983f79c355dfef153977c2c9cf3555393b8f77f665faf04efcb089c98091dc8445f0b6cb596bc208947f7846935d7a7b1c9a9c695c52c71d4820c5bdf6f8d893dcbd03d4132857e932f758df97f013eb", 0xe4}], 0x3, &(0x7f0000005800)=ANY=[@ANYBLOB="1800000000000000840007000000e00000010000000018000000000000e4d328370000000000ce470010ff018100e165327db540a2336bc20e65ddb20265b4c3a59b185213bb1e62e269f17ebfb6a302282981be4db59ab388e9838e2472a8459c69de51a91b0f6a69129a051a17924c505fe8c60bd76036171ff6a236cfd4e812340c87f52a3068309c00b94bf1618eb0a45172e39026cb470b95c3d1bae1401f47b4b0f40f437dbd9b77c52dcc29d207cfe105f78ece8af73faa640000"], 0x30, 0x804}, {&(0x7f0000002e00)=@in6={0xa, 0x4e21, 0xfffffffffffeffff, @remote, 0x7fffffff}, 0x1c, &(0x7f0000003f40)=[{&(0x7f0000002e40)="3a3f74334fbb46a6e1247e1209a1ce3f2fb5d47e1cc2403b97a9cb44b811238974937774ed5b959720019b06a5ae2cb9e2a5c30b5606acc6f625c3c13621864a2a37521c39bce37d2794846c37545d7c73500cecd19d4eb39daf4f8a3f87c5596d462641ceffefa996fa0451203d33734df6bd5e3e9200fcedda91089e702a6fe55becfddee180f053c1cd6ea3d012d1c186cf1390b4c1896557bec916aca8ec1e509e0d", 0xa4}, {&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="0e3482f627178afc95e15bb38dd028d50d78ee902afe579b52a971751528828a2ea34b9cbdb2f087df8024184999b26fee3ebf7b", 0x34}], 0x3, 0x0, 0x0, 0x810}, {&(0x7f0000003f80)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000004140)=[{&(0x7f0000003fc0)="df3314207ade2009d119c05e809222b1473f8618d4f23687edf9ac7c2554b69a357a2783789fe20998c8dc8501a40a8a366c36622dce3bda6b405836784edab0c6ab1b0dea899659369c850f04279877931094d2d9afc402d927bdde3b7c3e157baae23441c6bdad21b2d7a50ebcf04180d0ca208a1b0cb36169ee95839ff2a223b8b29864dcca11c0c9e7e05743a9da3f543ada656c3cc7d38f84520e4951e160af72cf50f3ba95a185ad1828eecfc3f9c7b6e048e72b432f03d5d7", 0xbc}, {&(0x7f0000004080)="7975ec3e0d82419addd0014a4a61aed34dea36d028b7859ae46e5f813315caa8c695d14222bc4bfaebbf0f81de573ed29d1c40cd067cd8997df8f8718a887a4241316b5f896dd4408f9299193374c67451baedfc6322585a9f34d9390757cf17aa7b03aeb8199340fdb6cf3419f4bb9bb9789a05fb2ea85e71a1108e9d6f9dee774f36b0bf84df8ff87d8d26f8dd9903a4d36b26720957b5", 0x98}], 0x2, &(0x7f00000057c0)=ANY=[@ANYBLOB="20000000000000008400000002000000010000800000000000000000", @ANYRES32=r5, @ANYBLOB="180000000000000084000000002386f456c32c4053176f0000"], 0x38, 0x80}, {&(0x7f0000004300)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000005580)=[{&(0x7f0000004340)="c9a8713726094ec4158f404bfec3093216a089344b2e6717226a6305af6b6953ed79c3e09b1e6ea0016cf1cbe5427a3a9db34f94e0184db0618b8ab55e40951badece3e5ceed6ee9000b17b3d755e2d7e78ca0512960871e36ff6732cdc6773325a25bae664f46789a087bdb1fffcdeca66a108d5eca0aa61d22e3fcc818eeb92d56359cb79e16be754e8020dbfa78e3dcc3ea09a07c5a1b52c345902d664de5b0a9167ce1fe1902b557710024f096b872ba06f8a17ee5da8ab82a888b137e0f83682c8ae6a623e09d78dac9a971fa9805d9bbac29825d61255a45e9c6cac59bc762ffb9da8f55d208eecbe66cb49d1aa001a9cd46253d1f97", 0xf9}, {&(0x7f0000004440)="7ac59d1dd3ea83c03240f8977f35664131d367b537d72ab2d103d94f0e60f0ee1e4bad40023f580fce2f9dc699557f2eae75013a950f350eda87dd7e", 0x3c}, {&(0x7f0000004480)="2f9e825ebb07a330282e5e104522eb1404f89f71007b365ab8265e7f0702337fde272810d0d44aaff9abc89460573e57374977427be1ddbcefef630615acb4fd3677d87768f2a199b9ecd06c1a34bb9180ea3f68246aeddb152bb01ba3e46e2b1a2480cde40a4ecd42bea5f2fb03f16d5ac02205d86c6cd9ded560eda5583bc0d797956f7d506036c76a7ebf83bce176b73fd80a721850e5f13564c33be86f7a247be132b09885e3ded0a84e11a28eef34a39be69cd7947ffbfab487ce088bd3a70079", 0xc3}, {&(0x7f0000004580)="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", 0x1000}], 0x4, &(0x7f00000055c0)=[@authinfo={0x18, 0x84, 0x6, {0x7}}], 0x18, 0x4000040}], 0x7, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10)
syz_open_pts(r1, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000002ac0)={r5, 0x40}, 0x8)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:14:17 executing program 4:
lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000b00)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082)
r4 = memfd_create(&(0x7f0000000280)='IPVS\x00', 0x0)
io_cancel(0x0, 0x0, &(0x7f0000000240))
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
fallocate(r3, 0x11, 0x0, 0xc00000)

23:14:17 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', 0x0)

23:14:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:17 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000007a00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:14:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:17 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', 0x0)

23:14:17 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002ffffff8c00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:14:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 3134.703149] Bluetooth: hci0: Frame reassembly failed (-84)
23:14:17 executing program 4:
lsetxattr$security_smack_transmute(0x0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
dup2(0xffffffffffffffff, r0)
syz_open_dev$loop(0x0, 0x0, 0x105082)

[ 3136.306435] net_ratelimit: 22 callbacks suppressed
[ 3136.306441] protocol 88fb is buggy, dev hsr_slave_0
[ 3136.316711] protocol 88fb is buggy, dev hsr_slave_1
[ 3136.706709] Bluetooth: hci0: command 0x1003 tx timeout
[ 3136.713135] Bluetooth: hci0: sending frame failed (-49)
[ 3136.946551] protocol 88fb is buggy, dev hsr_slave_0
[ 3136.955473] protocol 88fb is buggy, dev hsr_slave_1
[ 3137.426472] protocol 88fb is buggy, dev hsr_slave_0
[ 3137.431580] protocol 88fb is buggy, dev hsr_slave_1
[ 3137.436752] protocol 88fb is buggy, dev hsr_slave_0
[ 3137.441989] protocol 88fb is buggy, dev hsr_slave_1
[ 3137.447123] protocol 88fb is buggy, dev hsr_slave_0
[ 3137.452168] protocol 88fb is buggy, dev hsr_slave_1
[ 3138.786549] Bluetooth: hci0: command 0x1001 tx timeout
[ 3138.792117] Bluetooth: hci0: sending frame failed (-49)
[ 3140.866523] Bluetooth: hci0: command 0x1009 tx timeout
[ 3141.586462] net_ratelimit: 18 callbacks suppressed
[ 3141.591445] protocol 88fb is buggy, dev hsr_slave_0
[ 3141.596607] protocol 88fb is buggy, dev hsr_slave_1
[ 3141.602063] protocol 88fb is buggy, dev hsr_slave_0
[ 3141.607115] protocol 88fb is buggy, dev hsr_slave_1
[ 3141.612623] protocol 88fb is buggy, dev hsr_slave_0
[ 3141.618090] protocol 88fb is buggy, dev hsr_slave_1
[ 3141.906593] protocol 88fb is buggy, dev hsr_slave_0
[ 3141.911802] protocol 88fb is buggy, dev hsr_slave_1
[ 3142.546457] protocol 88fb is buggy, dev hsr_slave_0
[ 3142.551849] protocol 88fb is buggy, dev hsr_slave_1
23:14:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000040)={0x2, 0x6}, 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:14:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:27 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', 0x0)

23:14:27 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000edc000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:14:27 executing program 4:
r0 = socket(0x10, 0x80803, 0x0)
write(r0, &(0x7f0000000000)="120000001a002517fc85bc04fef6000d0a0d", 0x12)
read(r0, &(0x7f0000000040)=""/71, 0x47)

23:14:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 3144.910239] f2fs_msg: 54 callbacks suppressed
[ 3144.910248] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:14:27 executing program 0:
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000)
getresgid(0x0, 0x0, 0x0)

23:14:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:27 executing program 4:
socket(0x0, 0x0, 0x0)
r0 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
unshare(0x400)
shutdown(0xffffffffffffffff, 0x0)
fchown(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)

[ 3144.956129] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3144.968085] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (3976200194, 14)
[ 3144.987483] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:14:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 3145.016165] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3145.029738] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3145.038872] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (3976200194, 14)
23:14:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 3145.065762] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3145.142203] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3145.186485] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3145.697221] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3146.706438] net_ratelimit: 22 callbacks suppressed
[ 3146.706445] protocol 88fb is buggy, dev hsr_slave_0
[ 3146.716992] protocol 88fb is buggy, dev hsr_slave_1
[ 3146.946413] Bluetooth: hci0: command 0x1003 tx timeout
[ 3146.952150] Bluetooth: hci0: sending frame failed (-49)
[ 3147.346547] protocol 88fb is buggy, dev hsr_slave_0
[ 3147.351721] protocol 88fb is buggy, dev hsr_slave_1
[ 3147.746479] Bluetooth: hci1: command 0x1003 tx timeout
[ 3147.752135] Bluetooth: hci1: sending frame failed (-49)
[ 3147.826497] protocol 88fb is buggy, dev hsr_slave_0
[ 3147.831608] protocol 88fb is buggy, dev hsr_slave_1
[ 3147.837000] protocol 88fb is buggy, dev hsr_slave_0
[ 3147.842065] protocol 88fb is buggy, dev hsr_slave_1
[ 3147.847202] protocol 88fb is buggy, dev hsr_slave_0
[ 3147.852265] protocol 88fb is buggy, dev hsr_slave_1
[ 3149.026464] Bluetooth: hci0: command 0x1001 tx timeout
[ 3149.031984] Bluetooth: hci0: sending frame failed (-49)
[ 3149.826509] Bluetooth: hci1: command 0x1001 tx timeout
[ 3149.832034] Bluetooth: hci1: sending frame failed (-49)
[ 3151.106474] Bluetooth: hci0: command 0x1009 tx timeout
[ 3151.906461] Bluetooth: hci1: command 0x1009 tx timeout
[ 3151.986458] net_ratelimit: 18 callbacks suppressed
[ 3151.991460] protocol 88fb is buggy, dev hsr_slave_0
[ 3151.996616] protocol 88fb is buggy, dev hsr_slave_1
[ 3152.001798] protocol 88fb is buggy, dev hsr_slave_0
[ 3152.006932] protocol 88fb is buggy, dev hsr_slave_1
[ 3152.012251] protocol 88fb is buggy, dev hsr_slave_0
[ 3152.017355] protocol 88fb is buggy, dev hsr_slave_1
[ 3152.306517] protocol 88fb is buggy, dev hsr_slave_0
[ 3152.311757] protocol 88fb is buggy, dev hsr_slave_1
[ 3152.946466] protocol 88fb is buggy, dev hsr_slave_0
[ 3152.951653] protocol 88fb is buggy, dev hsr_slave_1
23:14:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @dev}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8)
setreuid(r3, r4)
ioctl$TCGETX(r2, 0x5432, &(0x7f0000000000))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:14:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:38 executing program 0:
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000)
getresgid(0x0, 0x0, 0x0)

23:14:38 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000021020f5f200000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:14:38 executing program 4:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc5}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x6})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3155.791008] f2fs_msg: 6 callbacks suppressed
[ 3155.791021] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3155.826660] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:14:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:38 executing program 0:
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000)
getresgid(0x0, 0x0, 0x0)

[ 3155.857036] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4112519170, 14)
[ 3155.881563] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3155.916940] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3155.938553] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3155.946511] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:14:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:38 executing program 4:

23:14:38 executing program 0:
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000)
getresgid(0x0, 0x0, 0x0)

[ 3156.014366] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4112519170, 14)
[ 3156.026528] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3156.100919] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3156.119505] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3157.106435] net_ratelimit: 22 callbacks suppressed
[ 3157.106442] protocol 88fb is buggy, dev hsr_slave_0
[ 3157.116905] protocol 88fb is buggy, dev hsr_slave_1
[ 3157.746454] protocol 88fb is buggy, dev hsr_slave_0
[ 3157.751750] protocol 88fb is buggy, dev hsr_slave_1
[ 3157.986423] Bluetooth: hci0: command 0x1003 tx timeout
[ 3157.991835] Bluetooth: hci0: sending frame failed (-49)
[ 3158.226427] protocol 88fb is buggy, dev hsr_slave_0
[ 3158.231640] protocol 88fb is buggy, dev hsr_slave_1
[ 3158.236873] protocol 88fb is buggy, dev hsr_slave_0
[ 3158.242016] protocol 88fb is buggy, dev hsr_slave_1
[ 3158.247201] protocol 88fb is buggy, dev hsr_slave_0
[ 3158.252394] protocol 88fb is buggy, dev hsr_slave_1
[ 3160.066519] Bluetooth: hci0: command 0x1001 tx timeout
[ 3160.071946] Bluetooth: hci0: sending frame failed (-49)
[ 3162.146459] Bluetooth: hci0: command 0x1009 tx timeout
[ 3162.386462] net_ratelimit: 18 callbacks suppressed
[ 3162.391452] protocol 88fb is buggy, dev hsr_slave_0
[ 3162.396512] protocol 88fb is buggy, dev hsr_slave_1
[ 3162.401578] protocol 88fb is buggy, dev hsr_slave_0
[ 3162.406637] protocol 88fb is buggy, dev hsr_slave_1
[ 3162.411769] protocol 88fb is buggy, dev hsr_slave_0
[ 3162.416892] protocol 88fb is buggy, dev hsr_slave_1
[ 3162.706473] protocol 88fb is buggy, dev hsr_slave_0
[ 3162.711718] protocol 88fb is buggy, dev hsr_slave_1
[ 3163.346476] protocol 88fb is buggy, dev hsr_slave_0
[ 3163.351580] protocol 88fb is buggy, dev hsr_slave_1
23:14:48 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@initdev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x800000000005}}, 0xe8)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
getegid()
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:14:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:48 executing program 4:

23:14:48 executing program 0:
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000)

23:14:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:48 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002fffffff500000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:14:48 executing program 4:

23:14:48 executing program 0:
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')

23:14:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:48 executing program 4:

23:14:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:48 executing program 0:
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')

[ 3166.032705] f2fs_msg: 6 callbacks suppressed
[ 3166.032713] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3166.054887] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3166.057210] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3166.116082] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4294967042, 14)
[ 3166.154273] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3166.168712] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3166.178743] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3166.189724] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4294967042, 14)
[ 3166.209717] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3166.253633] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3166.261262] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3167.506454] net_ratelimit: 22 callbacks suppressed
[ 3167.506460] protocol 88fb is buggy, dev hsr_slave_0
[ 3167.516964] protocol 88fb is buggy, dev hsr_slave_1
[ 3168.066499] Bluetooth: hci0: command 0x1003 tx timeout
[ 3168.072677] Bluetooth: hci0: sending frame failed (-49)
[ 3168.146510] protocol 88fb is buggy, dev hsr_slave_0
[ 3168.151893] protocol 88fb is buggy, dev hsr_slave_1
[ 3168.626461] protocol 88fb is buggy, dev hsr_slave_0
[ 3168.632214] protocol 88fb is buggy, dev hsr_slave_1
[ 3168.639907] protocol 88fb is buggy, dev hsr_slave_0
[ 3168.645099] protocol 88fb is buggy, dev hsr_slave_1
[ 3168.650264] protocol 88fb is buggy, dev hsr_slave_0
[ 3168.655415] protocol 88fb is buggy, dev hsr_slave_1
[ 3170.146517] Bluetooth: hci0: command 0x1001 tx timeout
[ 3170.152117] Bluetooth: hci0: sending frame failed (-49)
[ 3172.226559] Bluetooth: hci0: command 0x1009 tx timeout
[ 3172.786517] net_ratelimit: 18 callbacks suppressed
[ 3172.786524] protocol 88fb is buggy, dev hsr_slave_0
[ 3172.796643] protocol 88fb is buggy, dev hsr_slave_1
[ 3172.801786] protocol 88fb is buggy, dev hsr_slave_0
[ 3172.806931] protocol 88fb is buggy, dev hsr_slave_1
[ 3172.812067] protocol 88fb is buggy, dev hsr_slave_0
[ 3172.817261] protocol 88fb is buggy, dev hsr_slave_1
[ 3173.106478] protocol 88fb is buggy, dev hsr_slave_0
[ 3173.111602] protocol 88fb is buggy, dev hsr_slave_1
[ 3173.746514] protocol 88fb is buggy, dev hsr_slave_0
[ 3173.751667] protocol 88fb is buggy, dev hsr_slave_1
23:14:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x800008000000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="e84a640fcb22502835d5d4a23dae1567", 0x10)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000100))

23:14:58 executing program 4:

23:14:58 executing program 0:
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')

23:14:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:14:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:58 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002fffffff600000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:14:58 executing program 4:

23:14:58 executing program 0:
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')

23:14:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

[ 3176.283286] f2fs_msg: 6 callbacks suppressed
[ 3176.283295] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3176.306638] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:14:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:14:58 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x5, 0x7, 0x5}, 0x3c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1, 0x4, 0x100000001, 0x0, r0}, 0x3c)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000240)}, 0x10)
openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[ 3176.328415] Bluetooth: hci0: Frame reassembly failed (-84)
23:14:58 executing program 0:
syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')

[ 3176.362904] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4294967042, 14)
[ 3176.388294] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3176.416118] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3176.426492] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3176.434192] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4294967042, 14)
[ 3176.443354] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3176.500029] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3176.507309] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3177.906471] net_ratelimit: 22 callbacks suppressed
[ 3177.906479] protocol 88fb is buggy, dev hsr_slave_0
[ 3177.916902] protocol 88fb is buggy, dev hsr_slave_1
[ 3178.386556] Bluetooth: hci0: command 0x1003 tx timeout
[ 3178.392050] Bluetooth: hci0: sending frame failed (-49)
[ 3178.546532] protocol 88fb is buggy, dev hsr_slave_0
[ 3178.551934] protocol 88fb is buggy, dev hsr_slave_1
[ 3179.036428] protocol 88fb is buggy, dev hsr_slave_0
[ 3179.041923] protocol 88fb is buggy, dev hsr_slave_1
[ 3179.047214] protocol 88fb is buggy, dev hsr_slave_0
[ 3179.052277] protocol 88fb is buggy, dev hsr_slave_1
[ 3179.057539] protocol 88fb is buggy, dev hsr_slave_0
[ 3179.062638] protocol 88fb is buggy, dev hsr_slave_1
[ 3180.466706] Bluetooth: hci0: command 0x1001 tx timeout
[ 3180.472325] Bluetooth: hci0: sending frame failed (-49)
[ 3182.546501] Bluetooth: hci0: command 0x1009 tx timeout
[ 3183.186502] net_ratelimit: 18 callbacks suppressed
[ 3183.191534] protocol 88fb is buggy, dev hsr_slave_0
[ 3183.196815] protocol 88fb is buggy, dev hsr_slave_1
[ 3183.201951] protocol 88fb is buggy, dev hsr_slave_0
[ 3183.207047] protocol 88fb is buggy, dev hsr_slave_1
[ 3183.212277] protocol 88fb is buggy, dev hsr_slave_0
[ 3183.217435] protocol 88fb is buggy, dev hsr_slave_1
[ 3183.506457] protocol 88fb is buggy, dev hsr_slave_0
[ 3183.511640] protocol 88fb is buggy, dev hsr_slave_1
[ 3184.146508] protocol 88fb is buggy, dev hsr_slave_0
[ 3184.151888] protocol 88fb is buggy, dev hsr_slave_1
23:15:09 executing program 1:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0)
ioctl$TIOCEXCL(r0, 0x540c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:15:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

23:15:09 executing program 0:
syz_open_procfs(0x0, 0x0)

23:15:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, &(0x7f0000000080))

23:15:09 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffff1, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
r1 = syz_open_procfs(0x0, &(0x7f0000002680)='fdinfo\x00}\xc7\xc0\xe5\x80g\xbb\x9c\xbe\x92\xf7\x10=E\x99On\xb9k\xe3\xe7\x86r\xbd.\xcc\x1e:Tr#\x87\xda\x117\xda\xb2lA\xd4\x1bL5\x020\x80g\x18\xe7\xae\xc7z\xe8\x85\xba\x98\x92\x1a\xb9\xf3\x9c\xa6\v\xf2\xf3\x85\xb2l>\x0e\xe6\xff\x0f\xd2O\x85\xba\x1a\xb7\xccC\x88\xa2;\xb7Kx6\xf5Ed\x16z#\xd3G\x8ca\x83\x16\xa5\x92\x99#\xb3\x89\x82aJ\xa0*\xc5p\xf2\x04\xab+\x02\xd6\x84\xcf\x81f\xc1\xaaEF)\x92~\xf0S)\xe7\x1a\xfd1\xfbL\xfb\xb0\xd9\xfc8c2^CJ\xcc,\x88>\xff\xba\x1f\xb0\xc9\f21')
write(0xffffffffffffffff, &(0x7f0000001700), 0x0)
getdents(r1, &(0x7f0000000240)=""/4096, 0xfcb8)

23:15:09 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000001fe00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3186.522082] f2fs_msg: 6 callbacks suppressed
[ 3186.522091] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:15:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000)

23:15:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080))

[ 3186.562261] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:15:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080))

[ 3186.604489] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3186.615477] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (16777218, 14)
23:15:09 executing program 4:
r0 = creat(&(0x7f0000000800)='./file0\x00', 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
write$binfmt_aout(r0, 0x0, 0x0)

[ 3186.661826] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3186.703449] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3186.721572] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3186.736019] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:15:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

[ 3186.746576] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (16777218, 14)
[ 3186.764523] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:15:09 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
listen(r0, 0x7d3)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

[ 3186.840667] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3186.857350] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3186.867749] Bluetooth: hci2: Frame reassembly failed (-84)
[ 3188.306481] net_ratelimit: 22 callbacks suppressed
[ 3188.306487] protocol 88fb is buggy, dev hsr_slave_0
[ 3188.316644] protocol 88fb is buggy, dev hsr_slave_1
[ 3188.626463] Bluetooth: hci0: command 0x1003 tx timeout
[ 3188.631957] Bluetooth: hci0: sending frame failed (-49)
[ 3188.796546] Bluetooth: hci1: command 0x1003 tx timeout
[ 3188.802125] Bluetooth: hci1: sending frame failed (-49)
[ 3188.946494] protocol 88fb is buggy, dev hsr_slave_0
[ 3188.951656] protocol 88fb is buggy, dev hsr_slave_1
[ 3188.956887] Bluetooth: hci2: command 0x1003 tx timeout
[ 3188.962258] Bluetooth: hci2: sending frame failed (-49)
[ 3189.346480] Bluetooth: hci3: command 0x1003 tx timeout
[ 3189.351946] Bluetooth: hci3: sending frame failed (-49)
[ 3189.426504] protocol 88fb is buggy, dev hsr_slave_0
[ 3189.431662] protocol 88fb is buggy, dev hsr_slave_1
[ 3189.436884] protocol 88fb is buggy, dev hsr_slave_0
[ 3189.441986] protocol 88fb is buggy, dev hsr_slave_1
[ 3189.447138] protocol 88fb is buggy, dev hsr_slave_0
[ 3189.452196] protocol 88fb is buggy, dev hsr_slave_1
[ 3190.706576] Bluetooth: hci0: command 0x1001 tx timeout
[ 3190.712003] Bluetooth: hci0: sending frame failed (-49)
[ 3190.866507] Bluetooth: hci1: command 0x1001 tx timeout
[ 3190.871994] Bluetooth: hci1: sending frame failed (-49)
[ 3191.026638] Bluetooth: hci2: command 0x1001 tx timeout
[ 3191.032090] Bluetooth: hci2: sending frame failed (-49)
[ 3191.426480] Bluetooth: hci3: command 0x1001 tx timeout
[ 3191.431897] Bluetooth: hci3: sending frame failed (-49)
[ 3192.786464] Bluetooth: hci0: command 0x1009 tx timeout
[ 3192.949302] Bluetooth: hci1: command 0x1009 tx timeout
[ 3193.106508] Bluetooth: hci2: command 0x1009 tx timeout
[ 3193.506428] Bluetooth: hci3: command 0x1009 tx timeout
[ 3193.586452] net_ratelimit: 18 callbacks suppressed
[ 3193.586458] protocol 88fb is buggy, dev hsr_slave_0
[ 3193.596572] protocol 88fb is buggy, dev hsr_slave_1
[ 3193.601705] protocol 88fb is buggy, dev hsr_slave_0
[ 3193.606839] protocol 88fb is buggy, dev hsr_slave_1
[ 3193.611925] protocol 88fb is buggy, dev hsr_slave_0
[ 3193.617045] protocol 88fb is buggy, dev hsr_slave_1
[ 3193.906462] protocol 88fb is buggy, dev hsr_slave_0
[ 3193.911547] protocol 88fb is buggy, dev hsr_slave_1
[ 3194.546452] protocol 88fb is buggy, dev hsr_slave_0
[ 3194.551536] protocol 88fb is buggy, dev hsr_slave_1
23:15:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x400)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000001c0)={0x0, 0x8, 0x1})
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x111000, 0x0)
write$cgroup_int(r2, &(0x7f0000000100)=0xa8d0, 0x12)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$KDADDIO(r3, 0x400455c8, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080))
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
flock(r4, 0x4)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x200, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3, 0xffff, 0x100000000, 0x8}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24004041)

23:15:20 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80000, 0x0)

23:15:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

23:15:20 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000fff00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:15:20 executing program 0:

23:15:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080))

[ 3197.448958] f2fs_msg: 6 callbacks suppressed
[ 3197.448971] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3197.477388] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:15:20 executing program 0:

[ 3197.519621] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3197.553313] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (251658242, 14)
[ 3197.572855] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3197.594399] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3197.611502] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:15:20 executing program 0:

23:15:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0)
ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000040))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={<r3=>0x0, 0x40100000, 0x5, 0x7fff, 0xb277, 0x40, 0x200, 0x100000001, {<r4=>0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x6, 0x7ff, 0x9, 0x5}}, &(0x7f0000000140)=0xb0)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={r4, 0xffffffffffff8001}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={r3, 0x81}, 0x8)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

[ 3197.632839] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3197.661060] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (251658242, 14)
23:15:20 executing program 0:

[ 3197.711494] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:15:20 executing program 0:

[ 3197.752953] Bluetooth: hci2: Frame reassembly failed (-84)
[ 3197.762091] Bluetooth: hci2: Frame reassembly failed (-84)
23:15:20 executing program 0:

[ 3197.845273] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3197.875040] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:15:20 executing program 4:

23:15:20 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002001fffff00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3198.706426] net_ratelimit: 22 callbacks suppressed
[ 3198.706432] protocol 88fb is buggy, dev hsr_slave_0
[ 3198.716554] protocol 88fb is buggy, dev hsr_slave_1
[ 3199.346429] protocol 88fb is buggy, dev hsr_slave_0
[ 3199.351603] protocol 88fb is buggy, dev hsr_slave_1
[ 3199.586541] Bluetooth: hci1: command 0x1003 tx timeout
[ 3199.591959] Bluetooth: hci1: sending frame failed (-49)
[ 3199.597454] Bluetooth: hci0: command 0x1003 tx timeout
[ 3199.602824] Bluetooth: hci0: sending frame failed (-49)
[ 3199.826473] protocol 88fb is buggy, dev hsr_slave_0
[ 3199.831651] protocol 88fb is buggy, dev hsr_slave_1
[ 3199.836847] protocol 88fb is buggy, dev hsr_slave_0
[ 3199.841925] protocol 88fb is buggy, dev hsr_slave_1
[ 3199.847121] protocol 88fb is buggy, dev hsr_slave_0
[ 3199.852185] protocol 88fb is buggy, dev hsr_slave_1
[ 3199.857729] Bluetooth: hci2: command 0x1003 tx timeout
[ 3199.863102] Bluetooth: hci2: sending frame failed (-49)
[ 3201.666455] Bluetooth: hci0: command 0x1001 tx timeout
[ 3201.666462] Bluetooth: hci1: command 0x1001 tx timeout
[ 3201.677232] Bluetooth: hci1: sending frame failed (-49)
[ 3201.682713] Bluetooth: hci0: sending frame failed (-49)
[ 3201.906491] Bluetooth: hci2: command 0x1001 tx timeout
[ 3201.911923] Bluetooth: hci2: sending frame failed (-49)
[ 3203.746516] Bluetooth: hci0: command 0x1009 tx timeout
[ 3203.751887] Bluetooth: hci1: command 0x1009 tx timeout
[ 3203.986465] net_ratelimit: 18 callbacks suppressed
[ 3203.986471] protocol 88fb is buggy, dev hsr_slave_0
[ 3203.996577] protocol 88fb is buggy, dev hsr_slave_1
[ 3204.001668] protocol 88fb is buggy, dev hsr_slave_0
[ 3204.006809] protocol 88fb is buggy, dev hsr_slave_1
[ 3204.011897] protocol 88fb is buggy, dev hsr_slave_0
[ 3204.017013] protocol 88fb is buggy, dev hsr_slave_1
[ 3204.022241] Bluetooth: hci2: command 0x1009 tx timeout
[ 3204.306460] protocol 88fb is buggy, dev hsr_slave_0
[ 3204.311559] protocol 88fb is buggy, dev hsr_slave_1
[ 3204.946464] protocol 88fb is buggy, dev hsr_slave_0
[ 3204.951609] protocol 88fb is buggy, dev hsr_slave_1
23:15:30 executing program 4:

23:15:30 executing program 0:

23:15:30 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000027fffffff00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:15:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

23:15:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, &(0x7f0000000080))

23:15:30 executing program 4:

[ 3207.661892] f2fs_msg: 22 callbacks suppressed
[ 3207.661904] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3207.696655] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3207.734676] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4294934274, 14)
[ 3207.744831] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3207.757672] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3207.765715] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3207.773415] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3207.781329] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4294934274, 14)
[ 3207.791730] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3207.850273] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3207.857444] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:15:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040), 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:15:30 executing program 0:

23:15:30 executing program 4:

23:15:30 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000028cffffff00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:15:30 executing program 4:

23:15:30 executing program 0:

23:15:30 executing program 0:

23:15:30 executing program 4:

[ 3208.307693] Bluetooth: hci2: Frame reassembly failed (-84)
23:15:31 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002f5ffffff00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3209.091775] Bluetooth: hci3: Frame reassembly failed (-84)
[ 3209.106496] net_ratelimit: 22 callbacks suppressed
[ 3209.106501] protocol 88fb is buggy, dev hsr_slave_0
[ 3209.116652] protocol 88fb is buggy, dev hsr_slave_1
[ 3209.746520] Bluetooth: hci0: command 0x1003 tx timeout
[ 3209.752071] Bluetooth: hci0: sending frame failed (-49)
[ 3209.757702] protocol 88fb is buggy, dev hsr_slave_0
[ 3209.757742] protocol 88fb is buggy, dev hsr_slave_1
[ 3209.768139] Bluetooth: hci1: command 0x1003 tx timeout
[ 3209.773496] Bluetooth: hci1: sending frame failed (-49)
[ 3210.226454] protocol 88fb is buggy, dev hsr_slave_0
[ 3210.231730] protocol 88fb is buggy, dev hsr_slave_1
[ 3210.236904] protocol 88fb is buggy, dev hsr_slave_0
[ 3210.241949] protocol 88fb is buggy, dev hsr_slave_1
[ 3210.247078] protocol 88fb is buggy, dev hsr_slave_0
[ 3210.252140] protocol 88fb is buggy, dev hsr_slave_1
[ 3210.386441] Bluetooth: hci2: command 0x1003 tx timeout
[ 3210.391962] Bluetooth: hci2: sending frame failed (-49)
[ 3211.106435] Bluetooth: hci3: command 0x1003 tx timeout
[ 3211.112045] Bluetooth: hci3: sending frame failed (-49)
[ 3211.826483] Bluetooth: hci1: command 0x1001 tx timeout
[ 3211.831842] Bluetooth: hci0: command 0x1001 tx timeout
[ 3211.831907] Bluetooth: hci1: sending frame failed (-49)
[ 3211.842526] Bluetooth: hci0: sending frame failed (-49)
[ 3212.466437] Bluetooth: hci2: command 0x1001 tx timeout
[ 3212.471917] Bluetooth: hci2: sending frame failed (-49)
[ 3213.186461] Bluetooth: hci3: command 0x1001 tx timeout
[ 3213.191962] Bluetooth: hci3: sending frame failed (-49)
[ 3213.906528] Bluetooth: hci0: command 0x1009 tx timeout
[ 3213.906583] Bluetooth: hci1: command 0x1009 tx timeout
[ 3214.386507] net_ratelimit: 18 callbacks suppressed
[ 3214.386514] protocol 88fb is buggy, dev hsr_slave_0
[ 3214.396846] protocol 88fb is buggy, dev hsr_slave_1
[ 3214.402116] protocol 88fb is buggy, dev hsr_slave_0
[ 3214.407977] protocol 88fb is buggy, dev hsr_slave_1
[ 3214.413279] protocol 88fb is buggy, dev hsr_slave_0
[ 3214.418418] protocol 88fb is buggy, dev hsr_slave_1
[ 3214.546555] Bluetooth: hci2: command 0x1009 tx timeout
[ 3214.706507] protocol 88fb is buggy, dev hsr_slave_0
[ 3214.711773] protocol 88fb is buggy, dev hsr_slave_1
[ 3215.266507] Bluetooth: hci3: command 0x1009 tx timeout
[ 3215.346454] protocol 88fb is buggy, dev hsr_slave_0
[ 3215.351540] protocol 88fb is buggy, dev hsr_slave_1
23:15:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, 0x0)

23:15:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5437, 0x0)

23:15:40 executing program 4:

[ 3217.872967] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3217.887337] Bluetooth: hci1: Frame reassembly failed (-84)
23:15:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:15:41 executing program 0:

23:15:41 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002f6ffffff00000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:15:41 executing program 4:

23:15:41 executing program 4:

23:15:41 executing program 0:

23:15:41 executing program 4:

[ 3219.141151] f2fs_msg: 38 callbacks suppressed
[ 3219.141158] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3219.165675] Bluetooth: hci2: Frame reassembly failed (-84)
[ 3219.176646] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:15:41 executing program 0:

23:15:41 executing program 4:

[ 3219.189816] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4294964738, 14)
[ 3219.202351] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3219.215732] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3219.225441] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3219.233569] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (4294964738, 14)
[ 3219.242160] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3219.293048] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3219.303603] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3219.506438] net_ratelimit: 22 callbacks suppressed
[ 3219.506444] protocol 88fb is buggy, dev hsr_slave_0
[ 3219.516834] protocol 88fb is buggy, dev hsr_slave_1
[ 3219.906427] Bluetooth: hci1: command 0x1003 tx timeout
[ 3219.911876] Bluetooth: hci1: sending frame failed (-49)
[ 3219.917391] Bluetooth: hci0: command 0x1003 tx timeout
[ 3219.922775] Bluetooth: hci0: sending frame failed (-49)
[ 3220.146461] protocol 88fb is buggy, dev hsr_slave_0
[ 3220.151703] protocol 88fb is buggy, dev hsr_slave_1
[ 3220.626446] protocol 88fb is buggy, dev hsr_slave_0
[ 3220.631535] protocol 88fb is buggy, dev hsr_slave_1
[ 3220.636786] protocol 88fb is buggy, dev hsr_slave_0
[ 3220.641846] protocol 88fb is buggy, dev hsr_slave_1
[ 3220.646999] protocol 88fb is buggy, dev hsr_slave_0
[ 3220.652047] protocol 88fb is buggy, dev hsr_slave_1
[ 3221.186431] Bluetooth: hci2: command 0x1003 tx timeout
[ 3221.191971] Bluetooth: hci2: sending frame failed (-49)
[ 3221.986459] Bluetooth: hci3: command 0x1003 tx timeout
[ 3221.986584] Bluetooth: hci0: command 0x1001 tx timeout
[ 3221.992169] Bluetooth: hci3: sending frame failed (-49)
[ 3222.002339] Bluetooth: hci0: sending frame failed (-49)
[ 3222.003604] Bluetooth: hci1: command 0x1001 tx timeout
[ 3222.014389] Bluetooth: hci1: sending frame failed (-49)
[ 3223.266464] Bluetooth: hci2: command 0x1001 tx timeout
[ 3223.272100] Bluetooth: hci2: sending frame failed (-49)
[ 3224.066486] Bluetooth: hci3: command 0x1001 tx timeout
[ 3224.066496] Bluetooth: hci1: command 0x1009 tx timeout
[ 3224.066532] Bluetooth: hci0: command 0x1009 tx timeout
[ 3224.077349] Bluetooth: hci3: sending frame failed (-49)
[ 3224.786463] net_ratelimit: 18 callbacks suppressed
[ 3224.791774] protocol 88fb is buggy, dev hsr_slave_0
[ 3224.796933] protocol 88fb is buggy, dev hsr_slave_1
[ 3224.802293] protocol 88fb is buggy, dev hsr_slave_0
[ 3224.807390] protocol 88fb is buggy, dev hsr_slave_1
[ 3224.812623] protocol 88fb is buggy, dev hsr_slave_0
[ 3224.817823] protocol 88fb is buggy, dev hsr_slave_1
[ 3225.106505] protocol 88fb is buggy, dev hsr_slave_0
[ 3225.111768] protocol 88fb is buggy, dev hsr_slave_1
[ 3225.346598] Bluetooth: hci2: command 0x1009 tx timeout
[ 3225.746481] protocol 88fb is buggy, dev hsr_slave_0
[ 3225.751575] protocol 88fb is buggy, dev hsr_slave_1
[ 3226.146493] Bluetooth: hci3: command 0x1009 tx timeout
23:15:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, 0x0)

23:15:50 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/raw\x00')
socket$inet_icmp_raw(0x2, 0x3, 0x1)
preadv(r0, &(0x7f0000000700), 0x31f, 0x73)

23:15:50 executing program 4:
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000002880)={'filter\x00', 0x1000, "3552ec2024e9da3bdbb61029b0f9a169140080ff42acd5738d1db7b7c2915a7f0d322e7925b7c06706d97cb170db0c5e30c6872c035ca31e3fa027e2631a0565da8176760f4779b83788f6d39d55357345503ecef928e0b857a42b5e62080769c31f7e4c1a83f45db3b52714c9799c95833a32bf9addda013a8f29432e723d2a8caab94a39d27322576eb72100e792042c9f706a179c51cc814c54b4ff7cafe22f125a720f68e8884f1b25862b6375ddd3ac0f2d78a9a539b262551f4a3f9c1ab5fdd3dd2b660515a8cef677c31acf144166ad2895eb400604b7ce966c2c91c4465d74346f99b022c47f03350f8090801f1fc94b15dc8a1a5cfe1a9384856cbb082b534b14fbca5c1f20e8b632bb74474cf7dc96baf325002b9fb4406fd9d8a3f712677c795a71c893ff0cc5aae57abb2954494dc3632884e1a77e28b9cbc81cc7df2845e1f7f2eca31e4bf6ce886008f6bb0bac5c20e667fe468764791c64c06fa1123acfc6f39daad6d431afef82cf5d9535e898a1c14cea51f950768b75f10afcf1590d230724ba2940289c2d77217772f8007cdcaa91c580bb53125f0a5c4f7e5bd22d80605747aa63d830ce678deb4ac1f384664a3eacef9e353b8088235ea7ab5ed99739b4ae70f1af04c2e67585c4caf7fdb3bbf32926e57582629247609914b732a564ef468ca0a8301fef35ab5d05d4db755120949e9a113277cce96c41e59b0dc7d8fb2afaf3580f0d428336d6bc514ae3d316e4e45e7c01557799d3e2ee29a3e4bf974cb06594a9d627074507527a158f92f98df4dff812c178590b463e140481e619afa91122988b636d7332c5d61f090a537fd7893723d565955be2dc3096365cc11d0f70385e1a8578c0f0a154e7a53981ba618d96c2096e90018c0e5ba05809c7266602692c82eaa5b79228f5b5b14246c5e10ca342a29351a3eee90847f694e21abc5358a947d350ad8d4d54fa0d38b7fc7208c6e038372aac6a97dc7778c4fdf3d40367afd7160c5e9166463bb4997343d7b3202241ec731f3e0f03c971d51261e147e65d1466bfe7d0032b538471e53c9a40a025df021f4805cf153dc4fda13cba25c575a855a0967b6f5e45b3008a5d801a3e97ac28f88109b4e8b750f87be4db5c2297d069b800800a8415e3ebc34f1a46d1c03a9b6e65b93cc114c6b156789129ef78a2419779d49154f08e9c4217ca3d96a804476c98c77ddad1e9662974688dbbf2981cb18c37799623bb378760d150e01136be7d8b286d1bae586dcd81c627387b3dc598e54bd9d2bfc8ddeb6ea48fbc35f59fb184e0d709eda79ee56510d8da2ba2aa8a0dae9b46282d5d9328a220cd750e0742f2bfc81d1aeeaae38dd0a3b8b5630895c0e2522f7e39c5af4fec2579f324c8200850ea746943d8539d8400504d996364e6183e8be074039b921c355a456871b53e43a331acb4dcb88f9f72716e8c6ded690af9537c8703aa90dbf06046feccb44742da49f67e67aefb4e301e007e21adbc4b01b29c724322a2ca51de842918c95215383d2979d33150efc376f1b07046cb6b8e173665e746f512a35c67448cadd85f709f1bc889c73d0b224da3eb887d425518c8bda5004a0ed3e58f106932f0937b611d7be2538338c566f9b6393d0384dda382aa4051fbc160be3af9f396d0de2460dd54a5e18c9480c62748996213e44ab7f713f7fb1dbcee48fcaf9138056de9de317c85ef7aa298da7ee8fb87c8329313afc2546f65451b6766c223f30a21cf3ef2878801eb16525651fcddca80b33145a025ab899e35a92743f2e1eb0652cf20868175561d57e675dea118b81f438b989d3fe56bd92b986553aaa6b71a5700e771cb4185f67e93439f375c0b2b45ae8815fd8ff2ab86af6e5260ecf140eccb4fca237184a403eab1aff3ebe9009a56418cc29a5e0fcb9090e856f3cfb84c9a80ccdc340624001ad81905bce5232848bdb5531c53e7475749baf9cce30986f63ecf19b621e5266af57c5f7a2233709eff760166a6a29e7f97273352a7a2bdc09fb7495c97ca8ceb5037dd3a8b0fa47078506cf0e8f956d2166e2c9005fbda622588e179216f864aaa3b94cc42c53ce78002edb40c504cf279ecb5a67812f09fafc1083022f02b6c54e3a387bcd956fba1fdbb6573708fa50f8c469b8f4f618a3b3347c391eeaf0d8453e59d6cf8b5ed1549b4de087fbf77b4eaeca85baade0ba8b38ceac8f9aace501bb6b33b77fcaa2f65aa91f0d5e3a30d36c4007d147b2f23f158d6e38f2f87ffbcebc350d7592b57303f260c17c13844f71764a127433d87ed409f53eeaf3e01fe74c3e038c346eefd53dfdf97fff07b1f17d1702d650291b434bacb4e3577754a391a79a05587a9da425cd8c3b078497aa678447448a9dc28efd497f69261f588d7a398730e4cd8d51c30a28cdd2f48b77c6ae8646e14109419f6b726057920ba59b40d4851f22ae32ee1c42f436bd9baa4c7bcd6409e04fbe540374415b3ec2f25f3aafcf093225a025a2be451eaa74dd639579bfdb6d9f6a39df208f055cc5725a9af739a18824e2a43e14eddf70934e41ea2d9e2941f92cea359aa189af69ce573718d3ef2bb6b07fc4f0d141135123faabd5d473a9db7edab7c06273af509148f813045c1cf489de274193957caf29ed7caa3a779b1d8a5964463fe3617e510d084e4b3dcdbc7d2ac787e861591aba42bde3839aab7ba3ed8d65e2a428fb37b22fcb5dbee188e44266552fda4c9d5362b5b656ca552cc4cc701dbae61273c668f79decb89359fc24ee4638722494c7ba75ce50d8e18b50a2355a3a7b6484d74618d11ac2cca63b16cddff7d4f3419863dbe943f8fc244994fc7eb9a39e73935c7fa2d753f1405618ce2d6c3adda1f82cc9568bd8f4a6bb69a25b8d0a22184886249fc0b760746e68c9748da07c4f8e82ba589d5bfa163c84bb3689887329e0127e4dfc063970c47daf3a59d9186ab435e86612dedb4c49c2aed7b7a68f4d899fb831459e938591d611c0bab36c63ca5a3dee2bb80f4170c2fd12326bdaab08f0acf7f91bdc265b7ad1603dbb221038e6b7a63f05b8f67b19ba5224dd630475edfa3dae36910624b2eadb901387954b4f93678e5ffe0716428b695d9fd60b5998702b591c3d592f358dfc214f2583ea007b7bd1c5277753e163d94a18820be105ce0202cfb8b6b94e9ba559323d5601fe48ef3143de0ff1e7dbb1376f3996d3400dd141ce86a05a072137763e3b38eb2793c42d7516704daf9837437b936b2c31b40a4b49565679b592702e8185a9dee71c6b8111c0b203c9eb29cc2fac21eadf573f67b00a3cf448c7bf6d37242d765befe247dc55e7c4c7f1f095989c1ab9fee5a76f54f47b71fc70f3f6621b6cb12f19681ca32dfdbf60f690c61788eece6541779fa3dcf1e5aee7dae1a30f18fce32e4b214b050900810582f9dd24f0777fff9b855acc7966401a8ba3382e970f21c3deb158121fe0ec735d5f3f7428de3352a7c39b4477d53d941efeca4efff8d632baa2e429c7a2937bcddf92bd8680e25ec6a99f7194921b694c3a93334c5eaee9519cbe3b5ca446a47e59823d751831b9a6ae12dcc252584cfb8b740c8d098906649b96fb5b6cca24ec2d88a1f1a1e2b5807cb0cf02a52be5d0a978106b15920004d32cd4a6f8af1fdceb93166ceff7b8272e4db7fbc8d199d2febf614495b6c8ab2863e443c1f0c78152fbbac779f5feb736492cac0092f55e3b633a943783556180640bafe514480dfe188a53f2d5ceda2f7d278c6678d584414267176178bdeed399ca1976a0d5616354dcef3b7b211a515abbc976bfcb6f5c1247e9265fd6126a60a7163c1517c2323285b836b753096d44eda3e5f2ad3e00cba34e731c218e6fd2ecb54ac25fc67ad96547e095ce3bc67f0a85428403b98901a2f66d38988ddc6285fcbe4c7d9e19ada7b93a48ec97883dc4601f8f224491d11788b4bba947f69c19e304ddb19a9b518f662579b45f70d8e01a80fac6462b430c9c022d5e8745a43812f408f53ff93b840170e3a412d49be39df59444691f28e9186b38d6f96b0c5db9d39482c14228464494a3980a69af143e5af3383dbf9e3495ff1dba2c2c5cc96a4ba8ca48d9dede66d5eb8d90bad6ba75657784768f83b2694b0f314febe03f2b564192a1a3fd6441f6c8a8259eddc6be624e5042a89772534b1b5d78f6a742809168a050f7f83cf1d81c0745775edc1902bd090e244d9f36d7402f6fbc9b329d14dc83734589aa61a3c483b1324cc4c26432ad317989e2623b1ee0ff76cb781b164806fd96adf22a666cc42dd8a8ebfc3cc8d810d64834a6db0e279def9a4da54c82dc718415f9f5bc07536cd34b03ff2098ecb054da51783c58345733aa9092be0cb895e8e8c99d8e50f40816b748ca3e5d553fc32c87d2a05a3540c11ff887d4aa129deb5c9df15a14ef751c47cea01210900e455eb54fcd9b08339154fa71087fdf55c6518fd688a49e36ecfb6f6e86317973b0fa39e408e5f060bd9f8db3147554700995f0a25103266f9da3ec07fce02491511531f9f8bf63d099832198bf29cfa33e536efc4939c293b21353531386b6ebc4329c64852d7d87a9730eb13d4acb0726bea1821ca61a5eecd4279915fa60d4b5aca11bda61a3574afc564b7349a4009646692ded6c29324a3294fecad1b7630fde87287a4c8f3e8e7fcf2801549b0a435bf06b6e3e1794d2cd4e33a7e9b0ed3d27547d11ed95c34fb0005ec1706f6789ca12320e0a83fad64e2fd316b1b631979bdf36c616dec06a9cb3f716abeb6edd7ad5b22b9ce1cd7e8570081706fea47ef2d542acf36cd601263ad37dc3bb2b6fc4b4dac981fa890c817f8b6bcec60aa8d2fd91f3d73bd3eb150e53778b6162af34fbaad7acf8c50ca12d734768de63a8e2be5beb27fc917beb5dbfac7fb176c9a759c69d90b9dd7fadb17c8bf7577f4162f95e1a0365fee08b7daefbedcf90ba92a9625012be386e53e86438b1b14a9ae917ec815de6063f1c0f7deaa89c04c229fe97d48297423501bab889c38c4c9808a9a4394ad51fd99cb326577b22bf5b3cd06f347181f69d6a98c1d51a62cf57e292d7bb8dadc420056a63103b6d0676e7990841a59ec800148264916eb1d8e17c3c5d40ef0a0ac65e59362b2daf5cef99b635a39a44b7794688f0bffebcc1a71211b0b0432ad167cc3acc9af38872ca78f8915a0060302115255b7c5a840005b13cf132fde93e23ad242d882454aee372607bf2e7df529b23ef3ca0ccbb349f2707ac051cedc9d50539022d5a06c9b036e40870ca9d08d93a9b6fd03c8e06c57ef72761a5c45b227a2ec9fc5b5d2dd0c1497202a84a42fa4fea03e07551808af486a24850737bc7ec070ce99d31bad08b8b68ffb7cd73aa1b140c6e1f49fd29f413e747485320d5669a79d25976ca900704e2ee0bde97232cefd6bd1e56f6f1e7a1558ca2092b699c2bc60c9021897e0964af7dd5ec8aa847ae705d710012b317f37369f50ce9b4665005ae356f482f4a9a19b97a21443d5b4d2417e280bf2b76b2208222c8c337386e9a454b08f01da77d7feec7d7fdaea60fd2a65bd0c5aa1ef60a7effc3aff02173e6dbdbb20dda27f34b0bc6f8bf7c53803adf4e65fc3ab2a92692c1b849ff5f1af5d89c3b98af64e92338f6da6c4f551d40091c0e75cc9589910bdda0ae3f040e09338b67fdcb8a59b0a95c3ec0ec91f58a88b255f5f0ce634d594e8c2557f893618f41d800b586af5e4f3125802cf56f5e65c7f0daad9ed77690ec49396"}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffff1, &(0x7f00000001c0)=0xd)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
gettid()
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
r3 = syz_open_procfs(r2, &(0x7f0000002680)='fdinfo\x00}\xc7\xc0\xe5\x80g\xbb\x9c\xbe\x92\xf7\x10=E\x99On\xb9k\xe3\xe7\x86r\xbd.\xcc\x1e:Tr#\x87\xda\x117\xda\xb2lA\xd4\x1bL5\x020\x80g\x18\xe7\xae\xc7z\xe8\x85\xba\x98\x92\x1a\xb9\xf3\x9c\xa6\v\xf2\xf3\x85\xb2l>\x0e\xe6\xff\x0f\xd2O\x85\xba\x1a\xb7\xccC\x88\xa2;\xb7Kx6\xf5Ed\x16z#\xd3G\x8ca\x83\x16\xa5\x92\x99#\xb3\x89\x82aJ\xa0*\xc5p\xf2\x04\xab+\x02\xd6\x84\xcf\x81f\xc1\xaaEF)\x92~\xf0S)\xe7\x1a\xfd1\xfbL\xfb\xb0\xd9\xfc8c2^CJ\xcc,\x88>\xff\xba\x1f\xb0\xc9\f21')
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000002740)=ANY=[@ANYBLOB="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"])
write(0xffffffffffffffff, &(0x7f0000001700), 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000140)=0x9)
getdents(r3, &(0x7f0000000240)=""/4096, 0xfcb8)

[ 3228.121407] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3229.906437] net_ratelimit: 22 callbacks suppressed
[ 3229.906443] protocol 88fb is buggy, dev hsr_slave_0
[ 3229.916669] protocol 88fb is buggy, dev hsr_slave_1
23:15:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sysfs$3(0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:15:52 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000c0ed0000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:15:52 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:15:52 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
sendmsg$unix(0xffffffffffffff9c, 0x0, 0xc4)

23:15:52 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TCGETS2(r0, 0x802c542a, 0x0)

[ 3230.022885] f2fs_msg: 6 callbacks suppressed
[ 3230.022892] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3230.040876] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3230.061129] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:15:52 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8007e, 0x40004402)
ioctl$BLKDISCARD(r0, 0x127d, &(0x7f0000000140)=0x1000)

[ 3230.078296] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3230.086760] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3230.094130] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3230.112080] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:15:52 executing program 4:
syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00')

[ 3230.122532] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3230.146481] Bluetooth: hci0: command 0x1003 tx timeout
[ 3230.154392] Bluetooth: hci0: sending frame failed (-49)
[ 3230.175466] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:15:52 executing program 0:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x200)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0)
r2 = dup3(r0, r1, 0x80000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240))
write$cgroup_pid(r2, &(0x7f0000000280), 0x12)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x30)
semctl$GETVAL(0x0, 0x1, 0xc, 0x0)

23:15:52 executing program 4:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x73fffe, 0xffffffff7ff0bdbe})

[ 3230.202515] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3230.546475] protocol 88fb is buggy, dev hsr_slave_0
[ 3230.551657] protocol 88fb is buggy, dev hsr_slave_1
[ 3231.026444] protocol 88fb is buggy, dev hsr_slave_0
[ 3231.031582] protocol 88fb is buggy, dev hsr_slave_1
[ 3231.036844] protocol 88fb is buggy, dev hsr_slave_0
[ 3231.042044] protocol 88fb is buggy, dev hsr_slave_1
[ 3231.047235] protocol 88fb is buggy, dev hsr_slave_0
[ 3231.052290] protocol 88fb is buggy, dev hsr_slave_1
[ 3232.146531] Bluetooth: hci1: command 0x1003 tx timeout
[ 3232.152203] Bluetooth: hci1: sending frame failed (-49)
[ 3232.226474] Bluetooth: hci0: command 0x1001 tx timeout
[ 3232.231935] Bluetooth: hci0: sending frame failed (-49)
[ 3232.866454] Bluetooth: hci2: command 0x1003 tx timeout
[ 3232.874257] Bluetooth: hci2: sending frame failed (-49)
[ 3234.226537] Bluetooth: hci1: command 0x1001 tx timeout
[ 3234.232210] Bluetooth: hci1: sending frame failed (-49)
[ 3234.306481] Bluetooth: hci0: command 0x1009 tx timeout
[ 3234.946498] Bluetooth: hci2: command 0x1001 tx timeout
[ 3234.951996] Bluetooth: hci2: sending frame failed (-49)
[ 3235.186591] net_ratelimit: 18 callbacks suppressed
[ 3235.186598] protocol 88fb is buggy, dev hsr_slave_0
[ 3235.197188] protocol 88fb is buggy, dev hsr_slave_1
[ 3235.202426] protocol 88fb is buggy, dev hsr_slave_0
[ 3235.207793] protocol 88fb is buggy, dev hsr_slave_1
[ 3235.213093] protocol 88fb is buggy, dev hsr_slave_0
[ 3235.218488] protocol 88fb is buggy, dev hsr_slave_1
[ 3235.506493] protocol 88fb is buggy, dev hsr_slave_0
[ 3235.511688] protocol 88fb is buggy, dev hsr_slave_1
[ 3236.146587] protocol 88fb is buggy, dev hsr_slave_0
[ 3236.151922] protocol 88fb is buggy, dev hsr_slave_1
[ 3236.306537] Bluetooth: hci1: command 0x1009 tx timeout
[ 3237.026509] Bluetooth: hci2: command 0x1009 tx timeout
23:16:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5412, 0x0)

23:16:00 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}], 0x1, 0x0, 0x2c1}}], 0x1, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4)

23:16:00 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000100300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3238.359337] f2fs_msg: 6 callbacks suppressed
[ 3238.359351] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3238.393857] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3238.402687] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3238.410687] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3238.418733] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3238.425954] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3238.434340] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3238.442397] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3238.495064] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3238.508444] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3240.306488] net_ratelimit: 22 callbacks suppressed
[ 3240.306495] protocol 88fb is buggy, dev hsr_slave_0
[ 3240.316862] protocol 88fb is buggy, dev hsr_slave_1
[ 3240.386463] Bluetooth: hci0: command 0x1003 tx timeout
[ 3240.391922] Bluetooth: hci0: sending frame failed (-49)
23:16:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:16:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070")
unshare(0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7c, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x200000c8)

23:16:03 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:03 executing program 4:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x1e})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

23:16:03 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000400300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:03 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80000000003, 0x80000000000000c)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="09000000000000000003"]})
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)

[ 3240.946473] protocol 88fb is buggy, dev hsr_slave_0
[ 3240.951813] protocol 88fb is buggy, dev hsr_slave_1
23:16:03 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000001000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:03 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:03 executing program 0:
r0 = creat(&(0x7f0000000800)='./file0\x00', 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
write$binfmt_script(r0, 0x0, 0x0)

[ 3241.426508] protocol 88fb is buggy, dev hsr_slave_0
[ 3241.431775] protocol 88fb is buggy, dev hsr_slave_1
[ 3241.437106] protocol 88fb is buggy, dev hsr_slave_0
[ 3241.442795] protocol 88fb is buggy, dev hsr_slave_1
[ 3241.448011] protocol 88fb is buggy, dev hsr_slave_0
[ 3241.453092] protocol 88fb is buggy, dev hsr_slave_1
[ 3242.466473] Bluetooth: hci0: command 0x1001 tx timeout
[ 3242.472099] Bluetooth: hci0: sending frame failed (-49)
[ 3242.946509] Bluetooth: hci1: command 0x1003 tx timeout
[ 3242.951980] Bluetooth: hci1: sending frame failed (-49)
[ 3244.546489] Bluetooth: hci0: command 0x1009 tx timeout
[ 3245.026592] Bluetooth: hci1: command 0x1001 tx timeout
[ 3245.032079] Bluetooth: hci1: sending frame failed (-49)
[ 3245.586505] net_ratelimit: 18 callbacks suppressed
[ 3245.586512] protocol 88fb is buggy, dev hsr_slave_0
[ 3245.596797] protocol 88fb is buggy, dev hsr_slave_1
[ 3245.601910] protocol 88fb is buggy, dev hsr_slave_0
[ 3245.607045] protocol 88fb is buggy, dev hsr_slave_1
[ 3245.612308] protocol 88fb is buggy, dev hsr_slave_0
[ 3245.617460] protocol 88fb is buggy, dev hsr_slave_1
[ 3245.906475] protocol 88fb is buggy, dev hsr_slave_0
[ 3245.911723] protocol 88fb is buggy, dev hsr_slave_1
[ 3246.546524] protocol 88fb is buggy, dev hsr_slave_0
[ 3246.551891] protocol 88fb is buggy, dev hsr_slave_1
[ 3247.106485] Bluetooth: hci1: command 0x1009 tx timeout
23:16:11 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:11 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000006b6b6b00300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:11 executing program 4:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0)

[ 3248.603865] f2fs_msg: 38 callbacks suppressed
[ 3248.603885] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3248.621855] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3248.634699] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3248.643158] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3248.651469] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3248.659106] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3248.666887] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3248.674765] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3248.725794] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3248.734263] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3250.706517] net_ratelimit: 22 callbacks suppressed
[ 3250.711555] protocol 88fb is buggy, dev hsr_slave_0
[ 3250.716696] protocol 88fb is buggy, dev hsr_slave_1
23:16:13 executing program 3:
msgrcv(0x0, 0xfffffffffffffffe, 0x225, 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="01"], 0x1, 0x0)

23:16:13 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioprio_get$uid(0x140000000000000, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
getpgrp(0xffffffffffffffff)
write$FUSE_LK(r3, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
clone(0x2000000000003ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
unshare(0x40000400)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x8080)
ftruncate(r0, 0x0)

23:16:13 executing program 4:
openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
syz_open_pts(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0)
r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x27e, 0x0)
fcntl$setpipe(r0, 0x407, 0x100000)

23:16:13 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x410040, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x7)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x117, 0xe}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r3, 0xa}}, 0x10)

23:16:13 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000001300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:13 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:13 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000002300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:13 executing program 4:
r0 = socket$packet(0x11, 0x8000000003, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = dup(r2)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x405, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x81}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c001)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @mcast2, 0x380}, 0x1c)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x24000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0)
clock_gettime(0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='team_slave_1\x00', 0x10)
r5 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r5, 0x10099b7)
sendfile(r2, r5, 0x0, 0x88000fbfffffc)

23:16:13 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
ioctl$TIOCMBIS(r0, 0x5416, 0x0)

[ 3251.346490] protocol 88fb is buggy, dev hsr_slave_0
[ 3251.351653] protocol 88fb is buggy, dev hsr_slave_1
23:16:14 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0)

23:16:14 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:14 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000003300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:14 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0)
ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)

23:16:14 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
read$FUSE(r0, 0x0, 0xfffffdc5)

23:16:14 executing program 4:
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat6\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

[ 3251.826494] protocol 88fb is buggy, dev hsr_slave_0
[ 3251.831660] protocol 88fb is buggy, dev hsr_slave_1
[ 3251.836909] protocol 88fb is buggy, dev hsr_slave_0
[ 3251.842010] protocol 88fb is buggy, dev hsr_slave_1
[ 3251.847252] protocol 88fb is buggy, dev hsr_slave_0
[ 3251.852366] protocol 88fb is buggy, dev hsr_slave_1
[ 3253.266457] Bluetooth: hci0: command 0x1003 tx timeout
[ 3253.271910] Bluetooth: hci0: sending frame failed (-49)
[ 3255.346630] Bluetooth: hci0: command 0x1001 tx timeout
[ 3255.352075] Bluetooth: hci0: sending frame failed (-49)
[ 3255.986480] net_ratelimit: 18 callbacks suppressed
[ 3255.986486] protocol 88fb is buggy, dev hsr_slave_0
[ 3255.996551] protocol 88fb is buggy, dev hsr_slave_1
[ 3256.001679] protocol 88fb is buggy, dev hsr_slave_0
[ 3256.006809] protocol 88fb is buggy, dev hsr_slave_1
[ 3256.011898] protocol 88fb is buggy, dev hsr_slave_0
[ 3256.017013] protocol 88fb is buggy, dev hsr_slave_1
[ 3256.306465] protocol 88fb is buggy, dev hsr_slave_0
[ 3256.311575] protocol 88fb is buggy, dev hsr_slave_1
[ 3256.946467] protocol 88fb is buggy, dev hsr_slave_0
[ 3256.951556] protocol 88fb is buggy, dev hsr_slave_1
[ 3257.426511] Bluetooth: hci0: command 0x1009 tx timeout
[ 3261.106464] net_ratelimit: 22 callbacks suppressed
[ 3261.106470] protocol 88fb is buggy, dev hsr_slave_0
[ 3261.116574] protocol 88fb is buggy, dev hsr_slave_1
23:16:23 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x9, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x2)
ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:16:23 executing program 2:
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x18)

23:16:23 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000004300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

23:16:23 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='net/snmp6\x00')
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000940)={0x1ff, 0x200, 0x8, 0x6, 0x100000000})

23:16:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0)
r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x27e, 0x0)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="e3"], 0x1)

[ 3261.421582] f2fs_msg: 54 callbacks suppressed
[ 3261.421594] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3261.449453] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3261.463595] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3261.472012] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3261.486247] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3261.502326] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3261.511500] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:16:24 executing program 2:
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x18)

23:16:24 executing program 3:
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
syz_open_pts(0xffffffffffffffff, 0x800000)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000002880)={'filter\x00', 0xfe9, "3552ec2024e9da3bdbb61029b0f9a169140080ff42acd5738d1db7b7c2915a7f0d322e7925b7c06706d97cb170db0c5e30c6872c035ca31e3fa027e2631a0565da8176760f4779b83788f6d39d55357345503ecef928e0b857a42b5e62080769c31f7e4c1a83f45db3b52714c9799c95833a32bf9addda013a8f29432e723d2a8caab94a39d27322576eb72100e792042c9f706a179c51cc814c54b4ff7cafe22f125a720f68e8884f1b25862b6375ddd3ac0f2d78a9a539b262551f4a3f9c1ab5fdd3dd2b660515a8cef677c31acf144166ad2895eb400604b7ce966c2c91c4465d74346f99b022c47f03350f8090801f1fc94b15dc8a1a5cfe1a9384856cbb082b534b14fbca5c1f20e8b632bb74474cf7dc96baf325002b9fb4406fd9d8a3f712677c795a71c893ff0cc5aae57abb2954494dc3632884e1a77e28b9cbc81cc7df2845e1f7f2eca31e4bf6ce886008f6bb0bac5c20e667fe468764791c64c06fa1123acfc6f39daad6d431afef82cf5d9535e898a1c14cea51f950768b75f10afcf1590d230724ba2940289c2d77217772f8007cdcaa91c580bb53125f0a5c4f7e5bd22d80605747aa63d830ce678deb4ac1f384664a3eacef9e353b8088235ea7ab5ed99739b4ae70f1af04c2e67585c4caf7fdb3bbf32926e57582629247609914b732a564ef468ca0a8301fef35ab5d05d4db755120949e9a113277cce96c41e59b0dc7d8fb2afaf3580f0d428336d6bc514ae3d316e4e45e7c01557799d3e2ee29a3e4bf974cb06594a9d627074507527a158f92f98df4dff812c178590b463e140481e619afa91122988b636d7332c5d61f090a537fd7893723d565955be2dc3096365cc11d0f70385e1a8578c0f0a154e7a53981ba618d96c2096e90018c0e5ba05809c7266602692c82eaa5b79228f5b5b14246c5e10ca342a29351a3eee90847f694e21abc5358a947d350ad8d4d54fa0d38b7fc7208c6e038372aac6a97dc7778c4fdf3d40367afd7160c5e9166463bb4997343d7b3202241ec731f3e0f03c971d51261e147e65d1466bfe7d0032b538471e53c9a40a025df021f4805cf153dc4fda13cba25c575a855a0967b6f5e45b3008a5d801a3e97ac28f88109b4e8b750f87be4db5c2297d069b800800a8415e3ebc34f1a46d1c03a9b6e65b93cc114c6b156789129ef78a2419779d49154f08e9c4217ca3d96a804476c98c77ddad1e9662974688dbbf2981cb18c37799623bb378760d150e01136be7d8b286d1bae586dcd81c627387b3dc598e54bd9d2bfc8ddeb6ea48fbc35f59fb184e0d709eda79ee56510d8da2ba2aa8a0dae9b46282d5d9328a220cd750e0742f2bfc81d1aeeaae38dd0a3b8b5630895c0e2522f7e39c5af4fec2579f324c8200850ea746943d8539d8400504d996364e6183e8be074039b921c355a456871b53e43a331acb4dcb88f9f72716e8c6ded690af9537c8703aa90dbf06046feccb44742da49f67e67aefb4e301e007e21adbc4b01b29c724322a2ca51de842918c95215383d2979d33150efc376f1b07046cb6b8e173665e746f512a35c67448cadd85f709f1bc889c73d0b224da3eb887d425518c8bda5004a0ed3e58f106932f0937b611d7be2538338c566f9b6393d0384dda382aa4051fbc160be3af9f396d0de2460dd54a5e18c9480c62748996213e44ab7f713f7fb1dbcee48fcaf9138056de9de317c85ef7aa298da7ee8fb87c8329313afc2546f65451b6766c223f30a21cf3ef2878801eb16525651fcddca80b33145a025ab899e35a92743f2e1eb0652cf20868175561d57e675dea118b81f438b989d3fe56bd92b986553aaa6b71a5700e771cb4185f67e93439f375c0b2b45ae8815fd8ff2ab86af6e5260ecf140eccb4fca237184a403eab1aff3ebe9009a56418cc29a5e0fcb9090e856f3cfb84c9a80ccdc340624001ad81905bce5232848bdb5531c53e7475749baf9cce30986f63ecf19b621e5266af57c5f7a2233709eff760166a6a29e7f97273352a7a2bdc09fb7495c97ca8ceb5037dd3a8b0fa47078506cf0e8f956d2166e2c9005fbda622588e179216f864aaa3b94cc42c53ce78002edb40c504cf279ecb5a67812f09fafc1083022f02b6c54e3a387bcd956fba1fdbb6573708fa50f8c469b8f4f618a3b3347c391eeaf0d8453e59d6cf8b5ed1549b4de087fbf77b4eaeca85baade0ba8b38ceac8f9aace501bb6b33b77fcaa2f65aa91f0d5e3a30d36c4007d147b2f23f158d6e38f2f87ffbcebc350d7592b57303f260c17c13844f71764a127433d87ed409f53eeaf3e01fe74c3e038c346eefd53dfdf97fff07b1f17d1702d650291b434bacb4e3577754a391a79a05587a9da425cd8c3b078497aa678447448a9dc28efd497f69261f588d7a398730e4cd8d51c30a28cdd2f48b77c6ae8646e14109419f6b726057920ba59b40d4851f22ae32ee1c42f436bd9baa4c7bcd6409e04fbe540374415b3ec2f25f3aafcf093225a025a2be451eaa74dd639579bfdb6d9f6a39df208f055cc5725a9af739a18824e2a43e14eddf70934e41ea2d9e2941f92cea359aa189af69ce573718d3ef2bb6b07fc4f0d141135123faabd5d473a9db7edab7c06273af509148f813045c1cf489de274193957caf29ed7caa3a779b1d8a5964463fe3617e510d084e4b3dcdbc7d2ac787e861591aba42bde3839aab7ba3ed8d65e2a428fb37b22fcb5dbee188e44266552fda4c9d5362b5b656ca552cc4cc701dbae61273c668f79decb89359fc24ee4638722494c7ba75ce50d8e18b50a2355a3a7b6484d74618d11ac2cca63b16cddff7d4f3419863dbe943f8fc244994fc7eb9a39e73935c7fa2d753f1405618ce2d6c3adda1f82cc9568bd8f4a6bb69a25b8d0a22184886249fc0b760746e68c9748da07c4f8e82ba589d5bfa163c84bb3689887329e0127e4dfc063970c47daf3a59d9186ab435e86612dedb4c49c2aed7b7a68f4d899fb831459e938591d611c0bab36c63ca5a3dee2bb80f4170c2fd12326bdaab08f0acf7f91bdc265b7ad1603dbb221038e6b7a63f05b8f67b19ba5224dd630475edfa3dae36910624b2eadb901387954b4f93678e5ffe0716428b695d9fd60b5998702b591c3d592f358dfc214f2583ea007b7bd1c5277753e163d94a18820be105ce0202cfb8b6b94e9ba559323d5601fe48ef3143de0ff1e7dbb1376f3996d3400dd141ce86a05a072137763e3b38eb2793c42d7516704daf9837437b936b2c31b40a4b49565679b592702e8185a9dee71c6b8111c0b203c9eb29cc2fac21eadf573f67b00a3cf448c7bf6d37242d765befe247dc55e7c4c7f1f095989c1ab9fee5a76f54f47b71fc70f3f6621b6cb12f19681ca32dfdbf60f690c61788eece6541779fa3dcf1e5aee7dae1a30f18fce32e4b214b050900810582f9dd24f0777fff9b855acc7966401a8ba3382e970f21c3deb158121fe0ec735d5f3f7428de3352a7c39b4477d53d941efeca4efff8d632baa2e429c7a2937bcddf92bd8680e25ec6a99f7194921b694c3a93334c5eaee9519cbe3b5ca446a47e59823d751831b9a6ae12dcc252584cfb8b740c8d098906649b96fb5b6cca24ec2d88a1f1a1e2b5807cb0cf02a52be5d0a978106b15920004d32cd4a6f8af1fdceb93166ceff7b8272e4db7fbc8d199d2febf614495b6c8ab2863e443c1f0c78152fbbac779f5feb736492cac0092f55e3b633a943783556180640bafe514480dfe188a53f2d5ceda2f7d278c6678d584414267176178bdeed399ca1976a0d5616354dcef3b7b211a515abbc976bfcb6f5c1247e9265fd6126a60a7163c1517c2323285b836b753096d44eda3e5f2ad3e00cba34e731c218e6fd2ecb54ac25fc67ad96547e095ce3bc67f0a85428403b98901a2f66d38988ddc6285fcbe4c7d9e19ada7b93a48ec97883dc4601f8f224491d11788b4bba947f69c19e304ddb19a9b518f662579b45f70d8e01a80fac6462b430c9c022d5e8745a43812f408f53ff93b840170e3a412d49be39df59444691f28e9186b38d6f96b0c5db9d39482c14228464494a3980a69af143e5af3383dbf9e3495ff1dba2c2c5cc96a4ba8ca48d9dede66d5eb8d90bad6ba75657784768f83b2694b0f314febe03f2b564192a1a3fd6441f6c8a8259eddc6be624e5042a89772534b1b5d78f6a742809168a050f7f83cf1d81c0745775edc1902bd090e244d9f36d7402f6fbc9b329d14dc83734589aa61a3c483b1324cc4c26432ad317989e2623b1ee0ff76cb781b164806fd96adf22a666cc42dd8a8ebfc3cc8d810d64834a6db0e279def9a4da54c82dc718415f9f5bc07536cd34b03ff2098ecb054da51783c58345733aa9092be0cb895e8e8c99d8e50f40816b748ca3e5d553fc32c87d2a05a3540c11ff887d4aa129deb5c9df15a14ef751c47cea01210900e455eb54fcd9b08339154fa71087fdf55c6518fd688a49e36ecfb6f6e86317973b0fa39e408e5f060bd9f8db3147554700995f0a25103266f9da3ec07fce02491511531f9f8bf63d099832198bf29cfa33e536efc4939c293b21353531386b6ebc4329c64852d7d87a9730eb13d4acb0726bea1821ca61a5eecd4279915fa60d4b5aca11bda61a3574afc564b7349a4009646692ded6c29324a3294fecad1b7630fde87287a4c8f3e8e7fcf2801549b0a435bf06b6e3e1794d2cd4e33a7e9b0ed3d27547d11ed95c34fb0005ec1706f6789ca12320e0a83fad64e2fd316b1b631979bdf36c616dec06a9cb3f716abeb6edd7ad5b22b9ce1cd7e8570081706fea47ef2d542acf36cd601263ad37dc3bb2b6fc4b4dac981fa890c817f8b6bcec60aa8d2fd91f3d73bd3eb150e53778b6162af34fbaad7acf8c50ca12d734768de63a8e2be5beb27fc917beb5dbfac7fb176c9a759c69d90b9dd7fadb17c8bf7577f4162f95e1a0365fee08b7daefbedcf90ba92a9625012be386e53e86438b1b14a9ae917ec815de6063f1c0f7deaa89c04c229fe97d48297423501bab889c38c4c9808a9a4394ad51fd99cb326577b22bf5b3cd06f347181f69d6a98c1d51a62cf57e292d7bb8dadc420056a63103b6d0676e7990841a59ec800148264916eb1d8e17c3c5d40ef0a0ac65e59362b2daf5cef99b635a39a44b7794688f0bffebcc1a71211b0b0432ad167cc3acc9af38872ca78f8915a0060302115255b7c5a840005b13cf132fde93e23ad242d882454aee372607bf2e7df529b23ef3ca0ccbb349f2707ac051cedc9d50539022d5a06c9b036e40870ca9d08d93a9b6fd03c8e06c57ef72761a5c45b227a2ec9fc5b5d2dd0c1497202a84a42fa4fea03e07551808af486a24850737bc7ec070ce99d31bad08b8b68ffb7cd73aa1b140c6e1f49fd29f413e747485320d5669a79d25976ca900704e2ee0bde97232cefd6bd1e56f6f1e7a1558ca2092b699c2bc60c9021897e0964af7dd5ec8aa847ae705d710012b317f37369f50ce9b4665005ae356f482f4a9a19b97a21443d5b4d2417e280bf2b76b2208222c8c337386e9a454b08f01da77d7feec7d7fdaea60fd2a65bd0c5aa1ef60a7effc3aff02173e6dbdbb20dda27f34b0bc6f8bf7c53803adf4e65fc3ab2a92692c1b849ff5f1af5d89c3b98af64e92338f6da6c4f551d40091c0e75cc9589910bdda0ae3f040e09338b67fdcb8a59b0a95c3ec0ec91f58a88b255f5f0ce634d594e8c2557f893618f41d800b58"}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffff1, &(0x7f00000001c0)=0xd)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf, 0x1f, 0x2}, 0xf)
r1 = creat(0x0, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept$alg(r1, 0x0, 0x0)
gettid()
r2 = syz_open_procfs(0x0, &(0x7f0000002680)='fdinfo\x00}\xc7\xc0\xe5\x80g\xbb\x9c\xbe\x92\xf7\x10=E\x99On\xb9k\xe3\xe7\x86r\xbd.\xcc\x1e:Tr#\x87\xda\x117\xda\xb2lA\xd4\x1bL5\x020\x80g\x18\xe7\xae\xc7z\xe8\x85\xba\x98\x92\x1a\xb9\xf3\x9c\xa6\v\xf2\xf3\x85\xb2l>\x0e\xe6\xff\x0f\xd2O\x85\xba\x1a\xb7\xccC\x88\xa2;\xb7Kx6\xf5Ed\x16z#\xd3G\x8ca\x83\x16\xa5\x92\x99#\xb3\x89\x82aJ\xa0*\xc5p\xf2\x04\xab+\x02\xd6\x84\xcf\x81f\xc1\xaaEF)\x92~\xf0S)\xe7\x1a\xfd1\xfbL\xfb\xb0\xd9\xfc8c2^CJ\xcc,\x88>\xff\xba\x1f\xb0\xc9\f21')
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000140)=0x9)
getdents(r2, &(0x7f0000000240)=""/4096, 0xfcb8)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001680), 0x0)
ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f00000000c0)=""/123)

[ 3261.530221] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:16:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070")
fcntl$setflags(r0, 0x11, 0x0)

23:16:24 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x23)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)

[ 3261.613337] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:16:24 executing program 2:
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x18)

[ 3261.657481] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:16:24 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000005300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3261.747801] protocol 88fb is buggy, dev hsr_slave_0
[ 3261.753548] protocol 88fb is buggy, dev hsr_slave_1
[ 3262.226420] protocol 88fb is buggy, dev hsr_slave_0
[ 3262.231568] protocol 88fb is buggy, dev hsr_slave_1
[ 3262.236755] protocol 88fb is buggy, dev hsr_slave_0
[ 3262.241817] protocol 88fb is buggy, dev hsr_slave_1
[ 3262.246955] protocol 88fb is buggy, dev hsr_slave_0
[ 3262.252047] protocol 88fb is buggy, dev hsr_slave_1
[ 3263.586414] Bluetooth: hci0: command 0x1003 tx timeout
[ 3263.591842] Bluetooth: hci0: sending frame failed (-49)
[ 3264.386475] Bluetooth: hci1: command 0x1003 tx timeout
[ 3264.391925] Bluetooth: hci1: sending frame failed (-49)
[ 3265.666510] Bluetooth: hci0: command 0x1001 tx timeout
[ 3265.671924] Bluetooth: hci0: sending frame failed (-49)
[ 3266.386493] net_ratelimit: 18 callbacks suppressed
[ 3266.391487] protocol 88fb is buggy, dev hsr_slave_0
[ 3266.396589] protocol 88fb is buggy, dev hsr_slave_1
[ 3266.401717] protocol 88fb is buggy, dev hsr_slave_0
[ 3266.406828] protocol 88fb is buggy, dev hsr_slave_1
[ 3266.411972] protocol 88fb is buggy, dev hsr_slave_0
[ 3266.417060] protocol 88fb is buggy, dev hsr_slave_1
[ 3266.466462] Bluetooth: hci1: command 0x1001 tx timeout
[ 3266.471898] Bluetooth: hci1: sending frame failed (-49)
[ 3266.706490] protocol 88fb is buggy, dev hsr_slave_0
[ 3266.711658] protocol 88fb is buggy, dev hsr_slave_1
[ 3267.346457] protocol 88fb is buggy, dev hsr_slave_0
[ 3267.351537] protocol 88fb is buggy, dev hsr_slave_1
[ 3267.746538] Bluetooth: hci0: command 0x1009 tx timeout
[ 3268.556499] Bluetooth: hci1: command 0x1009 tx timeout
[ 3271.506432] net_ratelimit: 22 callbacks suppressed
[ 3271.506438] protocol 88fb is buggy, dev hsr_slave_0
[ 3271.516479] protocol 88fb is buggy, dev hsr_slave_1
[ 3272.146446] protocol 88fb is buggy, dev hsr_slave_0
[ 3272.151615] protocol 88fb is buggy, dev hsr_slave_1
[ 3272.626455] protocol 88fb is buggy, dev hsr_slave_0
[ 3272.631571] protocol 88fb is buggy, dev hsr_slave_1
[ 3272.636692] protocol 88fb is buggy, dev hsr_slave_0
[ 3272.641755] protocol 88fb is buggy, dev hsr_slave_1
[ 3272.646867] protocol 88fb is buggy, dev hsr_slave_0
[ 3272.651956] protocol 88fb is buggy, dev hsr_slave_1
23:16:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xb)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:16:35 executing program 2:
r0 = syz_open_dev$evdev(0x0, 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:35 executing program 4:

23:16:35 executing program 0:

23:16:35 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000006300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:35 executing program 3:

23:16:35 executing program 3:

23:16:35 executing program 2:
r0 = syz_open_dev$evdev(0x0, 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:35 executing program 4:

[ 3273.019978] f2fs_msg: 22 callbacks suppressed
[ 3273.019990] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:16:35 executing program 0:

[ 3273.062156] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:16:35 executing program 3:

[ 3273.121457] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3273.158265] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:16:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r2=>0x0)
ioprio_get$pid(0x0, r2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2)

[ 3273.174196] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3273.181771] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3273.195278] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:16:35 executing program 4:

23:16:35 executing program 3:

[ 3273.218046] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:16:35 executing program 2:
r0 = syz_open_dev$evdev(0x0, 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:35 executing program 0:

[ 3273.287952] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3273.324192] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:16:36 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000007300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:36 executing program 4:

23:16:36 executing program 3:

23:16:36 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x80000001, &(0x7f0000000800)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet6_dccp_int(r2, 0x21, 0xb, &(0x7f00000007c0)=0x6, 0x4)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000180)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
ioctl$KDADDIO(r1, 0x4b34, 0x1)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x40, 0x0)
sendmsg$tipc(r3, &(0x7f0000000740)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000140)="0b675e6e2e559ad8973eb739fd94cdf7d609fc470d72a776", 0x18}, {&(0x7f00000001c0)="56510363e75bc5a0c8131a6c27b50d7c4853fb2db678402d160342448030cede7efc0685f5613ff04f44a6ad5838e03074a682e0a97ad144d18a943e422151bfe6f8d3cfef0a098182da55583e102a87a2827f03492dc6f784f24337003d487a3ced3b07c40db9ebd39a6f206f20b944671a09126933529261a1d05a4d682793623c3372e4178cc9a02a2c1d2c17b36b0c8a258d626572a269352a4552412a08a2dbcdd2b44f0309a9bd2f48303cf3bd24ed6239a7fabce24ed197ac", 0xbc}, {&(0x7f0000000280)="8e3d04ce8e5ad49e2eac9298c913ce77a7122ff1b7033a2a1835afb5a69306cacb6816014e522eadf70d2db07d8c3300dc8a0c61eaeea64ea73bf7e5d7ee0c15b0fd3feb7311ab744df35bf78ba373ff058c84c5543b5db38ba52493b4b697030b4fe4a876c04a8dc624bfa7019aa755c0f06a75183518cf7373d2b49bc36afbeef7bd7d9a7524531f3beaf965559359f993c2920ba46019d9afb9f8be542c557b4fc23e1666dda963c5a4abcfc24d", 0xaf}, {&(0x7f0000000340)="9703d2ed4b0f910d17d01a3e7364e65ec1ed6653ccc6b155bfe48598abdc6f6fe5fa6a2e6ef350d8e7873bac690bc1afa055e4f78b462e60f09ce703dd3d760d08e82108ecb63e0a0e6b7441eb6fd96e68de9e22790830564a137646bd07f62da447f72369debd9d327af7fee68fea3484a156d4b3ec50e800b38930bca0d440efcf904afd05acb64e4be7c86315eb0206f73b421f563d34486b5be215808beaec473ff64e46fe2f3b5c74781816ddb7677ef0f9621f86c07cc9b9fad8abeae1ff39891e2ff7ad72601473f1e5c3f13b5bc98e249c773da1c86d8d32022234eb8c8a74717f209b2d", 0xe8}, {&(0x7f0000000440)="d83d4fb04b96257a666900e1edc926207461a99ece4af0f48fa60abf6708e92c00912b9334ee1cf8342c3b5ed5b3c529531ea4d88de0a197e02411973beafe26a7e96bc36742b5e97437f0752a2d40c64bd7f0ad442fa39e12be83cb20a3289d254c587964490fac2fc2d889d87a2e", 0x6f}, {&(0x7f00000004c0)="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", 0xfa}], 0x6, &(0x7f0000000640)="eb39834011671cfcf83f53e5a1a9956d4df8e18e98e1ddce1498266129b5ac3c0cbcddc04f2cca459a02000b676f05fd101974013cc93f098f0375b54622fa49e307d2d24a9830ca71968c11bdd45ad76793968ea2b70362183e2f59ef22423b616f88d162d7b09e0bf25119260bbf0356d2d9f5adaefff33517746355e8ff53186099e503d1739989bd78dd53250aa604bdddc554f5d788d78bb079fba1e382701ad29d0dbb16f6ea66e4fc4f5299b24ef8b6fa44b301e5c3f6a0b623cf3a79b563624ef7bc00e0e036cadf8f9382fb6997488d77c7382bee874141789f17818ab682f9271f7eeb95db", 0xea, 0x4040000}, 0x1)

23:16:36 executing program 0:

23:16:36 executing program 0:

23:16:36 executing program 4:

23:16:36 executing program 3:

23:16:36 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

[ 3273.556808] Bluetooth: hci0: sending frame failed (-49)
23:16:36 executing program 0:

23:16:36 executing program 4:

23:16:36 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000009300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:36 executing program 3:

23:16:36 executing program 0:

23:16:36 executing program 3:

[ 3275.586463] Bluetooth: hci0: command 0x1003 tx timeout
[ 3275.591861] Bluetooth: hci0: sending frame failed (-49)
[ 3276.786506] net_ratelimit: 18 callbacks suppressed
[ 3276.791514] protocol 88fb is buggy, dev hsr_slave_0
[ 3276.796558] protocol 88fb is buggy, dev hsr_slave_1
[ 3276.801630] protocol 88fb is buggy, dev hsr_slave_0
[ 3276.806682] protocol 88fb is buggy, dev hsr_slave_1
[ 3276.811783] protocol 88fb is buggy, dev hsr_slave_0
[ 3276.816842] protocol 88fb is buggy, dev hsr_slave_1
[ 3277.106478] protocol 88fb is buggy, dev hsr_slave_0
[ 3277.111637] protocol 88fb is buggy, dev hsr_slave_1
[ 3277.666510] Bluetooth: hci0: command 0x1001 tx timeout
[ 3277.671950] Bluetooth: hci0: sending frame failed (-49)
[ 3277.746462] protocol 88fb is buggy, dev hsr_slave_0
[ 3277.751543] protocol 88fb is buggy, dev hsr_slave_1
[ 3279.746461] Bluetooth: hci0: command 0x1009 tx timeout
[ 3281.906443] net_ratelimit: 22 callbacks suppressed
[ 3281.906449] protocol 88fb is buggy, dev hsr_slave_0
[ 3281.916554] protocol 88fb is buggy, dev hsr_slave_1
[ 3282.546457] protocol 88fb is buggy, dev hsr_slave_0
[ 3282.551556] protocol 88fb is buggy, dev hsr_slave_1
[ 3283.026416] protocol 88fb is buggy, dev hsr_slave_0
[ 3283.031501] protocol 88fb is buggy, dev hsr_slave_1
[ 3283.036684] protocol 88fb is buggy, dev hsr_slave_0
[ 3283.041734] protocol 88fb is buggy, dev hsr_slave_1
[ 3283.046919] protocol 88fb is buggy, dev hsr_slave_0
[ 3283.052016] protocol 88fb is buggy, dev hsr_slave_1
23:16:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0)
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)
bind$rose(r1, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xb)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:16:46 executing program 4:

23:16:46 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:46 executing program 0:

23:16:46 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000000a300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:46 executing program 3:

23:16:46 executing program 3:

23:16:46 executing program 4:

23:16:46 executing program 0:

[ 3283.840554] f2fs_msg: 38 callbacks suppressed
[ 3283.840570] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3283.877705] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:16:46 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:46 executing program 4:

23:16:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x2, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x400800, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000001c0)=""/135)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x8, 0x0, [{0x80000007, 0xc7b, 0x2, 0x9, 0x20, 0xf24}, {0xc0000001, 0x1000, 0x1, 0x100000000, 0x7f, 0x8001, 0x7fffffff}, {0x80000001, 0x800, 0x4, 0x0, 0x401, 0x7, 0x100}, {0xa, 0x9, 0x2, 0x5, 0x76e7692d, 0x800, 0x8000}, {0x8000000b, 0x1162, 0x4, 0x9, 0x0, 0x0, 0x1f}, {0x8000000f, 0x3ff, 0x5, 0x81, 0x8001, 0x1, 0x8}, {0x80000019, 0x65, 0x6, 0x1, 0x9, 0xf3, 0x8}, {0xc000000d, 0x80000001, 0x4, 0x3, 0x4, 0x40, 0xa}]})
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

[ 3283.907076] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3283.940347] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:16:46 executing program 3:

[ 3284.007247] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:16:46 executing program 0:

23:16:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00')
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000))
sendfile(r1, r1, 0x0, 0x7fff)

23:16:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup3(r0, r1, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)

[ 3284.051638] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3284.068633] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3284.086683] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3284.177902] syz-executor.3 (29673): /proc/29673/oom_adj is deprecated, please use /proc/29673/oom_score_adj instead.
23:16:46 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000000c300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x103000, 0x0)
ioctl$TIOCGICOUNT(r1, 0x545d, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
readahead(r2, 0x6, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0)
ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x1d)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:16:46 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:46 executing program 0:
r0 = socket(0x0, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x400)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@loopback}}, {{@in6=@remote}, 0x0, @in=@remote}}, 0x0)
fchown(r1, 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x0, 0x2)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
semtimedop(0x0, &(0x7f0000000400), 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$VT_OPENQRY(r1, 0x5600, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
fcntl$getown(0xffffffffffffffff, 0x9)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xb)
socket$inet_tcp(0x2, 0x1, 0x0)
ustat(0x2, &(0x7f0000000980))

23:16:46 executing program 4:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

[ 3284.335864] QAT: Invalid ioctl
23:16:47 executing program 3:
getrandom(&(0x7f0000000200)=""/234, 0xea, 0x2)

[ 3284.426832] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3284.437732] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3284.444801] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:16:47 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200001e4)
r2 = memfd_create(&(0x7f0000000180)='dev ', 0x3)
write(r2, &(0x7f00000011c0)="16", 0x1)
sendfile(r1, r2, &(0x7f0000000000), 0xffff)
clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_execute_func(&(0x7f0000000080)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c4c1585e5c2b71660f3a426306f5")
clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$addseals(r2, 0x409, 0x8)
accept4(r0, 0x0, 0x0, 0x0)
connect(r1, 0x0, 0x0)

23:16:47 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1e)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73e0a8a28b23e73b56dfb925dca5e6be59632fec534acaf3ad090bee4d2fd06dd3c7f000000191c00000000fff780649624d030c3076a"], 0x39)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r1, 0x0, 0x0)

23:16:47 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000010300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:47 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123d319bd070")
unshare(0x2000400)
r1 = socket$inet(0xa, 0x801, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180), 0x0)

23:16:47 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000f2f52010300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3285.114567] QAT: Invalid ioctl
[ 3286.466491] Bluetooth: hci0: command 0x1003 tx timeout
[ 3286.471930] Bluetooth: hci0: sending frame failed (-49)
[ 3287.186457] net_ratelimit: 18 callbacks suppressed
[ 3287.186466] protocol 88fb is buggy, dev hsr_slave_0
[ 3287.196653] protocol 88fb is buggy, dev hsr_slave_1
[ 3287.201768] protocol 88fb is buggy, dev hsr_slave_0
[ 3287.207104] protocol 88fb is buggy, dev hsr_slave_1
[ 3287.212322] protocol 88fb is buggy, dev hsr_slave_0
[ 3287.217475] protocol 88fb is buggy, dev hsr_slave_1
[ 3287.506507] protocol 88fb is buggy, dev hsr_slave_0
[ 3287.511683] protocol 88fb is buggy, dev hsr_slave_1
[ 3288.146467] protocol 88fb is buggy, dev hsr_slave_0
[ 3288.151602] protocol 88fb is buggy, dev hsr_slave_1
[ 3288.546508] Bluetooth: hci0: command 0x1001 tx timeout
[ 3288.551940] Bluetooth: hci0: sending frame failed (-49)
[ 3290.626470] Bluetooth: hci0: command 0x1009 tx timeout
[ 3292.306474] net_ratelimit: 22 callbacks suppressed
[ 3292.306480] protocol 88fb is buggy, dev hsr_slave_0
[ 3292.316587] protocol 88fb is buggy, dev hsr_slave_1
[ 3292.946452] protocol 88fb is buggy, dev hsr_slave_0
[ 3292.951548] protocol 88fb is buggy, dev hsr_slave_1
[ 3293.426517] protocol 88fb is buggy, dev hsr_slave_0
[ 3293.431621] protocol 88fb is buggy, dev hsr_slave_1
[ 3293.436882] protocol 88fb is buggy, dev hsr_slave_0
[ 3293.441910] protocol 88fb is buggy, dev hsr_slave_1
[ 3293.446995] protocol 88fb is buggy, dev hsr_slave_0
[ 3293.452029] protocol 88fb is buggy, dev hsr_slave_1
23:16:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={<r3=>0x0, 0x91, 0x7, [0x5, 0x6, 0x8000, 0xde2, 0xfffffffffffffffb, 0x3, 0x4]}, &(0x7f0000000140)=0x16)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x5}, 0x8)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:16:57 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:57 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="d7c9313a08f0e07290cfa9713c3aec4d9e8ad3e79269d41217a1535c1703d9e0a249056c239d833e71a13021d0cba1b8db06f1d550ec775572df2df4a386f6bab647ed01a755414e59fa3144700475bcf49d9b385483f5cfb7d4ea8f771e5b08d9bb6c8468db0e32f11e6cf64001c00e4577429da2ec541247c4f09f0fd1227503814c33176b0841d7da977fb1f77436c41eb6acc356c474e2", 0x99, 0x40, 0x0, 0x0)

23:16:57 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000014300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:57 executing program 3:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'})
dup3(r0, r1, 0x0)

23:16:57 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80003, 0x0)
sched_setaffinity(0x0, 0x2, &(0x7f0000000140)=0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
gettid()
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000))
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

[ 3294.691109] f2fs_msg: 46 callbacks suppressed
[ 3294.691125] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3294.728108] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:16:57 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

[ 3294.735903] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3294.751113] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3294.765085] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:16:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x90000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:16:57 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="e1", 0x1}], 0x1)

[ 3294.816277] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3294.882947] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:16:57 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
add_key(0x0, &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa)

23:16:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070")
r1 = socket$inet(0xa, 0x801, 0x84)
sendmsg$inet_sctp(r1, &(0x7f00000015c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @remote, 0x100000001}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@init={0x18, 0x84, 0x0, {0x0, 0x101, 0x1f, 0x7fff}}], 0x18, 0x8000}, 0x20040880)

23:16:57 executing program 3:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup3(r1, r0, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0}}, 0x0)

23:16:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400080, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

[ 3294.929256] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:16:57 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

[ 3295.033728] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3295.066940] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:16:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0)
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000001c0)=""/4096)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x3)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001200)={{0x2, 0x4e24, @broadcast}, {0x6, @broadcast}, 0x40, {0x2, 0x4e24, @rand_addr=0xfb}, 'bridge_slave_0\x00'})
ioctl$VT_ACTIVATE(r2, 0x5606, 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400800, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/zero\x00', 0x101000, 0x0)

23:16:57 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000020300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:57 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
recvmmsg(0xffffffffffffff9c, &(0x7f00000072c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2041, 0x0)

23:16:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:16:57 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
add_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa)

23:16:57 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xfffffffffffffffc, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:16:57 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
sendto(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x4800, 0x0, 0x0)

23:16:58 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000280)={0x0, 0x0, 0x10000})

23:16:58 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000022300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:16:58 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, 0x0, 0x0)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:16:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:16:58 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x1c)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070")
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)

[ 3295.653688] Bluetooth: hci0: Frame reassembly failed (-84)
23:16:58 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000023300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:58 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x43}, 0x14)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b)
sendto(r0, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0)
close(r0)

23:16:58 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080), 0x0)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

[ 3295.758795] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
23:16:58 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000042b300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:16:58 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3d3}, 0x24000000)

23:16:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:16:58 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$unlink(0x9, r0, 0x0)

23:16:58 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080), 0x0)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

[ 3296.408638] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3297.586480] net_ratelimit: 18 callbacks suppressed
[ 3297.586488] protocol 88fb is buggy, dev hsr_slave_0
[ 3297.596617] protocol 88fb is buggy, dev hsr_slave_1
[ 3297.601827] protocol 88fb is buggy, dev hsr_slave_0
[ 3297.606936] protocol 88fb is buggy, dev hsr_slave_1
[ 3297.612113] protocol 88fb is buggy, dev hsr_slave_0
[ 3297.617225] protocol 88fb is buggy, dev hsr_slave_1
[ 3297.666421] Bluetooth: hci0: command 0x1003 tx timeout
[ 3297.671910] Bluetooth: hci0: sending frame failed (-49)
[ 3297.906520] protocol 88fb is buggy, dev hsr_slave_0
[ 3297.911888] protocol 88fb is buggy, dev hsr_slave_1
[ 3298.466423] Bluetooth: hci1: command 0x1003 tx timeout
[ 3298.471875] Bluetooth: hci1: sending frame failed (-49)
[ 3298.546488] protocol 88fb is buggy, dev hsr_slave_0
[ 3298.551598] protocol 88fb is buggy, dev hsr_slave_1
[ 3299.302105] audit: type=1400 audit(1555370221.913:122): avc:  denied  { map } for  pid=31589 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[ 3299.746531] Bluetooth: hci0: command 0x1001 tx timeout
[ 3299.752002] Bluetooth: hci0: sending frame failed (-49)
[ 3300.546473] Bluetooth: hci1: command 0x1001 tx timeout
[ 3300.551935] Bluetooth: hci1: sending frame failed (-49)
[ 3301.826479] Bluetooth: hci0: command 0x1009 tx timeout
[ 3302.626528] Bluetooth: hci1: command 0x1009 tx timeout
[ 3302.706459] net_ratelimit: 22 callbacks suppressed
[ 3302.706464] protocol 88fb is buggy, dev hsr_slave_0
[ 3302.716579] protocol 88fb is buggy, dev hsr_slave_1
[ 3303.346514] protocol 88fb is buggy, dev hsr_slave_0
[ 3303.351613] protocol 88fb is buggy, dev hsr_slave_1
[ 3303.826458] protocol 88fb is buggy, dev hsr_slave_0
[ 3303.831561] protocol 88fb is buggy, dev hsr_slave_1
[ 3303.836787] protocol 88fb is buggy, dev hsr_slave_0
[ 3303.841902] protocol 88fb is buggy, dev hsr_slave_1
[ 3303.847122] protocol 88fb is buggy, dev hsr_slave_0
[ 3303.852197] protocol 88fb is buggy, dev hsr_slave_1
23:17:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0xc0000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
flock(r0, 0xe)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x5}, 0x28, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:17:09 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000002c300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:17:09 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

23:17:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:17:09 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080), 0x0)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:17:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8007e, 0x40004402)
ioctl$BLKDISCARD(r1, 0x127d, 0x0)

[ 3306.836518] f2fs_msg: 62 callbacks suppressed
[ 3306.836532] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3306.913424] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3306.924524] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3306.945761] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:17:09 executing program 4:
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xc0, 0x0)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0))
llistxattr(0x0, 0x0, 0x0)
lgetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'user.', '/dev/null\x00'}, &(0x7f0000000340)=""/4096, 0x1000)
ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0)
r1 = inotify_init()
alarm(0xc6c0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001540)=0x2)
mount$9p_rdma(&(0x7f0000001580)='127.0.0.1\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='9p\x00', 0x2000000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$TIOCSIG(r0, 0x40045436, 0x0)
execve(&(0x7f0000001740)='./file0\x00', &(0x7f0000001a00)=[0x0, &(0x7f00000017c0)='fsname', &(0x7f0000001800)='/keyring\x00', &(0x7f0000001840)='\x00', 0x0, &(0x7f0000001980)='}eth1\x00', &(0x7f00000019c0)=')(eth1wlan0\xfb{#nodev\x00'], &(0x7f0000001cc0)=[&(0x7f0000001a80)='privport', 0x0, &(0x7f0000001b00)='access=any', &(0x7f0000001b80)='nodev&vmnet1]^GPL+lo@\x00', &(0x7f0000001bc0)='seclabel', &(0x7f0000001c00)='\x00', &(0x7f0000001c40)='\x00', 0x0])
ioctl$int_in(r0, 0x5473, &(0x7f0000001d40)=0xffffffff)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001e40))
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000001ec0))
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000001f00))
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002140)={{{@in6=@initdev, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000002240)=0xe8)
getgid()
getuid()
lstat(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380))
stat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440))
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000002500))
getresuid(&(0x7f0000003d40), &(0x7f0000003d80), &(0x7f0000003dc0))
stat(&(0x7f0000003e00)='./file0\x00', &(0x7f0000003e40))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003ec0), &(0x7f0000003f00)=0xc)
getegid()
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005380)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000005480)=0xe8)
getgid()
fstat(r0, &(0x7f00000054c0))
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000055c0)={{{@in=@multicast2, @in=@empty}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f00000056c0)=0xe8)
getresgid(&(0x7f0000005900), &(0x7f0000005940), &(0x7f0000005980))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006ec0), &(0x7f0000006f00)=0xc)

23:17:09 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x0, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

[ 3306.969236] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3307.042291] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3307.082200] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:17:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:17:09 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x0, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

[ 3307.105253] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3307.145386] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:17:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3307.208975] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3307.223428] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:17:09 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
ioctl$TIOCGRS485(r0, 0x542e, 0x0)

[ 3307.986457] net_ratelimit: 18 callbacks suppressed
[ 3307.986464] protocol 88fb is buggy, dev hsr_slave_0
[ 3307.996932] protocol 88fb is buggy, dev hsr_slave_1
[ 3308.002049] protocol 88fb is buggy, dev hsr_slave_0
[ 3308.007178] protocol 88fb is buggy, dev hsr_slave_1
[ 3308.012308] protocol 88fb is buggy, dev hsr_slave_0
[ 3308.017449] protocol 88fb is buggy, dev hsr_slave_1
[ 3308.306692] protocol 88fb is buggy, dev hsr_slave_0
[ 3308.311843] protocol 88fb is buggy, dev hsr_slave_1
[ 3308.946476] protocol 88fb is buggy, dev hsr_slave_0
[ 3308.951633] protocol 88fb is buggy, dev hsr_slave_1
[ 3309.026453] Bluetooth: hci0: command 0x1003 tx timeout
[ 3309.032043] Bluetooth: hci0: sending frame failed (-49)
[ 3311.106515] Bluetooth: hci0: command 0x1001 tx timeout
[ 3311.111979] Bluetooth: hci0: sending frame failed (-49)
[ 3313.106518] net_ratelimit: 22 callbacks suppressed
[ 3313.111554] protocol 88fb is buggy, dev hsr_slave_0
[ 3313.116633] protocol 88fb is buggy, dev hsr_slave_1
[ 3313.186925] Bluetooth: hci0: command 0x1009 tx timeout
[ 3313.746538] protocol 88fb is buggy, dev hsr_slave_0
[ 3313.751713] protocol 88fb is buggy, dev hsr_slave_1
[ 3314.226498] protocol 88fb is buggy, dev hsr_slave_0
[ 3314.231629] protocol 88fb is buggy, dev hsr_slave_1
[ 3314.236922] protocol 88fb is buggy, dev hsr_slave_0
[ 3314.242038] protocol 88fb is buggy, dev hsr_slave_1
[ 3314.247184] protocol 88fb is buggy, dev hsr_slave_0
[ 3314.252301] protocol 88fb is buggy, dev hsr_slave_1
23:17:19 executing program 1:
r0 = socket$caif_stream(0x25, 0x1, 0x5)
fcntl$getown(r0, 0x9)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000))

23:17:19 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000262e300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:17:19 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x0, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:17:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:17:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffff1, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

23:17:19 executing program 4:
r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x800)
readv(r0, &(0x7f0000002780)=[{&(0x7f0000001200)=""/45, 0x2d}], 0x1)

[ 3317.088109] f2fs_msg: 6 callbacks suppressed
[ 3317.088124] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3317.134836] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3317.154977] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3317.174569] Bluetooth: hci0: Frame reassembly failed (-84)
23:17:19 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat6\x00')
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1)

23:17:19 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x0, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:17:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0)

[ 3317.196715] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3317.225295] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3317.281703] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3317.311980] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:17:19 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200001e4)
r2 = memfd_create(&(0x7f0000000180)='dev ', 0x3)
write(r2, &(0x7f00000011c0)="16", 0x1)
sendfile(r1, r2, &(0x7f0000000000), 0xffff)
clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_execute_func(&(0x7f0000000080)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c4c1585e5c2b71660f3a426306f5")
fcntl$addseals(r2, 0x409, 0x8)
accept4(r0, 0x0, 0x0, 0x0)

[ 3317.332256] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:17:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0)

23:17:20 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x0, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

[ 3317.389613] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3317.416565] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3318.386552] net_ratelimit: 18 callbacks suppressed
[ 3318.386561] protocol 88fb is buggy, dev hsr_slave_0
[ 3318.397749] protocol 88fb is buggy, dev hsr_slave_1
[ 3318.403152] protocol 88fb is buggy, dev hsr_slave_0
[ 3318.408593] protocol 88fb is buggy, dev hsr_slave_1
[ 3318.414659] protocol 88fb is buggy, dev hsr_slave_0
[ 3318.420107] protocol 88fb is buggy, dev hsr_slave_1
[ 3318.716570] protocol 88fb is buggy, dev hsr_slave_0
[ 3318.722872] protocol 88fb is buggy, dev hsr_slave_1
[ 3319.186447] Bluetooth: hci0: command 0x1003 tx timeout
[ 3319.192539] Bluetooth: hci0: sending frame failed (-49)
[ 3319.346521] protocol 88fb is buggy, dev hsr_slave_0
[ 3319.351628] protocol 88fb is buggy, dev hsr_slave_1
[ 3320.066504] Bluetooth: hci1: command 0x1003 tx timeout
[ 3320.071935] Bluetooth: hci1: sending frame failed (-49)
[ 3321.266516] Bluetooth: hci0: command 0x1001 tx timeout
[ 3321.271978] Bluetooth: hci0: sending frame failed (-49)
[ 3322.146586] Bluetooth: hci1: command 0x1001 tx timeout
[ 3322.152027] Bluetooth: hci1: sending frame failed (-49)
[ 3323.346491] Bluetooth: hci0: command 0x1009 tx timeout
[ 3323.506485] net_ratelimit: 22 callbacks suppressed
[ 3323.511491] protocol 88fb is buggy, dev hsr_slave_0
[ 3323.516596] protocol 88fb is buggy, dev hsr_slave_1
[ 3324.146512] protocol 88fb is buggy, dev hsr_slave_0
[ 3324.151630] protocol 88fb is buggy, dev hsr_slave_1
[ 3324.226482] Bluetooth: hci1: command 0x1009 tx timeout
[ 3324.626453] protocol 88fb is buggy, dev hsr_slave_0
[ 3324.631541] protocol 88fb is buggy, dev hsr_slave_1
[ 3324.636722] protocol 88fb is buggy, dev hsr_slave_0
[ 3324.641790] protocol 88fb is buggy, dev hsr_slave_1
[ 3324.647111] protocol 88fb is buggy, dev hsr_slave_0
[ 3324.652196] protocol 88fb is buggy, dev hsr_slave_1
23:17:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x648000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x4, 0x6})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x10001, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000300)={0x0, 0x8, 0x1, &(0x7f00000002c0)=0x3})
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))
setsockopt$sock_int(r0, 0x1, 0x2e, 0xffffffffffffffff, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0)
ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000240)={0x7, 0x3f})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000140)=0xfff)

23:17:31 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x0, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:17:31 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000002634300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:17:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0)

23:17:31 executing program 0:
creat(0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000006c00)={0x0, 0x1c9c380})

23:17:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070")
unshare(0x2000400)
fcntl$getown(r0, 0x9)

[ 3328.614361] f2fs_msg: 6 callbacks suppressed
[ 3328.614378] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3328.646942] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:17:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40000040000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'bond_slave_0\x00', 0x4c02})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10100)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000140)={0x7ff, 0x0, 0x3, 0x7, 0x20, 0x2})

23:17:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

[ 3328.675969] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:17:31 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

[ 3328.749100] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3328.778865] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3328.786450] net_ratelimit: 18 callbacks suppressed
[ 3328.786458] protocol 88fb is buggy, dev hsr_slave_0
23:17:31 executing program 4:
r0 = socket(0x0, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0)
unshare(0x400)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(r1, 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
semtimedop(0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$VT_OPENQRY(r1, 0x5600, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(r0, 0x9)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xb)
socket$inet_tcp(0x2, 0x1, 0x0)

[ 3328.796655] protocol 88fb is buggy, dev hsr_slave_1
[ 3328.801824] protocol 88fb is buggy, dev hsr_slave_0
[ 3328.806980] protocol 88fb is buggy, dev hsr_slave_1
[ 3328.812151] protocol 88fb is buggy, dev hsr_slave_0
[ 3328.813264] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3328.817287] protocol 88fb is buggy, dev hsr_slave_1
[ 3328.859093] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3328.869843] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3328.894672] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:17:31 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8007e, 0x40004402)
ioctl$BLKDISCARD(r0, 0x127d, &(0x7f0000000140)=0x2302)

23:17:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

23:17:31 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

[ 3328.981242] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3329.006488] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:17:31 executing program 4:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x23)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0)

23:17:31 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
sendto(0xffffffffffffffff, &(0x7f00000006c0)='e', 0x1, 0x4800, 0x0, 0x0)

23:17:31 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000003f300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3329.116552] protocol 88fb is buggy, dev hsr_slave_0
[ 3329.121686] protocol 88fb is buggy, dev hsr_slave_1
23:17:31 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45}], 0x18)
write$evdev(r0, &(0x7f0000000280)=[{}], 0x18)

23:17:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

[ 3329.746956] protocol 88fb is buggy, dev hsr_slave_0
[ 3329.752050] protocol 88fb is buggy, dev hsr_slave_1
[ 3330.786448] Bluetooth: hci0: command 0x1003 tx timeout
[ 3330.791874] Bluetooth: hci0: sending frame failed (-49)
[ 3332.866477] Bluetooth: hci0: command 0x1001 tx timeout
[ 3332.871929] Bluetooth: hci0: sending frame failed (-49)
[ 3333.906555] net_ratelimit: 22 callbacks suppressed
[ 3333.906561] protocol 88fb is buggy, dev hsr_slave_0
[ 3333.916653] protocol 88fb is buggy, dev hsr_slave_1
[ 3334.546480] protocol 88fb is buggy, dev hsr_slave_0
[ 3334.551573] protocol 88fb is buggy, dev hsr_slave_1
[ 3334.946533] Bluetooth: hci0: command 0x1009 tx timeout
[ 3335.026488] protocol 88fb is buggy, dev hsr_slave_0
[ 3335.031648] protocol 88fb is buggy, dev hsr_slave_1
[ 3335.036851] protocol 88fb is buggy, dev hsr_slave_0
[ 3335.041946] protocol 88fb is buggy, dev hsr_slave_1
[ 3335.047096] protocol 88fb is buggy, dev hsr_slave_0
[ 3335.052177] protocol 88fb is buggy, dev hsr_slave_1
23:17:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x800)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:17:41 executing program 0:
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

23:17:41 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000040300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:17:41 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x18)

23:17:41 executing program 4:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x23)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f0000000a40), 0x800000000000004, 0x0)

23:17:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

[ 3338.832117] f2fs_msg: 22 callbacks suppressed
[ 3338.832133] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3338.851812] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3338.866241] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3338.901892] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3338.920909] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3338.926809] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3338.929399] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:17:41 executing program 4:
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
mkdirat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x1ff)
preadv(r1, &(0x7f00000017c0), 0x1d0, 0x1f000000)
dup(0xffffffffffffff9c)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000380)=""/183, 0xb7}], 0x3, 0x0)
ioctl$RTC_WIE_OFF(r1, 0x7010)

23:17:41 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x18)

23:17:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

[ 3338.986551] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3338.999083] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3339.054699] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3339.142060] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3339.171463] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3339.186460] net_ratelimit: 18 callbacks suppressed
23:17:41 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x18)

[ 3339.186469] protocol 88fb is buggy, dev hsr_slave_0
[ 3339.196617] protocol 88fb is buggy, dev hsr_slave_1
[ 3339.201809] protocol 88fb is buggy, dev hsr_slave_0
[ 3339.206934] protocol 88fb is buggy, dev hsr_slave_1
[ 3339.212093] protocol 88fb is buggy, dev hsr_slave_0
[ 3339.217235] protocol 88fb is buggy, dev hsr_slave_1
23:17:41 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffd8}, 0x404c004)

23:17:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

[ 3339.506725] protocol 88fb is buggy, dev hsr_slave_0
[ 3339.511944] protocol 88fb is buggy, dev hsr_slave_1
[ 3340.146440] protocol 88fb is buggy, dev hsr_slave_0
[ 3340.151545] protocol 88fb is buggy, dev hsr_slave_1
[ 3340.956423] Bluetooth: hci0: command 0x1003 tx timeout
[ 3340.961911] Bluetooth: hci0: sending frame failed (-49)
[ 3341.746444] Bluetooth: hci1: command 0x1003 tx timeout
[ 3341.751878] Bluetooth: hci1: sending frame failed (-49)
[ 3343.026445] Bluetooth: hci0: command 0x1001 tx timeout
[ 3343.031909] Bluetooth: hci0: sending frame failed (-49)
[ 3343.826555] Bluetooth: hci1: command 0x1001 tx timeout
[ 3343.832006] Bluetooth: hci1: sending frame failed (-49)
[ 3344.306483] net_ratelimit: 22 callbacks suppressed
[ 3344.306490] protocol 88fb is buggy, dev hsr_slave_0
[ 3344.316613] protocol 88fb is buggy, dev hsr_slave_1
[ 3344.946472] protocol 88fb is buggy, dev hsr_slave_0
[ 3344.951584] protocol 88fb is buggy, dev hsr_slave_1
[ 3345.106452] Bluetooth: hci0: command 0x1009 tx timeout
[ 3345.426525] protocol 88fb is buggy, dev hsr_slave_0
[ 3345.431632] protocol 88fb is buggy, dev hsr_slave_1
[ 3345.436935] protocol 88fb is buggy, dev hsr_slave_0
[ 3345.441991] protocol 88fb is buggy, dev hsr_slave_1
[ 3345.447230] protocol 88fb is buggy, dev hsr_slave_0
[ 3345.452282] protocol 88fb is buggy, dev hsr_slave_1
[ 3345.906477] Bluetooth: hci1: command 0x1009 tx timeout
[ 3349.586452] net_ratelimit: 18 callbacks suppressed
[ 3349.586458] protocol 88fb is buggy, dev hsr_slave_0
[ 3349.596520] protocol 88fb is buggy, dev hsr_slave_1
[ 3349.601605] protocol 88fb is buggy, dev hsr_slave_0
[ 3349.606743] protocol 88fb is buggy, dev hsr_slave_1
[ 3349.611874] protocol 88fb is buggy, dev hsr_slave_0
[ 3349.617015] protocol 88fb is buggy, dev hsr_slave_1
[ 3349.906544] protocol 88fb is buggy, dev hsr_slave_0
[ 3349.911684] protocol 88fb is buggy, dev hsr_slave_1
23:17:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0000f3ff000000")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x81)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:17:52 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000048300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:17:52 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, 0x0, 0x0)

23:17:52 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

23:17:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070")
times(0x0)

23:17:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001380)=""/206, 0xce}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

[ 3350.372709] f2fs_msg: 6 callbacks suppressed
[ 3350.372722] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3350.405827] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3350.428570] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3350.432482] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3350.444190] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:17:53 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, 0x0, 0x0)

23:17:53 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)

23:17:53 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1)
memfd_create(0x0, 0x0)
fallocate(r0, 0x60, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

[ 3350.478315] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3350.500130] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3350.511545] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:17:53 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

[ 3350.535276] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3350.546463] protocol 88fb is buggy, dev hsr_slave_0
[ 3350.551614] protocol 88fb is buggy, dev hsr_slave_1
[ 3350.596456] audit: type=1400 audit(1555370273.203:123): avc:  denied  { map } for  pid=730 comm="syz-executor.4" path="/root/syzkaller-testdir272806264/syzkaller.kLXoc2/2945/bus" dev="sda1" ino=16841 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
23:17:53 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, 0x0, 0x0)

[ 3350.641038] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3350.649179] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:17:53 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000004c300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3352.466545] Bluetooth: hci0: command 0x1003 tx timeout
[ 3352.471977] Bluetooth: hci0: sending frame failed (-49)
[ 3353.186514] Bluetooth: hci1: command 0x1003 tx timeout
[ 3353.192213] Bluetooth: hci1: sending frame failed (-49)
[ 3354.546500] Bluetooth: hci0: command 0x1001 tx timeout
[ 3354.551930] Bluetooth: hci0: sending frame failed (-49)
[ 3354.706481] net_ratelimit: 22 callbacks suppressed
[ 3354.706487] protocol 88fb is buggy, dev hsr_slave_0
[ 3354.716619] protocol 88fb is buggy, dev hsr_slave_1
[ 3355.266458] Bluetooth: hci1: command 0x1001 tx timeout
[ 3355.271903] Bluetooth: hci1: sending frame failed (-49)
[ 3355.346453] protocol 88fb is buggy, dev hsr_slave_0
[ 3355.351553] protocol 88fb is buggy, dev hsr_slave_1
[ 3355.826475] protocol 88fb is buggy, dev hsr_slave_0
[ 3355.831568] protocol 88fb is buggy, dev hsr_slave_1
[ 3355.836761] protocol 88fb is buggy, dev hsr_slave_0
[ 3355.841818] protocol 88fb is buggy, dev hsr_slave_1
[ 3355.846965] protocol 88fb is buggy, dev hsr_slave_0
[ 3355.852020] protocol 88fb is buggy, dev hsr_slave_1
[ 3356.626477] Bluetooth: hci0: command 0x1009 tx timeout
[ 3357.346478] Bluetooth: hci1: command 0x1009 tx timeout
[ 3359.996524] net_ratelimit: 18 callbacks suppressed
[ 3359.996534] protocol 88fb is buggy, dev hsr_slave_0
[ 3360.006653] protocol 88fb is buggy, dev hsr_slave_1
[ 3360.011773] protocol 88fb is buggy, dev hsr_slave_0
[ 3360.016909] protocol 88fb is buggy, dev hsr_slave_1
[ 3360.022020] protocol 88fb is buggy, dev hsr_slave_0
[ 3360.027104] protocol 88fb is buggy, dev hsr_slave_1
[ 3360.306588] protocol 88fb is buggy, dev hsr_slave_0
[ 3360.311692] protocol 88fb is buggy, dev hsr_slave_1
[ 3360.946506] protocol 88fb is buggy, dev hsr_slave_0
[ 3360.951662] protocol 88fb is buggy, dev hsr_slave_1
23:18:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = accept4(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000140)=0x80, 0x80000)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000001c0)={<r3=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x9}, 0x8)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:18:03 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
socketpair(0x9, 0xa, 0x0, 0x0)

23:18:03 executing program 4:
r0 = socket(0x0, 0x80002, 0x0)
r1 = creat(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f00000004c0))
unshare(0x400)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fchown(r1, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
semtimedop(0x0, &(0x7f0000000400)=[{0x0, 0x80000001, 0x1000}], 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x0)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/3)
ioctl$VT_OPENQRY(r1, 0x5600, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
getpgrp(0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

23:18:03 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

23:18:03 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000060300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:18:03 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280), 0x0)

[ 3361.276550] f2fs_msg: 14 callbacks suppressed
[ 3361.276569] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3361.308408] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3361.320668] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:18:03 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280), 0x0)

23:18:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000)

[ 3361.359702] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3361.389737] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:18:04 executing program 4:
r0 = shmget$private(0x0, 0x2000, 0x54001802, &(0x7f0000002000/0x2000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff)

23:18:04 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

23:18:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
truncate(&(0x7f0000000000)='./file0\x00', 0x8)

[ 3361.422137] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3361.441166] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3361.452547] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3361.509633] audit: type=1800 audit(1555370284.123:124): pid=1090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=294921 res=0
23:18:04 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x1, 0x0, @pic={0x0, 0x7, 0x0, 0x8}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x0, 0x0, 0xffffffffffffffae}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000))

23:18:04 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x45, 0x200000000000002}], 0x18)
write$evdev(r0, &(0x7f0000000280), 0x0)

[ 3361.557152] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3361.572049] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3361.579793] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:18:04 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000463300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:18:04 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0)
ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0)
ioctl$GIO_FONT(r0, 0x4b60, 0x0)

23:18:04 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

23:18:04 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RRENAME(r0, 0x0, 0x0)

23:18:04 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

23:18:04 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000464300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:18:04 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)

23:18:04 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000465300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:18:04 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

[ 3362.325013] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3362.353537] audit: type=1800 audit(1555370284.953:125): pid=1450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="ramfs" ino=275343 res=0
[ 3363.586548] Bluetooth: hci0: command 0x1003 tx timeout
[ 3363.592007] Bluetooth: hci0: sending frame failed (-49)
[ 3364.386514] Bluetooth: hci1: command 0x1003 tx timeout
[ 3364.391944] Bluetooth: hci1: sending frame failed (-49)
[ 3365.106513] net_ratelimit: 22 callbacks suppressed
[ 3365.111526] protocol 88fb is buggy, dev hsr_slave_0
[ 3365.116596] protocol 88fb is buggy, dev hsr_slave_1
[ 3365.676586] Bluetooth: hci0: command 0x1001 tx timeout
[ 3365.682012] Bluetooth: hci0: sending frame failed (-49)
[ 3365.746496] protocol 88fb is buggy, dev hsr_slave_0
[ 3365.751659] protocol 88fb is buggy, dev hsr_slave_1
[ 3366.226458] protocol 88fb is buggy, dev hsr_slave_0
[ 3366.231611] protocol 88fb is buggy, dev hsr_slave_1
[ 3366.236731] protocol 88fb is buggy, dev hsr_slave_0
[ 3366.241835] protocol 88fb is buggy, dev hsr_slave_1
[ 3366.246935] protocol 88fb is buggy, dev hsr_slave_0
[ 3366.251980] protocol 88fb is buggy, dev hsr_slave_1
[ 3366.466544] Bluetooth: hci1: command 0x1001 tx timeout
[ 3366.471978] Bluetooth: hci1: sending frame failed (-49)
[ 3367.746477] Bluetooth: hci0: command 0x1009 tx timeout
[ 3368.546491] Bluetooth: hci1: command 0x1009 tx timeout
[ 3370.386529] net_ratelimit: 18 callbacks suppressed
[ 3370.386536] protocol 88fb is buggy, dev hsr_slave_0
[ 3370.397382] protocol 88fb is buggy, dev hsr_slave_1
[ 3370.403005] protocol 88fb is buggy, dev hsr_slave_0
[ 3370.408318] protocol 88fb is buggy, dev hsr_slave_1
[ 3370.413930] protocol 88fb is buggy, dev hsr_slave_0
[ 3370.419870] protocol 88fb is buggy, dev hsr_slave_1
[ 3370.706714] protocol 88fb is buggy, dev hsr_slave_0
[ 3370.712206] protocol 88fb is buggy, dev hsr_slave_1
[ 3371.346935] protocol 88fb is buggy, dev hsr_slave_0
[ 3371.352582] protocol 88fb is buggy, dev hsr_slave_1
23:18:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
fcntl$addseals(r0, 0x409, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84800)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000000c0)={0x0, <r4=>0x0, 0x8})
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f00000001c0))
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)={r4})

23:18:15 executing program 4:
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000080)='\x00', 0x1, 0x1)

23:18:15 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000466300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:18:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070")
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x400000000000072, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
r1 = syz_open_dev$adsp(0x0, 0x0, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, 0x0)

23:18:15 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
fsetxattr$security_evm(r0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="029278abc419d668009a88338438065f442d26d28a7b846d2b1e808122d2390a9f8a9f6e2058485e543f99f82f603761a883e5d2233970df8dda3fd4010d1d614ea28f32590241eaf89bc045d386020a91cb10afaf6be0968c784864526778f8a054e0"], 0x1, 0x2)
syz_open_dev$sndseq(0x0, 0x0, 0x100000000000001)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000340)='\x00')
syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x4000041)
r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x8, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000), 0xffd7)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1}, 0x4)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0)
setsockopt(0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000100)=0x2)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xfe)
syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f0000000380)='./file1\x00', 0xfffffffffffff001, 0x2, &(0x7f0000000980)=[{&(0x7f0000000500)="312fffe48aac9c05d475449dba745c590052b4576d3b85ba6ef052f17acd00199ad2ca159a955296e315c2af835ee929aafc59b221558257c70142", 0x3b}, {0x0}], 0x2000, 0x0)

23:18:15 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

[ 3372.763268] f2fs_msg: 54 callbacks suppressed
[ 3372.763285] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3372.826728] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3372.847702] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3372.896192] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3372.898094] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:18:15 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1)
memfd_create(0x0, 0x0)
fallocate(r0, 0x60, 0x10000000000, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

23:18:15 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

[ 3372.945551] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3372.960199] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3372.978000] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:18:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 3373.009138] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:18:15 executing program 4:
r0 = socket(0x20000000010, 0x2, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="39000000130009006900000000000000ab00804803000000447f0107000000141800290073130000006455c4726e0000000400000306000000", 0x39}], 0x1)

[ 3373.108547] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3373.169696] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3373.181456] netlink: 'syz-executor.4': attribute type 41 has an invalid length.
[ 3373.191553] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'.
23:18:15 executing program 4:
r0 = socket(0x20000000010, 0x2, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="39000000130009006900000000000000ab00804803000000447f0107000000141800290073130000006455c4726e0000000400000306000000", 0x39}], 0x1)

23:18:15 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000467300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3373.329549] netlink: 'syz-executor.4': attribute type 41 has an invalid length.
[ 3373.360131] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3374.946656] Bluetooth: hci0: command 0x1003 tx timeout
[ 3374.954236] Bluetooth: hci0: sending frame failed (-49)
[ 3375.506587] net_ratelimit: 22 callbacks suppressed
[ 3375.506594] protocol 88fb is buggy, dev hsr_slave_0
[ 3375.518404] protocol 88fb is buggy, dev hsr_slave_1
[ 3376.146568] protocol 88fb is buggy, dev hsr_slave_0
[ 3376.153316] protocol 88fb is buggy, dev hsr_slave_1
[ 3376.626528] protocol 88fb is buggy, dev hsr_slave_0
[ 3376.632894] protocol 88fb is buggy, dev hsr_slave_1
[ 3376.639512] protocol 88fb is buggy, dev hsr_slave_0
[ 3376.646625] protocol 88fb is buggy, dev hsr_slave_1
[ 3376.653502] protocol 88fb is buggy, dev hsr_slave_0
[ 3376.664035] protocol 88fb is buggy, dev hsr_slave_1
[ 3377.026587] Bluetooth: hci0: command 0x1001 tx timeout
[ 3377.034440] Bluetooth: hci0: sending frame failed (-49)
[ 3379.106665] Bluetooth: hci0: command 0x1009 tx timeout
[ 3380.786491] net_ratelimit: 18 callbacks suppressed
[ 3380.791696] protocol 88fb is buggy, dev hsr_slave_0
[ 3380.796791] protocol 88fb is buggy, dev hsr_slave_1
[ 3380.801979] protocol 88fb is buggy, dev hsr_slave_0
[ 3380.807077] protocol 88fb is buggy, dev hsr_slave_1
[ 3380.812156] protocol 88fb is buggy, dev hsr_slave_0
[ 3380.817299] protocol 88fb is buggy, dev hsr_slave_1
[ 3381.106505] protocol 88fb is buggy, dev hsr_slave_0
[ 3381.111666] protocol 88fb is buggy, dev hsr_slave_1
[ 3381.746482] protocol 88fb is buggy, dev hsr_slave_0
[ 3381.751711] protocol 88fb is buggy, dev hsr_slave_1
23:18:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x6, &(0x7f0000000280)="0adc5d4a3c46cd376f1103d728d105c70f33c394d786511022c69ebac8f5e080695e952edbc1dde441d6987f8eeaff739327651a29597c7851c3b9f317af055deed128a3a3d43a8562529b6e14dd974d0f3ae0943052cbe234d957470c944fa42d2fef665be9ada800000000767d32bcbfa555944a8fa66bf421e5ba5444098e0bf7c200000000000000")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x10000000004)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
ioctl$TIOCSIG(r1, 0x40045436, 0x9)

23:18:25 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1)
memfd_create(0x0, 0x0)
fallocate(r0, 0x60, 0x10000000000, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

23:18:25 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

23:18:25 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)

23:18:25 executing program 4:
r0 = socket(0x20000000010, 0x2, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="39000000130009006900000000000000ab00804803000000447f0107000000141800290073130000006455c4726e0000000400000306000000", 0x39}], 0x1)

23:18:25 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000068300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3382.973698] netlink: 'syz-executor.4': attribute type 41 has an invalid length.
[ 3382.995730] f2fs_msg: 22 callbacks suppressed
[ 3382.995739] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3383.016561] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3383.035267] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3383.048226] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3383.057576] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3383.065904] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:18:25 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1)
memfd_create(0x0, 0x0)
fallocate(r0, 0x60, 0x10000000000, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

23:18:25 executing program 4:
r0 = socket(0x20000000010, 0x2, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="39000000130009006900000000000000ab00804803000000447f0107000000141800290073130000006455c4726e0000000400000306000000", 0x39}], 0x1)

[ 3383.074925] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3383.087732] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3383.110761] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:18:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:18:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8007e, 0x40004402)
ioctl$BLKDISCARD(r1, 0x1277, 0x0)

23:18:25 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1)
memfd_create(0x0, 0x0)
fallocate(r0, 0x60, 0x10000000000, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

23:18:25 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1)
memfd_create(0x0, 0x0)
fallocate(r1, 0x60, 0x10000000000, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

[ 3383.122354] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3383.126213] netlink: 'syz-executor.4': attribute type 41 has an invalid length.
[ 3383.138509] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3383.199861] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3383.223931] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3385.106494] Bluetooth: hci0: command 0x1003 tx timeout
[ 3385.112058] Bluetooth: hci0: sending frame failed (-49)
[ 3385.826432] Bluetooth: hci1: command 0x1003 tx timeout
[ 3385.831917] Bluetooth: hci1: sending frame failed (-49)
[ 3385.906486] net_ratelimit: 22 callbacks suppressed
[ 3385.906492] protocol 88fb is buggy, dev hsr_slave_0
[ 3385.916883] protocol 88fb is buggy, dev hsr_slave_1
[ 3386.546502] protocol 88fb is buggy, dev hsr_slave_0
[ 3386.551664] protocol 88fb is buggy, dev hsr_slave_1
[ 3387.026457] protocol 88fb is buggy, dev hsr_slave_0
[ 3387.031620] protocol 88fb is buggy, dev hsr_slave_1
[ 3387.037196] protocol 88fb is buggy, dev hsr_slave_0
[ 3387.042380] protocol 88fb is buggy, dev hsr_slave_1
[ 3387.048087] protocol 88fb is buggy, dev hsr_slave_0
[ 3387.053437] protocol 88fb is buggy, dev hsr_slave_1
[ 3387.186547] Bluetooth: hci0: command 0x1001 tx timeout
[ 3387.192113] Bluetooth: hci0: sending frame failed (-49)
[ 3387.916530] Bluetooth: hci1: command 0x1001 tx timeout
[ 3387.921995] Bluetooth: hci1: sending frame failed (-49)
[ 3389.266464] Bluetooth: hci0: command 0x1009 tx timeout
[ 3389.986523] Bluetooth: hci1: command 0x1009 tx timeout
[ 3391.186553] net_ratelimit: 18 callbacks suppressed
[ 3391.191581] protocol 88fb is buggy, dev hsr_slave_0
[ 3391.196770] protocol 88fb is buggy, dev hsr_slave_1
[ 3391.201883] protocol 88fb is buggy, dev hsr_slave_0
[ 3391.206962] protocol 88fb is buggy, dev hsr_slave_1
[ 3391.212115] protocol 88fb is buggy, dev hsr_slave_0
[ 3391.217164] protocol 88fb is buggy, dev hsr_slave_1
[ 3391.506554] protocol 88fb is buggy, dev hsr_slave_0
[ 3391.511760] protocol 88fb is buggy, dev hsr_slave_1
[ 3392.146569] protocol 88fb is buggy, dev hsr_slave_0
[ 3392.151859] protocol 88fb is buggy, dev hsr_slave_1
23:18:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400400, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
getrusage(0x1, &(0x7f00000001c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:18:36 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000468300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:18:36 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0)
ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TIOCSSERIAL(r0, 0x541f, 0x0)

23:18:36 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = fcntl$dupfd(r0, 0x0, r0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)

23:18:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070")
unshare(0x2000400)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040))

23:18:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3393.894405] f2fs_msg: 6 callbacks suppressed
[ 3393.894415] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3393.935290] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3393.957582] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3393.975756] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3393.982367] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3393.993611] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3394.004339] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3394.021752] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:18:36 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1)
memfd_create(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x60, 0x10000000000, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

23:18:36 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)

[ 3394.033685] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:18:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:18:36 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1)
memfd_create(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x60, 0x0, 0x4000000000000000)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

[ 3394.112873] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3394.151310] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:18:36 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000000000000000000073e4934e525ed72f39fa52d86cb001a660b858c9290cb69e0843d3ef2d6d8b62dca474c90fdc46718d9161eca35768be58d31dd12cef1a7b45643dcb290665fffc61ff411058dee445bb6cb9e6f2ed4654150e10fd2a2498b4ccf90a89c55b961d7a63fcd00ee1dc6cc8ee347997a18a13fffed554e27246ded459341d4611b853f9af3a69822292594b126a6afaacf21f56447276bc579e250d38ce57d3ee993e27776993258da61c3778fdc476a98a4a52de5556c0aec299a8f4ea882de6b981a09c29c4208cae5d78ad2cef01d1"], 0xdf}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x5}}, 0xe8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @local, 0x4}, 0x1c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0)

23:18:36 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000469300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3395.986455] Bluetooth: hci0: command 0x1003 tx timeout
[ 3395.992025] Bluetooth: hci0: sending frame failed (-49)
[ 3396.306490] net_ratelimit: 22 callbacks suppressed
[ 3396.306500] protocol 88fb is buggy, dev hsr_slave_0
[ 3396.316805] protocol 88fb is buggy, dev hsr_slave_1
[ 3396.946486] protocol 88fb is buggy, dev hsr_slave_0
[ 3396.951637] protocol 88fb is buggy, dev hsr_slave_1
[ 3397.426505] protocol 88fb is buggy, dev hsr_slave_0
[ 3397.431593] protocol 88fb is buggy, dev hsr_slave_1
[ 3397.436766] protocol 88fb is buggy, dev hsr_slave_0
[ 3397.441831] protocol 88fb is buggy, dev hsr_slave_1
[ 3397.447137] protocol 88fb is buggy, dev hsr_slave_0
[ 3397.452218] protocol 88fb is buggy, dev hsr_slave_1
[ 3398.066481] Bluetooth: hci0: command 0x1001 tx timeout
[ 3398.071971] Bluetooth: hci0: sending frame failed (-49)
[ 3400.146469] Bluetooth: hci0: command 0x1009 tx timeout
[ 3401.586521] net_ratelimit: 18 callbacks suppressed
[ 3401.586527] protocol 88fb is buggy, dev hsr_slave_0
[ 3401.596599] protocol 88fb is buggy, dev hsr_slave_1
[ 3401.601699] protocol 88fb is buggy, dev hsr_slave_0
[ 3401.606780] protocol 88fb is buggy, dev hsr_slave_1
[ 3401.611861] protocol 88fb is buggy, dev hsr_slave_0
[ 3401.616995] protocol 88fb is buggy, dev hsr_slave_1
[ 3401.906492] protocol 88fb is buggy, dev hsr_slave_0
[ 3401.911623] protocol 88fb is buggy, dev hsr_slave_1
[ 3402.546550] protocol 88fb is buggy, dev hsr_slave_0
[ 3402.551681] protocol 88fb is buggy, dev hsr_slave_1
23:18:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x4)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000040)='/dev/ptmx\x00', 0xa, 0x1)

23:18:46 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

23:18:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:18:46 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000046a300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:18:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0xffffffffffffffff)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1f, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

23:18:46 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080), 0x10)

[ 3404.164176] f2fs_msg: 22 callbacks suppressed
[ 3404.164192] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:18:46 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[], &(0x7f00000001c0), 0x1000)

[ 3404.224233] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3404.243565] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3404.255157] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3404.267103] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:18:46 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

[ 3404.276220] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3404.293648] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:18:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3404.369323] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:18:47 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8007e, 0x40004402)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000140))

23:18:47 executing program 2:
clone(0xc00000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f319bd070")
r1 = socket$inet6(0x10, 0x80000000003, 0x0)
sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00030000000d000500fe800000e34f040a1a3ad5570800c78b80082314e9030b9d566885b1766732009b84e7b1df136ef75a", 0x55}], 0x1}, 0x0)
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)

23:18:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffff1, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getpgid(0xffffffffffffffff)
sched_setparam(0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x100, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f0000000140)=0x6, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 3404.488604] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3404.517052] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3404.572542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3404.579568] IPv6: NLM_F_CREATE should be set when creating new route
[ 3406.226453] Bluetooth: hci0: command 0x1003 tx timeout
[ 3406.231920] Bluetooth: hci0: sending frame failed (-49)
[ 3406.706480] net_ratelimit: 22 callbacks suppressed
[ 3406.706489] protocol 88fb is buggy, dev hsr_slave_0
[ 3406.716624] protocol 88fb is buggy, dev hsr_slave_1
[ 3407.346510] protocol 88fb is buggy, dev hsr_slave_0
[ 3407.351631] protocol 88fb is buggy, dev hsr_slave_1
[ 3407.826497] protocol 88fb is buggy, dev hsr_slave_0
[ 3407.831615] protocol 88fb is buggy, dev hsr_slave_1
[ 3407.836791] protocol 88fb is buggy, dev hsr_slave_0
[ 3407.841902] protocol 88fb is buggy, dev hsr_slave_1
[ 3407.847391] protocol 88fb is buggy, dev hsr_slave_0
[ 3407.852479] protocol 88fb is buggy, dev hsr_slave_1
[ 3408.306514] Bluetooth: hci0: command 0x1001 tx timeout
[ 3408.311982] Bluetooth: hci0: sending frame failed (-49)
[ 3410.386491] Bluetooth: hci0: command 0x1009 tx timeout
[ 3411.986471] net_ratelimit: 18 callbacks suppressed
[ 3411.986478] protocol 88fb is buggy, dev hsr_slave_0
[ 3411.996590] protocol 88fb is buggy, dev hsr_slave_1
[ 3412.001698] protocol 88fb is buggy, dev hsr_slave_0
[ 3412.006817] protocol 88fb is buggy, dev hsr_slave_1
[ 3412.011935] protocol 88fb is buggy, dev hsr_slave_0
[ 3412.017160] protocol 88fb is buggy, dev hsr_slave_1
[ 3412.306469] protocol 88fb is buggy, dev hsr_slave_0
[ 3412.311618] protocol 88fb is buggy, dev hsr_slave_1
[ 3412.946494] protocol 88fb is buggy, dev hsr_slave_0
[ 3412.951601] protocol 88fb is buggy, dev hsr_slave_1
23:18:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$RTC_WIE_OFF(r1, 0x7010)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xa)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000001c0)={0x9, 0x108, "1b2faa6fb1489e399d984ce12590697484754c18ae802f4d32c161874e880b2f", 0x7682, 0x7, 0x9, 0x7, 0x40})

23:18:56 executing program 0:
recvmsg(0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)

23:18:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:18:56 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000046b300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:18:56 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000240))
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timers\x00')
preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1, 0x46)

23:18:56 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1)
memfd_create(0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

[ 3414.366193] f2fs_msg: 6 callbacks suppressed
[ 3414.366209] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3414.410944] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3414.446863] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3414.461141] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3414.490487] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3414.504438] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:18:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffff1, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getpgid(0xffffffffffffffff)
sched_setparam(0x0, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)

23:18:57 executing program 4:
r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100))

[ 3414.513712] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3414.525431] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3414.538383] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:18:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:18:57 executing program 4:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x1, 0x0)
syz_execute_func(&(0x7f0000000040)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f")
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
shutdown(r1, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
memfd_create(0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
pause()
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x1)

[ 3414.610336] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3414.656082] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:18:57 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000006c300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:18:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3416.466480] Bluetooth: hci0: command 0x1003 tx timeout
[ 3416.471935] Bluetooth: hci0: sending frame failed (-49)
[ 3417.106505] net_ratelimit: 22 callbacks suppressed
[ 3417.106513] protocol 88fb is buggy, dev hsr_slave_0
[ 3417.116642] protocol 88fb is buggy, dev hsr_slave_1
[ 3417.746472] protocol 88fb is buggy, dev hsr_slave_0
[ 3417.751607] protocol 88fb is buggy, dev hsr_slave_1
[ 3418.226486] protocol 88fb is buggy, dev hsr_slave_0
[ 3418.231588] protocol 88fb is buggy, dev hsr_slave_1
[ 3418.236817] protocol 88fb is buggy, dev hsr_slave_0
[ 3418.241917] protocol 88fb is buggy, dev hsr_slave_1
[ 3418.247109] protocol 88fb is buggy, dev hsr_slave_0
[ 3418.252187] protocol 88fb is buggy, dev hsr_slave_1
[ 3418.546502] Bluetooth: hci0: command 0x1001 tx timeout
[ 3418.551995] Bluetooth: hci0: sending frame failed (-49)
[ 3420.626636] Bluetooth: hci0: command 0x1009 tx timeout
[ 3422.386590] net_ratelimit: 18 callbacks suppressed
[ 3422.386596] protocol 88fb is buggy, dev hsr_slave_0
[ 3422.396709] protocol 88fb is buggy, dev hsr_slave_1
[ 3422.401838] protocol 88fb is buggy, dev hsr_slave_0
[ 3422.406992] protocol 88fb is buggy, dev hsr_slave_1
[ 3422.412094] protocol 88fb is buggy, dev hsr_slave_0
[ 3422.417237] protocol 88fb is buggy, dev hsr_slave_1
[ 3422.706484] protocol 88fb is buggy, dev hsr_slave_0
[ 3422.711575] protocol 88fb is buggy, dev hsr_slave_1
[ 3423.346517] protocol 88fb is buggy, dev hsr_slave_0
[ 3423.351615] protocol 88fb is buggy, dev hsr_slave_1
23:19:07 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000300)={0x6, 0x8, 0xc6e, 0x0, 0x19, 0x3, 0xc934, 0x0, 0x4450, 0x4})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x200000000f)
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3f, 0x800)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))
r4 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x1, 0x40)
read$alg(r3, &(0x7f00000001c0)=""/241, 0xf1)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000000001b000000000000000000000000000000000000000000001b000000000000"])

23:19:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3904000000200000000009000000280003000800010001000000080003000000000014000200636169663000"/54], 0x1}}, 0x0)

23:19:07 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4100000000000003, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

23:19:07 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000046c300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r0 = getpgid(0xffffffffffffffff)
sched_setparam(r0, &(0x7f0000000000))
openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x100, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f00000001c0))
shmctl$IPC_RMID(0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1f, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)

23:19:07 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
socketpair(0x9, 0x0, 0x0, 0x0)

[ 3424.625922] f2fs_msg: 22 callbacks suppressed
[ 3424.625951] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3424.676777] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3424.700884] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3424.724620] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3424.737280] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3424.754410] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3424.763470] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:19:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:07 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0)

[ 3424.778455] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:19:07 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1)
memfd_create(0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x307, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)

23:19:07 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCSBRK(r0, 0x5427)

[ 3424.848480] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3424.890129] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:19:07 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000046d300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3426.706480] Bluetooth: hci0: command 0x1003 tx timeout
[ 3426.711951] Bluetooth: hci0: sending frame failed (-49)
[ 3427.426500] Bluetooth: hci1: command 0x1003 tx timeout
[ 3427.431939] Bluetooth: hci1: sending frame failed (-49)
[ 3427.506522] net_ratelimit: 22 callbacks suppressed
[ 3427.506530] protocol 88fb is buggy, dev hsr_slave_0
[ 3427.516689] protocol 88fb is buggy, dev hsr_slave_1
[ 3428.146467] protocol 88fb is buggy, dev hsr_slave_0
[ 3428.151599] protocol 88fb is buggy, dev hsr_slave_1
[ 3428.626472] protocol 88fb is buggy, dev hsr_slave_0
[ 3428.631569] protocol 88fb is buggy, dev hsr_slave_1
[ 3428.636758] protocol 88fb is buggy, dev hsr_slave_0
[ 3428.641819] protocol 88fb is buggy, dev hsr_slave_1
[ 3428.647001] protocol 88fb is buggy, dev hsr_slave_0
[ 3428.652103] protocol 88fb is buggy, dev hsr_slave_1
[ 3428.786539] Bluetooth: hci0: command 0x1001 tx timeout
[ 3428.791988] Bluetooth: hci0: sending frame failed (-49)
[ 3429.506500] Bluetooth: hci1: command 0x1001 tx timeout
[ 3429.511983] Bluetooth: hci1: sending frame failed (-49)
[ 3430.866499] Bluetooth: hci0: command 0x1009 tx timeout
[ 3431.586508] Bluetooth: hci1: command 0x1009 tx timeout
[ 3432.786465] net_ratelimit: 18 callbacks suppressed
[ 3432.791474] protocol 88fb is buggy, dev hsr_slave_0
[ 3432.796556] protocol 88fb is buggy, dev hsr_slave_1
[ 3432.801689] protocol 88fb is buggy, dev hsr_slave_0
[ 3432.806763] protocol 88fb is buggy, dev hsr_slave_1
[ 3432.811845] protocol 88fb is buggy, dev hsr_slave_0
[ 3432.816906] protocol 88fb is buggy, dev hsr_slave_1
[ 3433.106469] protocol 88fb is buggy, dev hsr_slave_0
[ 3433.111565] protocol 88fb is buggy, dev hsr_slave_1
[ 3433.746490] protocol 88fb is buggy, dev hsr_slave_0
[ 3433.752780] protocol 88fb is buggy, dev hsr_slave_1
23:19:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84800)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x82)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x10, 0x1, 0x1, r2})
r3 = fcntl$dupfd(r0, 0x406, r0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x12)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r4, 0x400455c8, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080))

23:19:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:18 executing program 2:
semget$private(0x0, 0x4, 0x623)

23:19:18 executing program 0:
r0 = creat(&(0x7f0000000800)='./file0\x00', 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$TIOCGISO7816(r0, 0x80285442, 0x0)

23:19:18 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000046e300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netstat\x00')
close(r1)

23:19:18 executing program 2:
listxattr(0x0, 0x0, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
sendto$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x40, 0x0, 0x0)

[ 3435.498168] f2fs_msg: 22 callbacks suppressed
[ 3435.498181] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3435.533715] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3435.548157] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3435.594755] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:19:18 executing program 4:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x80000000, 0x6526, 0x8, 0x80000001, 0x0, 0x80000001, 0x2, 0x4, 0x7, 0xfffffffffffff801, 0x80000000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x5, 0x80000000, 0x1, 0xa1, 0x7, 0x618, 0x8, 0x4, 0x4, 0x5, 0x6, 0x1000000000000, 0x0, 0x0, 0x3f, 0x0, 0xffffffffffffffd7, 0x6, 0x0, 0x80000000, 0x0, 0xac6, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1)
fstatfs(r0, &(0x7f00000000c0)=""/31)
r1 = creat(&(0x7f0000000800)='./file0\x00', 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'vxcan1\x00'})

23:19:18 executing program 0:
r0 = socket$inet6(0xa, 0x40000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c)

[ 3435.642193] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3435.673343] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:19:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
lseek(r0, 0x0, 0x4)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, 0x8, {0x7, 0x1d, 0x10001, 0x140004, 0x20, 0x3f, 0x4, 0x3}}, 0x50)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x9, &(0x7f0000000140)="0adc1f0300000000000000")
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x10000000000f)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0)

[ 3435.689594] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:19:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:18 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x4058534c, &(0x7f0000000000)={{0x80}, {}, 0x0, 0x2})

[ 3435.737050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:19:18 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/11, 0xb)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x2102201ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000140)={0x77359400}, 0x10)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)

23:19:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1ff, 0x280000)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x0, 0x0, 0x14})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

[ 3435.844751] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3435.894476] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:19:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @pic={0x0, 0x7, 0x0, 0x0, 0x3}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x0, 0x0, 0xffffffffffffffae}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x0, 0x3})

23:19:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:18 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000074300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x16, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0)

23:19:18 executing program 2:
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x2, 0x0, 0x100000001, 0x100000001})

23:19:18 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000000000007a300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:18 executing program 4:
fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffff9c, 0x1, 0x1, 0x0, 0x380)

23:19:19 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000080300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:19 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
sendto$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80, 0x0, 0x0)

23:19:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f00000001c0)='m', 0x1)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(0x0, 0x39)
fcntl$setstatus(r2, 0x4, 0x42803)

[ 3437.906468] net_ratelimit: 22 callbacks suppressed
[ 3437.906475] protocol 88fb is buggy, dev hsr_slave_0
[ 3437.916623] protocol 88fb is buggy, dev hsr_slave_1
[ 3438.066463] Bluetooth: hci0: command 0x1003 tx timeout
[ 3438.071936] Bluetooth: hci0: sending frame failed (-49)
[ 3438.546483] protocol 88fb is buggy, dev hsr_slave_0
[ 3438.551655] protocol 88fb is buggy, dev hsr_slave_1
[ 3438.876472] Bluetooth: hci1: command 0x1003 tx timeout
[ 3438.881950] Bluetooth: hci1: sending frame failed (-49)
[ 3439.026440] protocol 88fb is buggy, dev hsr_slave_0
[ 3439.031571] protocol 88fb is buggy, dev hsr_slave_1
[ 3439.036771] protocol 88fb is buggy, dev hsr_slave_0
[ 3439.041832] protocol 88fb is buggy, dev hsr_slave_1
[ 3439.047015] protocol 88fb is buggy, dev hsr_slave_0
[ 3439.052106] protocol 88fb is buggy, dev hsr_slave_1
[ 3440.146517] Bluetooth: hci0: command 0x1001 tx timeout
[ 3440.151963] Bluetooth: hci0: sending frame failed (-49)
[ 3440.946549] Bluetooth: hci1: command 0x1001 tx timeout
[ 3440.952016] Bluetooth: hci1: sending frame failed (-49)
[ 3442.226510] Bluetooth: hci0: command 0x1009 tx timeout
[ 3443.026548] Bluetooth: hci1: command 0x1009 tx timeout
[ 3443.186504] net_ratelimit: 18 callbacks suppressed
[ 3443.186510] protocol 88fb is buggy, dev hsr_slave_0
[ 3443.196652] protocol 88fb is buggy, dev hsr_slave_1
[ 3443.201778] protocol 88fb is buggy, dev hsr_slave_0
[ 3443.206939] protocol 88fb is buggy, dev hsr_slave_1
[ 3443.212052] protocol 88fb is buggy, dev hsr_slave_0
[ 3443.217218] protocol 88fb is buggy, dev hsr_slave_1
[ 3443.506507] protocol 88fb is buggy, dev hsr_slave_0
[ 3443.511682] protocol 88fb is buggy, dev hsr_slave_1
[ 3444.146571] protocol 88fb is buggy, dev hsr_slave_0
[ 3444.151785] protocol 88fb is buggy, dev hsr_slave_1
23:19:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = dup2(r0, r0)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:19:29 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000ffffff8c300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:29 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
r1 = gettid()
fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)
clone(0x2000000000003ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
unshare(0x40000400)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8080)
ftruncate(r0, 0x0)

23:19:29 executing program 2:
setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12}, 0x2f7)

23:19:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3446.996558] f2fs_msg: 46 callbacks suppressed
[ 3446.996570] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3447.032953] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:19:29 executing program 2:
r0 = socket(0xa, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), 0x0}}], 0x58}, 0x20000010)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18)

[ 3447.075178] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3447.101433] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3447.125575] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3447.133615] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3447.142024] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3447.151570] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:19:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:29 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0), 0x1000)

23:19:29 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x8806)
fdatasync(0xffffffffffffff9c)
r1 = socket$inet6(0xa, 0x3, 0xb8d)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES16=r2], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00')
fcntl$setstatus(r3, 0x4, 0x4800)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x107fe)
mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040))
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r4, 0x6)
setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
connect$netlink(r3, &(0x7f00000001c0)=@unspec, 0xc)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000440)={'bcsh0\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="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"]})
r6 = accept(r4, 0x0, &(0x7f0000000080)=0xfe0f)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
read(r1, &(0x7f00000007c0)=""/144, 0x206)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4)
setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000300)={0x0, 0x2710}, 0x40)
syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000)
inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x9)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffd45)
sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc)
sendmmsg(r3, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0)

[ 3447.242920] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3447.278799] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:19:29 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000fffffff5300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c1241319bd070")
syz_open_procfs(0x0, 0x0)

[ 3448.306512] net_ratelimit: 22 callbacks suppressed
[ 3448.306521] protocol 88fb is buggy, dev hsr_slave_0
[ 3448.316669] protocol 88fb is buggy, dev hsr_slave_1
[ 3448.946502] protocol 88fb is buggy, dev hsr_slave_0
[ 3448.951634] protocol 88fb is buggy, dev hsr_slave_1
[ 3449.106461] Bluetooth: hci0: command 0x1003 tx timeout
[ 3449.111868] Bluetooth: hci0: sending frame failed (-49)
[ 3449.426503] protocol 88fb is buggy, dev hsr_slave_0
[ 3449.431677] protocol 88fb is buggy, dev hsr_slave_1
[ 3449.436918] protocol 88fb is buggy, dev hsr_slave_0
[ 3449.441998] protocol 88fb is buggy, dev hsr_slave_1
[ 3449.447185] protocol 88fb is buggy, dev hsr_slave_0
[ 3449.452271] protocol 88fb is buggy, dev hsr_slave_1
[ 3449.906449] Bluetooth: hci1: command 0x1003 tx timeout
[ 3449.912919] Bluetooth: hci1: sending frame failed (-49)
[ 3451.186511] Bluetooth: hci0: command 0x1001 tx timeout
[ 3451.191967] Bluetooth: hci0: sending frame failed (-49)
[ 3451.986483] Bluetooth: hci1: command 0x1001 tx timeout
[ 3451.991978] Bluetooth: hci1: sending frame failed (-49)
[ 3453.266494] Bluetooth: hci0: command 0x1009 tx timeout
[ 3453.586491] net_ratelimit: 18 callbacks suppressed
[ 3453.591531] protocol 88fb is buggy, dev hsr_slave_0
[ 3453.596653] protocol 88fb is buggy, dev hsr_slave_1
[ 3453.601798] protocol 88fb is buggy, dev hsr_slave_0
[ 3453.606886] protocol 88fb is buggy, dev hsr_slave_1
[ 3453.611983] protocol 88fb is buggy, dev hsr_slave_0
[ 3453.617045] protocol 88fb is buggy, dev hsr_slave_1
[ 3453.906493] protocol 88fb is buggy, dev hsr_slave_0
[ 3453.911598] protocol 88fb is buggy, dev hsr_slave_1
[ 3454.066501] Bluetooth: hci1: command 0x1009 tx timeout
[ 3454.546518] protocol 88fb is buggy, dev hsr_slave_0
[ 3454.551656] protocol 88fb is buggy, dev hsr_slave_1
23:19:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="7261770000000000000000001a0000000000000000000000000000000000000036010400631366706ff785591449b1c6d9f808944851d8ca4d08e1a33cb0681b109187c51610d93f70003160a0454f358321bc1194b4de1f4485"], &(0x7f0000000140)=0x1)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e21, @local}})
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x40, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000280))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:19:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
setrlimit(0x7, &(0x7f0000000000))
inotify_init1(0x0)

23:19:41 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
getpgid(0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x100, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)

23:19:41 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000fffffff6300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:41 executing program 2:
creat(0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000400)=@sha1={0x1, "0f1acf8ec068cfb23cdbb2867d03253e6ac620c3"}, 0x15, 0x3)

[ 3458.536975] f2fs_msg: 22 callbacks suppressed
[ 3458.536994] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3458.574422] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3458.606494] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3458.614301] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3458.633483] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3458.653622] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3458.676723] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3458.692584] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
23:19:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:41 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x400}, 0x28, 0x2)

23:19:41 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd}}, 0xe8)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0)

[ 3458.706475] net_ratelimit: 22 callbacks suppressed
[ 3458.706483] protocol 88fb is buggy, dev hsr_slave_0
[ 3458.716771] protocol 88fb is buggy, dev hsr_slave_1
[ 3458.733446] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3458.793000] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3458.816618] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:19:41 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000001fe300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:41 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000002300)=ANY=[@ANYBLOB="9feb010018001b"], 0x0, 0x7}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x230020, 0x1000, 0x1}, 0x20)

23:19:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3459.346484] protocol 88fb is buggy, dev hsr_slave_0
[ 3459.351894] protocol 88fb is buggy, dev hsr_slave_1
[ 3459.836458] protocol 88fb is buggy, dev hsr_slave_0
[ 3459.841761] protocol 88fb is buggy, dev hsr_slave_1
[ 3459.846962] protocol 88fb is buggy, dev hsr_slave_0
[ 3459.852045] protocol 88fb is buggy, dev hsr_slave_1
[ 3459.857343] protocol 88fb is buggy, dev hsr_slave_0
[ 3459.862442] protocol 88fb is buggy, dev hsr_slave_1
[ 3460.706441] Bluetooth: hci0: command 0x1003 tx timeout
[ 3460.711926] Bluetooth: hci0: sending frame failed (-49)
[ 3461.436494] Bluetooth: hci1: command 0x1003 tx timeout
[ 3461.441952] Bluetooth: hci1: sending frame failed (-49)
[ 3462.786492] Bluetooth: hci0: command 0x1001 tx timeout
[ 3462.791922] Bluetooth: hci0: sending frame failed (-49)
[ 3463.506535] Bluetooth: hci1: command 0x1001 tx timeout
[ 3463.511975] Bluetooth: hci1: sending frame failed (-49)
[ 3463.986477] net_ratelimit: 18 callbacks suppressed
[ 3463.991474] protocol 88fb is buggy, dev hsr_slave_0
[ 3463.996579] protocol 88fb is buggy, dev hsr_slave_1
[ 3464.001738] protocol 88fb is buggy, dev hsr_slave_0
[ 3464.006798] protocol 88fb is buggy, dev hsr_slave_1
[ 3464.011875] protocol 88fb is buggy, dev hsr_slave_0
[ 3464.017054] protocol 88fb is buggy, dev hsr_slave_1
[ 3464.306459] protocol 88fb is buggy, dev hsr_slave_0
[ 3464.311552] protocol 88fb is buggy, dev hsr_slave_1
[ 3464.866523] Bluetooth: hci0: command 0x1009 tx timeout
[ 3464.946510] protocol 88fb is buggy, dev hsr_slave_0
[ 3464.951632] protocol 88fb is buggy, dev hsr_slave_1
[ 3465.586616] Bluetooth: hci1: command 0x1009 tx timeout
[ 3469.106526] net_ratelimit: 22 callbacks suppressed
[ 3469.111538] protocol 88fb is buggy, dev hsr_slave_0
[ 3469.116601] protocol 88fb is buggy, dev hsr_slave_1
[ 3469.746518] protocol 88fb is buggy, dev hsr_slave_0
[ 3469.751686] protocol 88fb is buggy, dev hsr_slave_1
23:19:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x20000)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x800000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend='noextend'}, {@privport='privport'}, {@loose='loose'}, {@nodevmap='nodevmap'}, {@privport='privport'}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@afid={'afid', 0x3d, 0x400}}], [{@subj_user={'subj_user', 0x3d, '\')'}}, {@uid_eq={'uid', 0x3d, r2}}]}})
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=<r3=>0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000400)=r3)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r4, 0x400455c8, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080))

23:19:52 executing program 4:
creat(0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000003fc0)={0x0, 0x1c9c380})

23:19:52 executing program 0:
open(0x0, 0x0, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00')
socket(0xa, 0xb, 0x9)
preadv(r1, &(0x7f00000017c0), 0x1d0, 0x1f000000)
dup(0xffffffffffffff9c)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000200)=""/43, 0x2b}, {0x0}], 0x3, 0x0)
flock(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180), 0xfffffd50)
getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000040))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

23:19:52 executing program 2:
sched_setparam(0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)

23:19:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:52 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000fff300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3470.076953] f2fs_msg: 22 callbacks suppressed
[ 3470.076971] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:19:52 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)

23:19:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140), 0x4)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x40000, 0x0)
getpeername$netrom(r3, &(0x7f00000001c0)={{0x3, @default}, [@netrom, @netrom, @rose, @rose, @bcast, @remote, @bcast, @bcast]}, &(0x7f0000000040)=0x48)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

[ 3470.163981] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:19:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3470.210430] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3470.226466] protocol 88fb is buggy, dev hsr_slave_0
[ 3470.231650] protocol 88fb is buggy, dev hsr_slave_1
[ 3470.236931] protocol 88fb is buggy, dev hsr_slave_0
[ 3470.242043] protocol 88fb is buggy, dev hsr_slave_1
[ 3470.247275] protocol 88fb is buggy, dev hsr_slave_0
[ 3470.252404] protocol 88fb is buggy, dev hsr_slave_1
[ 3470.280826] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3470.295263] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3470.305496] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3470.316512] F2FS-fs (loop5): Wrong CP boundary, start(1024) end(2048) blocks(512)
[ 3470.324345] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:19:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0))

23:19:53 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x79)

[ 3470.420854] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3470.456326] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:19:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffff1, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sched_setparam(0x0, &(0x7f0000000000)=0x100000000)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x100, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000200)=""/209)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x40, 0x4})
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f00000001c0)={0x8001, 0x0, 0x0, 0x3ff})
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)

23:19:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

23:19:53 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000001fffff300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:53 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x800)

23:19:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x10000)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x29, 0x101000)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400, 0x0)
setsockopt$rose(r3, 0x104, 0x6, &(0x7f0000000040)=0x4, 0x4)

23:19:53 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400000, 0x20)

23:19:53 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000000007fffffff300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:53 executing program 2:
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x0, 0x0)
r0 = creat(&(0x7f0000000800)='./file0\x00', 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0)

23:19:53 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x800, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000002c0)=0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000000)=0xf1ee)
r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000200)={0x0, 0xfff, 0x4, 0x3, 0xffff, 0x3})
r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x400, 0x40080)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:19:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

23:19:53 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000003000)={0x0, 0x0, 0x2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000003000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in=@multicast2}}, 0xe8)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90)

23:19:53 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000ffffffff300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:53 executing program 0:
openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)

23:19:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x16, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0)

23:19:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

23:19:53 executing program 2:
r0 = epoll_create1(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280))

23:19:53 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002ffffffffffffffff300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:19:53 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TIOCGDEV(r0, 0x80045432, 0x0)

23:19:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:19:54 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000000a0000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3473.116495] Bluetooth: hci0: command 0x1003 tx timeout
[ 3473.121922] Bluetooth: hci0: sending frame failed (-49)
[ 3474.386502] net_ratelimit: 18 callbacks suppressed
[ 3474.391519] protocol 88fb is buggy, dev hsr_slave_0
[ 3474.396615] protocol 88fb is buggy, dev hsr_slave_1
[ 3474.401759] protocol 88fb is buggy, dev hsr_slave_0
[ 3474.406895] protocol 88fb is buggy, dev hsr_slave_1
[ 3474.412064] protocol 88fb is buggy, dev hsr_slave_0
[ 3474.417154] protocol 88fb is buggy, dev hsr_slave_1
[ 3474.706466] protocol 88fb is buggy, dev hsr_slave_0
[ 3474.711577] protocol 88fb is buggy, dev hsr_slave_1
[ 3475.186420] Bluetooth: hci0: command 0x1001 tx timeout
[ 3475.192038] Bluetooth: hci0: sending frame failed (-49)
[ 3475.346516] protocol 88fb is buggy, dev hsr_slave_0
[ 3475.351667] protocol 88fb is buggy, dev hsr_slave_1
[ 3477.266458] Bluetooth: hci0: command 0x1009 tx timeout
[ 3479.506524] net_ratelimit: 22 callbacks suppressed
[ 3479.511538] protocol 88fb is buggy, dev hsr_slave_0
[ 3479.516675] protocol 88fb is buggy, dev hsr_slave_1
[ 3480.146442] protocol 88fb is buggy, dev hsr_slave_0
[ 3480.151527] protocol 88fb is buggy, dev hsr_slave_1
[ 3480.628764] protocol 88fb is buggy, dev hsr_slave_0
[ 3480.633887] protocol 88fb is buggy, dev hsr_slave_1
[ 3480.639145] protocol 88fb is buggy, dev hsr_slave_0
[ 3480.644231] protocol 88fb is buggy, dev hsr_slave_1
[ 3480.649430] protocol 88fb is buggy, dev hsr_slave_0
[ 3480.654580] protocol 88fb is buggy, dev hsr_slave_1
23:20:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x1)

23:20:04 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)

23:20:04 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x8}, 0x0, 0x1400)

23:20:04 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x0, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
geteuid()
ioprio_get$uid(0x140000000000000, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
getpgrp(0xffffffffffffffff)
write$FUSE_LK(r3, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
clone(0x2000000000003ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
unshare(0x40000400)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x8080)
ftruncate(r0, 0x0)

23:20:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:20:04 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000200000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3481.572150] f2fs_msg: 78 callbacks suppressed
[ 3481.572163] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3481.630350] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3481.646633] F2FS-fs (loop5): Wrong segment_count / block_count (22 > 8192)
[ 3481.665932] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3481.691317] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3481.745507] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:20:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:20:04 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x40004402)
ioctl$BLKDISCARD(r1, 0x1277, 0x0)

23:20:04 executing program 2:
open$dir(0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000200)=@dstopts, 0x8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
geteuid()
setfsuid(0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4)
tgkill(0x0, 0x0, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3}, 0x1c}}, 0x0)
setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0)
ftruncate(r2, 0x7fff)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

[ 3481.785837] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3481.857775] F2FS-fs (loop5): Wrong segment_count / block_count (22 > 8192)
23:20:04 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0)

[ 3481.929890] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3481.965873] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3481.982709] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:20:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:20:04 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000230000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3483.666722] Bluetooth: hci0: command 0x1003 tx timeout
[ 3483.673404] Bluetooth: hci0: sending frame failed (-49)
[ 3484.466492] Bluetooth: hci1: command 0x1003 tx timeout
[ 3484.471954] Bluetooth: hci1: sending frame failed (-49)
[ 3484.786484] net_ratelimit: 18 callbacks suppressed
[ 3484.786491] protocol 88fb is buggy, dev hsr_slave_0
[ 3484.796629] protocol 88fb is buggy, dev hsr_slave_1
[ 3484.801879] protocol 88fb is buggy, dev hsr_slave_0
[ 3484.807048] protocol 88fb is buggy, dev hsr_slave_1
[ 3484.812177] protocol 88fb is buggy, dev hsr_slave_0
[ 3484.817373] protocol 88fb is buggy, dev hsr_slave_1
[ 3485.106473] protocol 88fb is buggy, dev hsr_slave_0
[ 3485.111628] protocol 88fb is buggy, dev hsr_slave_1
[ 3485.746588] protocol 88fb is buggy, dev hsr_slave_0
[ 3485.751768] protocol 88fb is buggy, dev hsr_slave_1
[ 3485.757015] Bluetooth: hci0: command 0x1001 tx timeout
[ 3485.762404] Bluetooth: hci0: sending frame failed (-49)
[ 3486.546539] Bluetooth: hci1: command 0x1001 tx timeout
[ 3486.552003] Bluetooth: hci1: sending frame failed (-49)
[ 3487.826488] Bluetooth: hci0: command 0x1009 tx timeout
[ 3488.626496] Bluetooth: hci1: command 0x1009 tx timeout
[ 3489.906530] net_ratelimit: 22 callbacks suppressed
[ 3489.911533] protocol 88fb is buggy, dev hsr_slave_0
[ 3489.916647] protocol 88fb is buggy, dev hsr_slave_1
[ 3490.546481] protocol 88fb is buggy, dev hsr_slave_0
[ 3490.551575] protocol 88fb is buggy, dev hsr_slave_1
[ 3491.026445] protocol 88fb is buggy, dev hsr_slave_0
[ 3491.031574] protocol 88fb is buggy, dev hsr_slave_1
[ 3491.036745] protocol 88fb is buggy, dev hsr_slave_0
[ 3491.041805] protocol 88fb is buggy, dev hsr_slave_1
[ 3491.046990] protocol 88fb is buggy, dev hsr_slave_0
[ 3491.052082] protocol 88fb is buggy, dev hsr_slave_1
23:20:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x81, 0x8, &(0x7f0000001480)=[{&(0x7f00000001c0)="0b8fca011f76cf7523ad13416fa2dde5736f21d80d382e603687f5fff50ba7349e9ec93223fa1ebba5810ebb8d6a37e7ffa38314e532102fd24f351a77326d93747c575bd958662ed0e711e74dc86eaba37de55bd2142a00f3590fb6cdfd46748cf7", 0x62, 0xffffffffffffff81}, {&(0x7f0000000240)="7c4bbc04e9198922b063622020b17778249836388ea02b09dd73f553be7c54ec8cc1774f96e8dd394e838f406d47fc9711d51f53d4eec3fc7e182504f70ce1c91a41701a2494f3a4c834c100f63c39c437ac31872a523ea4b1e6140a290f5362acfb", 0x62, 0x4}, {&(0x7f00000002c0)="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", 0x1000, 0x4}, {&(0x7f00000000c0)="fd9aba30b84667d4e0b36aab6da95617ac7b2bf110b77ca1", 0x18}, {&(0x7f00000012c0)="241e5864f0c35c60cce79325430555a32163018ae73aa9e50aaff99cb08b3170f3ae815b7bdae68747b7cc981706f2b2d7f3cdba87a66b4fe549a9ea2e09f6aefc5487102c4d7ccb68fc4671008c569f4bdf3f8c12dce4b9a196e93ead13f68978752439fae6142a246168e9fea6bd057eed134b0ac215d0d2b2f70b4771763e53730e4aa36d8fc91d5b790364dac4a3b222b34a167cc54fcb18d0b0a1f0d2747e3dc8a7417080d2de1308651eddbe442d2d1be9f63114ce0c52570b6cac31ed559ac099a3fafd7b9f7629bb966c30918f474962846fb4db063160b12edf732391f9629b", 0xe4, 0x7}, {&(0x7f00000013c0)="77bad10289881f962290d40c62801cf9c663a154847e2d99f8be5292b69f40e75f28d36be08f6e2d081bae4946578eb8d727187d1ee1c9a2e9a76d6b863779ccd1ccdfe939be87f5029c20674619a51f41800a584cd4c0480b299d6df6a57561d3c6126dade5595f73c88076730edaf422319d008134e8820a66c2e67eaf69", 0x7f, 0x7f}, {&(0x7f0000000140)="4cbd981fa53c978f13380c9ab9a17f5b5c98387ce13b0a35007a9bdb", 0x1c, 0x7e0a}, {&(0x7f0000001440)="2902ec3be1e51c652465a5c58a7c9118825bb80e254735b3892703583ccb80a7dab5de70f75880522012f83af1433ce7a264", 0x32, 0x4}], 0x104800, &(0x7f0000001540)='/dev/ptmx\x00')
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:20:15 executing program 4:
syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x9}, 0x0, 0x0, 0x0, 0x0)

23:20:15 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000250000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:20:15 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd)
mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000080)='\x00\x00\x00\x7f\xff\xff\xff\x00\x05ek\x00')

23:20:15 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U-', 0xebc8}, 0x28, 0x3)

23:20:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:20:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffff1, &(0x7f00000001c0))
r0 = getpgid(0xffffffffffffffff)
sched_setparam(r0, &(0x7f0000000000)=0x100000000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x100, 0x0)
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000200)=""/209)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f00000001c0)={0x8001, 0x0, 0x0, 0x3ff})
shmctl$IPC_RMID(0x0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000140)=0x6, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)

[ 3493.105782] f2fs_msg: 22 callbacks suppressed
[ 3493.105797] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3493.165755] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3493.183744] F2FS-fs (loop5): Wrong segment_count / block_count (22 > 9472)
23:20:15 executing program 0:
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='fusectl\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x16, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000200)=0x1e)

23:20:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x100, 0x0)
write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1d, 0x7, 0x100000, 0x40, 0xffffffffffff8001, 0x7, 0x800}}, 0x50)

[ 3493.208831] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3493.236772] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:20:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3493.265936] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:20:15 executing program 2:
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
close(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
read(r1, &(0x7f00000002c0)=""/11, 0xb)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280))
clone(0x3102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r0, r2)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)

[ 3493.317445] F2FS-fs (loop5): Wrong segment_count / block_count (22 > 9472)
[ 3493.340903] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:20:16 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x1400)

23:20:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x7)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 3493.423385] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3493.431665] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:20:16 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002b0000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:20:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:20:16 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgid(0xffffffffffffffff)
sched_setparam(0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)

23:20:16 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00000009000000010000000200000000000000002d0000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:20:16 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x4058534c, &(0x7f0000000000)={{0x80}, {}, 0x0, 0x4, 0x4000000000000005})

23:20:16 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

23:20:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3494.104486] Bluetooth: hci1: Frame reassembly failed (-84)
[ 3495.186448] net_ratelimit: 18 callbacks suppressed
[ 3495.186457] protocol 88fb is buggy, dev hsr_slave_0
[ 3495.196654] protocol 88fb is buggy, dev hsr_slave_1
[ 3495.201801] protocol 88fb is buggy, dev hsr_slave_0
[ 3495.206898] protocol 88fb is buggy, dev hsr_slave_1
[ 3495.211991] protocol 88fb is buggy, dev hsr_slave_0
[ 3495.217064] protocol 88fb is buggy, dev hsr_slave_1
[ 3495.346448] Bluetooth: hci0: command 0x1003 tx timeout
[ 3495.351962] Bluetooth: hci0: sending frame failed (-49)
[ 3495.506474] protocol 88fb is buggy, dev hsr_slave_0
[ 3495.511639] protocol 88fb is buggy, dev hsr_slave_1
[ 3496.146520] protocol 88fb is buggy, dev hsr_slave_0
[ 3496.151663] protocol 88fb is buggy, dev hsr_slave_1
[ 3496.156928] Bluetooth: hci1: command 0x1003 tx timeout
[ 3496.162316] Bluetooth: hci1: sending frame failed (-49)
[ 3497.426582] Bluetooth: hci0: command 0x1001 tx timeout
[ 3497.432051] Bluetooth: hci0: sending frame failed (-49)
[ 3498.226508] Bluetooth: hci1: command 0x1001 tx timeout
[ 3498.232021] Bluetooth: hci1: sending frame failed (-49)
[ 3499.506484] Bluetooth: hci0: command 0x1009 tx timeout
[ 3500.306555] net_ratelimit: 22 callbacks suppressed
[ 3500.311564] protocol 88fb is buggy, dev hsr_slave_0
[ 3500.316688] protocol 88fb is buggy, dev hsr_slave_1
[ 3500.321928] Bluetooth: hci1: command 0x1009 tx timeout
[ 3500.946511] protocol 88fb is buggy, dev hsr_slave_0
[ 3500.951693] protocol 88fb is buggy, dev hsr_slave_1
[ 3501.426587] protocol 88fb is buggy, dev hsr_slave_0
[ 3501.431757] protocol 88fb is buggy, dev hsr_slave_1
[ 3501.436966] protocol 88fb is buggy, dev hsr_slave_0
[ 3501.442043] protocol 88fb is buggy, dev hsr_slave_1
[ 3501.447169] protocol 88fb is buggy, dev hsr_slave_0
[ 3501.452413] protocol 88fb is buggy, dev hsr_slave_1
23:20:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
nanosleep(&(0x7f0000000080)={r1, r2+10000000}, &(0x7f0000000140))
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$KDADDIO(r3, 0x400455c8, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xb)

23:20:27 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020002000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:20:27 executing program 0:

23:20:27 executing program 4:

23:20:27 executing program 2:

23:20:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:20:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100000000f8fffff0000000f1000030c009000000f314081761a8754d2c12cdaf86aa35584223e7de812071eda9c57f2355a0afa644d48a7ef37dbdaadaa67dadd3d85e"], 0x0)

23:20:27 executing program 4:
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x100, @loopback}, 0xffffffffffffff32)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000000100)={'U+', 0x572}, 0x28, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000000c0), 0x235)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
open(0x0, 0x0, 0x0)
tkill(0x0, 0x39)
fcntl$setstatus(r1, 0x4, 0x42803)

23:20:27 executing program 2:
openat$cgroup_int(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.sched_load_balance\x00', 0x2, 0x0)

[ 3504.626725] f2fs_msg: 38 callbacks suppressed
[ 3504.626738] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:20:27 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e22, 0x2, @local, 0x8}, {0xa, 0x4e22, 0x4, @remote, 0x1000}, 0x5, [0x4, 0x80, 0x5, 0x80000001, 0x0, 0xef39, 0x1f, 0x7]}, 0x5c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000040)="7adbe64a8cf3eb280a3ff7b5d9989f14e169de3f54f285bb9f31556e426663483d136ebc092cfea85e97021e31b4a1a3155f6cab9c2c833d59", {0x8, 0x80000000, 0x33524742, 0x3, 0x1, 0x1000, 0xf, 0xdd3}})
ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x1b, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, 0x1c)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$RTC_PIE_OFF(r0, 0x7006)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

[ 3504.696497] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:20:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3504.774370] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (131074, 14)
23:20:27 executing program 2:

[ 3504.861440] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3504.887346] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:20:27 executing program 0:

[ 3504.912943] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3504.946821] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (131074, 14)
[ 3504.973115] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3505.054744] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3505.092080] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:20:27 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020003000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:20:27 executing program 2:

23:20:27 executing program 0:

23:20:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:20:27 executing program 2:

23:20:27 executing program 0:

23:20:27 executing program 4:

23:20:27 executing program 2:

[ 3505.586575] net_ratelimit: 18 callbacks suppressed
[ 3505.586582] protocol 88fb is buggy, dev hsr_slave_0
[ 3505.596814] protocol 88fb is buggy, dev hsr_slave_1
[ 3505.602070] protocol 88fb is buggy, dev hsr_slave_0
[ 3505.607212] protocol 88fb is buggy, dev hsr_slave_1
[ 3505.612485] protocol 88fb is buggy, dev hsr_slave_0
[ 3505.617673] protocol 88fb is buggy, dev hsr_slave_1
[ 3505.906473] protocol 88fb is buggy, dev hsr_slave_0
[ 3505.911689] protocol 88fb is buggy, dev hsr_slave_1
[ 3506.546479] protocol 88fb is buggy, dev hsr_slave_0
[ 3506.551709] protocol 88fb is buggy, dev hsr_slave_1
[ 3506.866453] Bluetooth: hci0: command 0x1003 tx timeout
[ 3506.871931] Bluetooth: hci0: sending frame failed (-49)
[ 3507.666478] Bluetooth: hci1: command 0x1003 tx timeout
[ 3507.671938] Bluetooth: hci1: sending frame failed (-49)
[ 3508.946530] Bluetooth: hci0: command 0x1001 tx timeout
[ 3508.952023] Bluetooth: hci0: sending frame failed (-49)
[ 3509.746981] Bluetooth: hci1: command 0x1001 tx timeout
[ 3509.752399] Bluetooth: hci1: sending frame failed (-49)
[ 3510.706517] net_ratelimit: 22 callbacks suppressed
[ 3510.706524] protocol 88fb is buggy, dev hsr_slave_0
[ 3510.716619] protocol 88fb is buggy, dev hsr_slave_1
[ 3511.026450] Bluetooth: hci0: command 0x1009 tx timeout
[ 3511.346506] protocol 88fb is buggy, dev hsr_slave_0
[ 3511.351613] protocol 88fb is buggy, dev hsr_slave_1
[ 3511.826500] Bluetooth: hci1: command 0x1009 tx timeout
[ 3511.826507] protocol 88fb is buggy, dev hsr_slave_0
[ 3511.826562] protocol 88fb is buggy, dev hsr_slave_1
[ 3511.842035] protocol 88fb is buggy, dev hsr_slave_0
[ 3511.847178] protocol 88fb is buggy, dev hsr_slave_1
[ 3511.852339] protocol 88fb is buggy, dev hsr_slave_0
[ 3511.857484] protocol 88fb is buggy, dev hsr_slave_1
[ 3515.986487] net_ratelimit: 18 callbacks suppressed
[ 3515.991507] protocol 88fb is buggy, dev hsr_slave_0
[ 3515.996640] protocol 88fb is buggy, dev hsr_slave_1
[ 3516.001786] protocol 88fb is buggy, dev hsr_slave_0
[ 3516.006900] protocol 88fb is buggy, dev hsr_slave_1
[ 3516.012066] protocol 88fb is buggy, dev hsr_slave_0
[ 3516.017150] protocol 88fb is buggy, dev hsr_slave_1
23:20:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008b12, &(0x7f0000000040)="050000007669f7dc6cbc0a")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x10000, 0x0)
ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000180)={0xff, 0x0, 0x5, 0x5, 0x9})
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
r3 = gettid()
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x80000001, 0x8001, 0x9, 0x8, 0x0, 0x26eaaa94, 0x2, 0x2, 0x4, 0x71, 0x5, 0xffffffffffffffc0, 0x9, 0x56d58135, 0x20000000, 0x4, 0x3, 0x7e, 0xff, 0x5, 0x0, 0x3734, 0x1, 0xfffffffffffffffb, 0x20f, 0x40, 0x7f, 0x8, 0xfffffffffffffffb, 0x401, 0xfffffffffffffff9, 0x6, 0x4, 0x6, 0x1, 0x6, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x2, 0xffff, 0x5, 0x0, 0x800}, r3, 0xb, 0xffffffffffffffff, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:20:38 executing program 4:

23:20:38 executing program 0:

23:20:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:20:38 executing program 2:

23:20:38 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020004000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:20:38 executing program 2:

23:20:38 executing program 4:

[ 3516.109574] f2fs_msg: 22 callbacks suppressed
[ 3516.109587] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3516.146592] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:20:38 executing program 0:

[ 3516.196946] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (262146, 14)
[ 3516.217074] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:20:38 executing program 4:

23:20:38 executing program 2:

[ 3516.251542] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3516.266770] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:20:38 executing program 0:

[ 3516.297636] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3516.306441] protocol 88fb is buggy, dev hsr_slave_0
[ 3516.311591] protocol 88fb is buggy, dev hsr_slave_1
[ 3516.336591] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (262146, 14)
[ 3516.357704] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3516.437276] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3516.449086] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3516.946495] protocol 88fb is buggy, dev hsr_slave_0
[ 3516.951659] protocol 88fb is buggy, dev hsr_slave_1
[ 3518.306478] Bluetooth: hci0: command 0x1003 tx timeout
[ 3518.311887] Bluetooth: hci0: sending frame failed (-49)
[ 3519.026653] Bluetooth: hci1: command 0x1003 tx timeout
[ 3519.032057] Bluetooth: hci1: sending frame failed (-49)
[ 3520.386492] Bluetooth: hci0: command 0x1001 tx timeout
[ 3520.391907] Bluetooth: hci0: sending frame failed (-49)
[ 3521.106498] Bluetooth: hci1: command 0x1001 tx timeout
[ 3521.106530] net_ratelimit: 22 callbacks suppressed
[ 3521.106537] protocol 88fb is buggy, dev hsr_slave_0
[ 3521.121913] protocol 88fb is buggy, dev hsr_slave_1
[ 3521.127209] Bluetooth: hci1: sending frame failed (-49)
[ 3521.746514] protocol 88fb is buggy, dev hsr_slave_0
[ 3521.751640] protocol 88fb is buggy, dev hsr_slave_1
[ 3522.226495] protocol 88fb is buggy, dev hsr_slave_0
[ 3522.231653] protocol 88fb is buggy, dev hsr_slave_1
[ 3522.236862] protocol 88fb is buggy, dev hsr_slave_0
[ 3522.241942] protocol 88fb is buggy, dev hsr_slave_1
[ 3522.247134] protocol 88fb is buggy, dev hsr_slave_0
[ 3522.252200] protocol 88fb is buggy, dev hsr_slave_1
[ 3522.466501] Bluetooth: hci0: command 0x1009 tx timeout
[ 3523.186790] Bluetooth: hci1: command 0x1009 tx timeout
[ 3526.386553] net_ratelimit: 18 callbacks suppressed
[ 3526.391570] protocol 88fb is buggy, dev hsr_slave_0
[ 3526.396660] protocol 88fb is buggy, dev hsr_slave_1
[ 3526.401746] protocol 88fb is buggy, dev hsr_slave_0
[ 3526.406814] protocol 88fb is buggy, dev hsr_slave_1
[ 3526.411948] protocol 88fb is buggy, dev hsr_slave_0
[ 3526.417023] protocol 88fb is buggy, dev hsr_slave_1
[ 3526.706511] protocol 88fb is buggy, dev hsr_slave_0
[ 3526.711664] protocol 88fb is buggy, dev hsr_slave_1
[ 3527.346503] protocol 88fb is buggy, dev hsr_slave_0
[ 3527.351628] protocol 88fb is buggy, dev hsr_slave_1
23:20:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000001, 0x80000)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000040))
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:20:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:20:50 executing program 4:

23:20:50 executing program 0:

23:20:50 executing program 2:

23:20:50 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020005000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:20:50 executing program 4:

[ 3527.666532] f2fs_msg: 6 callbacks suppressed
[ 3527.666548] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:20:50 executing program 0:

23:20:50 executing program 2:

[ 3527.706692] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3527.732507] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (327682, 14)
23:20:50 executing program 4:

23:20:50 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
read(r0, 0x0, 0xfffffeb7)

23:20:50 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x400000000001)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x4058534c, &(0x7f0000000000)={{0x80}})

[ 3527.777297] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3527.830806] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3527.879294] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3527.906443] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (327682, 14)
[ 3527.926215] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3527.983856] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3527.991564] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3529.746482] Bluetooth: hci0: command 0x1003 tx timeout
[ 3529.751941] Bluetooth: hci0: sending frame failed (-49)
[ 3530.556446] Bluetooth: hci1: command 0x1003 tx timeout
[ 3530.562025] Bluetooth: hci1: sending frame failed (-49)
[ 3531.506643] net_ratelimit: 22 callbacks suppressed
[ 3531.511847] protocol 88fb is buggy, dev hsr_slave_0
[ 3531.517000] protocol 88fb is buggy, dev hsr_slave_1
[ 3531.826619] Bluetooth: hci0: command 0x1001 tx timeout
[ 3531.832260] Bluetooth: hci0: sending frame failed (-49)
[ 3532.146666] protocol 88fb is buggy, dev hsr_slave_0
[ 3532.151861] protocol 88fb is buggy, dev hsr_slave_1
[ 3532.626546] protocol 88fb is buggy, dev hsr_slave_0
[ 3532.631793] protocol 88fb is buggy, dev hsr_slave_1
[ 3532.637220] protocol 88fb is buggy, dev hsr_slave_0
[ 3532.642301] protocol 88fb is buggy, dev hsr_slave_1
[ 3532.647549] protocol 88fb is buggy, dev hsr_slave_0
[ 3532.652632] protocol 88fb is buggy, dev hsr_slave_1
[ 3532.657973] Bluetooth: hci1: command 0x1001 tx timeout
[ 3532.663396] Bluetooth: hci1: sending frame failed (-49)
[ 3533.906536] Bluetooth: hci0: command 0x1009 tx timeout
[ 3534.706590] Bluetooth: hci1: command 0x1009 tx timeout
[ 3536.786527] net_ratelimit: 18 callbacks suppressed
[ 3536.786534] protocol 88fb is buggy, dev hsr_slave_0
[ 3536.796682] protocol 88fb is buggy, dev hsr_slave_1
[ 3536.801806] protocol 88fb is buggy, dev hsr_slave_0
[ 3536.806980] protocol 88fb is buggy, dev hsr_slave_1
[ 3536.812525] protocol 88fb is buggy, dev hsr_slave_0
[ 3536.817930] protocol 88fb is buggy, dev hsr_slave_1
[ 3537.106532] protocol 88fb is buggy, dev hsr_slave_0
[ 3537.111738] protocol 88fb is buggy, dev hsr_slave_1
[ 3537.746631] protocol 88fb is buggy, dev hsr_slave_0
[ 3537.751875] protocol 88fb is buggy, dev hsr_slave_1
23:21:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
r2 = dup3(r0, r0, 0x80000)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))

23:21:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000019000103000000000000000016000000040003008cd1a97e2d0b3acc63d4968d09d349976c2f407d8b9c1f04403859a47a41213c7677479eaf5c2999507d48ddb94b7868b133fffdc4e4aa600f"], 0x1}}, 0x0)

23:21:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:21:01 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

23:21:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe83)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
shutdown(r1, 0x1)
clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_execute_func(&(0x7f0000000240)="410f01f9c4e1f573d50664ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110d4b842419dcccc")
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000180)={0x0, 0x1e8, &(0x7f0000000140)={0x0}}, 0x4004010)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, 0x0, 0x0)
getegid()
getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100))

23:21:01 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020006000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

[ 3539.172806] f2fs_msg: 6 callbacks suppressed
[ 3539.172817] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:21:01 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x8}, 0x0, 0x1000)

[ 3539.244178] Bluetooth: hci0: Frame reassembly failed (-84)
23:21:01 executing program 4:
r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x404c534a, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=@sha1={0x1, "36deea2eff221c4c4f6154fa0bb33653d5baeab7"}, 0x15, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bind$bt_l2cap(r1, &(0x7f00000003c0)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xeb}, 0xfffffffffffffffc}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)

[ 3539.297724] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3539.326893] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (393218, 14)
[ 3539.350684] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3539.380276] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
23:21:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3539.400022] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3539.414608] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (393218, 14)
23:21:02 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
accept$unix(r0, 0x0, 0x0)

[ 3539.451248] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:21:02 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c)
write$P9_RXATTRWALK(r0, 0x0, 0x0)

23:21:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3539.566008] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3539.581827] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3541.266659] Bluetooth: hci0: command 0x1003 tx timeout
[ 3541.272080] Bluetooth: hci0: sending frame failed (-49)
[ 3541.906997] net_ratelimit: 22 callbacks suppressed
[ 3541.907006] protocol 88fb is buggy, dev hsr_slave_0
[ 3541.917109] protocol 88fb is buggy, dev hsr_slave_1
[ 3542.066431] Bluetooth: hci1: command 0x1003 tx timeout
[ 3542.071937] Bluetooth: hci1: sending frame failed (-49)
[ 3542.546511] protocol 88fb is buggy, dev hsr_slave_0
[ 3542.551688] protocol 88fb is buggy, dev hsr_slave_1
[ 3543.026516] protocol 88fb is buggy, dev hsr_slave_0
[ 3543.031620] protocol 88fb is buggy, dev hsr_slave_1
[ 3543.036794] protocol 88fb is buggy, dev hsr_slave_0
[ 3543.041864] protocol 88fb is buggy, dev hsr_slave_1
[ 3543.047124] protocol 88fb is buggy, dev hsr_slave_0
[ 3543.052182] protocol 88fb is buggy, dev hsr_slave_1
[ 3543.346747] Bluetooth: hci0: command 0x1001 tx timeout
[ 3543.352165] Bluetooth: hci0: sending frame failed (-49)
[ 3544.146514] Bluetooth: hci1: command 0x1001 tx timeout
[ 3544.151962] Bluetooth: hci1: sending frame failed (-49)
[ 3545.426773] Bluetooth: hci0: command 0x1009 tx timeout
[ 3546.226548] Bluetooth: hci1: command 0x1009 tx timeout
[ 3547.186498] net_ratelimit: 18 callbacks suppressed
[ 3547.191541] protocol 88fb is buggy, dev hsr_slave_0
[ 3547.196607] protocol 88fb is buggy, dev hsr_slave_1
[ 3547.201688] protocol 88fb is buggy, dev hsr_slave_0
[ 3547.206721] protocol 88fb is buggy, dev hsr_slave_1
[ 3547.211780] protocol 88fb is buggy, dev hsr_slave_0
[ 3547.216824] protocol 88fb is buggy, dev hsr_slave_1
[ 3547.506446] protocol 88fb is buggy, dev hsr_slave_0
[ 3547.511554] protocol 88fb is buggy, dev hsr_slave_1
[ 3548.146561] protocol 88fb is buggy, dev hsr_slave_0
[ 3548.151715] protocol 88fb is buggy, dev hsr_slave_1
23:21:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = dup3(r0, r0, 0x80000)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000280)={0x101, 0x99, 0x5ccd, 0x9c5}, 0x6)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
r3 = socket(0xb, 0xa, 0xa2)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x308, 0x5, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x600000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8050)
r5 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r5)
keyctl$get_security(0x11, r6, &(0x7f0000000340)=""/91, 0x5b)
open$dir(&(0x7f0000000000)='./file0\x00', 0x18c40, 0x20)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080))

23:21:13 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020007000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:21:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0), 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, &(0x7f0000000180))

23:21:13 executing program 2:
accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000105], [0xc1]})

23:21:13 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80000101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)
pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="80fd", 0x2}], 0x1, 0x0)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, 0x0)

23:21:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3550.691907] f2fs_msg: 6 callbacks suppressed
[ 3550.691920] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3550.719798] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3550.759151] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (458754, 14)
[ 3550.798051] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:21:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000540)=""/11, 0x485)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200))
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
dup2(r0, r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x2000021c)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$unix(r3, 0x0, 0x0, 0x80020003ffc, &(0x7f0000000200)=@abs={0x1}, 0x6e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0)

[ 3550.826669] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3550.834296] Bluetooth: hci0: Frame reassembly failed (-84)
[ 3550.882171] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3550.896564] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (458754, 14)
[ 3550.910111] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:21:13 executing program 2:
accept4(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000105], [0xc1]})

23:21:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3550.995031] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3551.018635] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:21:13 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020009000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:21:13 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
syz_execute_func(&(0x7f0000000080)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110929242019dcc6f")
clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmmsg(r1, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/135, 0x87}], 0x1}}], 0x1, 0x0, 0x0)
clock_nanosleep(0x0, 0x0, 0x0, &(0x7f0000000480))
r2 = fcntl$dupfd(r1, 0x0, r0)
shutdown(r2, 0x0)

23:21:13 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x8}, 0x0, 0x1000)

[ 3552.306673] net_ratelimit: 22 callbacks suppressed
[ 3552.306681] protocol 88fb is buggy, dev hsr_slave_0
[ 3552.317403] protocol 88fb is buggy, dev hsr_slave_1
[ 3552.867055] Bluetooth: hci0: command 0x1003 tx timeout
[ 3552.874375] Bluetooth: hci0: sending frame failed (-49)
[ 3552.956534] protocol 88fb is buggy, dev hsr_slave_0
[ 3552.961957] protocol 88fb is buggy, dev hsr_slave_1
[ 3553.426488] protocol 88fb is buggy, dev hsr_slave_0
[ 3553.431593] protocol 88fb is buggy, dev hsr_slave_1
[ 3553.436754] protocol 88fb is buggy, dev hsr_slave_0
[ 3553.441819] protocol 88fb is buggy, dev hsr_slave_1
[ 3553.446979] protocol 88fb is buggy, dev hsr_slave_0
[ 3553.452029] protocol 88fb is buggy, dev hsr_slave_1
[ 3554.946475] Bluetooth: hci0: command 0x1001 tx timeout
[ 3554.952614] Bluetooth: hci0: sending frame failed (-49)
[ 3557.026513] Bluetooth: hci0: command 0x1009 tx timeout
[ 3557.586470] net_ratelimit: 18 callbacks suppressed
[ 3557.591479] protocol 88fb is buggy, dev hsr_slave_0
[ 3557.596581] protocol 88fb is buggy, dev hsr_slave_1
[ 3557.601737] protocol 88fb is buggy, dev hsr_slave_0
[ 3557.606827] protocol 88fb is buggy, dev hsr_slave_1
[ 3557.611933] protocol 88fb is buggy, dev hsr_slave_0
[ 3557.617023] protocol 88fb is buggy, dev hsr_slave_1
[ 3557.906499] protocol 88fb is buggy, dev hsr_slave_0
[ 3557.911613] protocol 88fb is buggy, dev hsr_slave_1
[ 3558.546531] protocol 88fb is buggy, dev hsr_slave_0
[ 3558.551639] protocol 88fb is buggy, dev hsr_slave_1
23:21:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x81, 0x111040)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000340)=""/65)
creat(&(0x7f0000000000)='./file0\x00', 0x28)

23:21:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

23:21:23 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000a000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:21:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)
creat(0x0, 0x14)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000100), 0x0)
linkat(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0)
pread64(r2, &(0x7f0000005000)=""/4096, 0xffffffc7, 0x0)

23:21:23 executing program 2:
r0 = creat(&(0x7f0000000800)='./file0\x00', 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
write$P9_RLINK(r0, 0x0, 0x0)

23:21:23 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0xb, 0x80800)

[ 3560.925019] audit: type=1804 audit(1555370483.533:126): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/file0/root/syzkaller-testdir110099083/syzkaller.T6vY0Y/2555/bus" dev="sda1" ino=16981 res=1
[ 3560.978457] f2fs_msg: 14 callbacks suppressed
[ 3560.978472] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3561.036538] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3561.067427] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (655362, 14)
23:21:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080))
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x101, 0x7, 0x8001})

23:21:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sched_setparam(0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000)

23:21:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x16, 0xfffffffffffffffd, 0x0, 0x0, {0x1f}}, 0x14}}, 0x0)

23:21:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3561.112585] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[ 3561.120095] audit: type=1800 audit(1555370483.533:127): pid=11405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16981 res=0
23:21:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x16, 0xffffffffffffffdd, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)
write$apparmor_current(0xffffffffffffffff, 0x0, 0x0)

[ 3561.186690] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3561.233871] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 3561.265648] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (655362, 14)
[ 3561.288569] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
23:21:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3561.361069] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 3561.369010] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
23:21:24 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100000002000c000000000000300000000000000e00000016000000010000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0)

23:21:24 executing program 0:
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0)
truncate(&(0x7f0000000540)='./file0\x00', 0x1000)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0)
fcntl$setstatus(r0, 0x4, 0x10048)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81700}], 0x1000000000000013)
open$dir(0x0, 0x0, 0x0)

23:21:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x40)

23:21:24 executing program 4:
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x200000a, 0x6031, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

23:21:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080513f14d11fffdffff010a0000000c0003002f0000007d0a00b60c0002000002fa17711104a6"], 0x2c}}, 0x0)

23:21:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x100040, 0x0, 0x0, 0x80000001}, {0x80000006}]}, 0x10)
r2 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)

[ 3561.712055] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 3561.738326] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 3561.759111] kasan: CONFIG_KASAN_INLINE enabled
[ 3561.770049] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 3561.803126] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 3561.809438] CPU: 0 PID: 12059 Comm: syz-executor.2 Not tainted 4.19.34 #2
[ 3561.816376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3561.825768] RIP: 0010:gre_timeout_obj_to_nlattr+0x77/0x1a0
[ 3561.831417] Code: 97 85 c7 00 f1 f1 f1 f1 c7 40 04 04 f3 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 b0 96 d3 fb 48 89 d8 48 c1 e8 03 <42> 0f b6 14 38 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
[ 3561.850789] RSP: 0018:ffff888049e973d0 EFLAGS: 00010246
[ 3561.856198] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000a281000
[ 3561.863513] RDX: 0000000000018061 RSI: ffffffff8597a090 RDI: ffff8880a1cdf980
[ 3561.870832] RBP: ffff888049e97460 R08: ffff888057534640 R09: ffff88808d970828
[ 3561.878143] R10: ffffed1011b2e104 R11: ffff88808d970820 R12: 1ffff110093d2e7b
[ 3561.885453] R13: ffff8880a1cdf980 R14: ffff888049e97438 R15: dffffc0000000000
[ 3561.892743] FS:  00007f582450b700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[ 3561.901100] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3561.907006] CR2: 0000000000ee0b70 CR3: 000000009078f000 CR4: 00000000001406f0
[ 3561.914312] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3561.921592] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 3561.928852] Call Trace:
[ 3561.931434]  ? memcpy+0x46/0x50
[ 3561.934733]  ? gre_print_conntrack+0xc0/0xc0
[ 3561.939154]  ? __nla_put+0x37/0x40
[ 3561.942717]  ? nla_put+0x116/0x150
[ 3561.946259]  cttimeout_default_get+0x69a/0xa80
[ 3561.950864]  ? cttimeout_del_timeout+0x1a0/0x1a0
[ 3561.955618]  ? __lock_is_held+0x9f/0x140
[ 3561.959680]  ? cttimeout_del_timeout+0x1a0/0x1a0
[ 3561.964434]  nfnetlink_rcv_msg+0xd12/0xfe0
[ 3561.968677]  ? nfnetlink_bind+0x2d0/0x2d0
[ 3561.972845]  ? avc_has_extended_perms+0x10f0/0x10f0
[ 3561.977867]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3561.983404]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3561.988940]  ? cred_has_capability+0x193/0x320
[ 3561.993530]  ? selinux_ipv4_output+0x50/0x50
[ 3561.997962]  ? sock_sendmsg+0xdd/0x130
[ 3562.001850]  ? mark_held_locks+0x100/0x100
[ 3562.006102]  netlink_rcv_skb+0x180/0x460
[ 3562.010162]  ? nfnetlink_bind+0x2d0/0x2d0
[ 3562.014306]  ? netlink_ack+0xb60/0xb60
[ 3562.018191]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3562.023728]  ? ns_capable+0x23/0x30
[ 3562.027350]  ? __netlink_ns_capable+0x104/0x140
[ 3562.032040]  nfnetlink_rcv+0x1c0/0x460
[ 3562.035945]  ? nfnetlink_rcv_batch+0x1770/0x1770
[ 3562.040707]  ? netlink_deliver_tap+0x254/0xc20
[ 3562.045290]  ? kasan_check_write+0x14/0x20
[ 3562.049538]  netlink_unicast+0x53c/0x720
[ 3562.053600]  ? netlink_attachskb+0x770/0x770
[ 3562.058029]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3562.063568]  netlink_sendmsg+0x8ae/0xd70
[ 3562.067723]  ? netlink_unicast+0x720/0x720
[ 3562.071981]  ? selinux_socket_sendmsg+0x36/0x40
[ 3562.076666]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 3562.082221]  ? security_socket_sendmsg+0x93/0xc0
[ 3562.087066]  ? netlink_unicast+0x720/0x720
[ 3562.091387]  sock_sendmsg+0xdd/0x130
[ 3562.095125]  ___sys_sendmsg+0x806/0x930
[ 3562.099098]  ? copy_msghdr_from_user+0x430/0x430
[ 3562.103855]  ? lock_downgrade+0x810/0x810
[ 3562.108030]  ? kasan_check_read+0x11/0x20
[ 3562.112195]  ? __fget+0x367/0x540
[ 3562.115665]  ? iterate_fd+0x360/0x360
[ 3562.119465]  ? lock_downgrade+0x810/0x810
[ 3562.123623]  ? __fget_light+0x1a9/0x230
[ 3562.127597]  ? __fdget+0x1b/0x20
[ 3562.130952]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 3562.136500]  __sys_sendmsg+0x105/0x1d0
[ 3562.140387]  ? __ia32_sys_shutdown+0x80/0x80
[ 3562.144972]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 3562.150023]  ? do_syscall_64+0x26/0x610
[ 3562.153994]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3562.159361]  ? do_syscall_64+0x26/0x610
[ 3562.163332]  __x64_sys_sendmsg+0x78/0xb0
[ 3562.167387]  do_syscall_64+0x103/0x610
[ 3562.171292]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 3562.176471] RIP: 0033:0x458c29
[ 3562.179650] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 3562.198645] RSP: 002b:00007f582450ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3562.206359] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[ 3562.213634] RDX: 0000000000000000 RSI: 0000000020dddfc8 RDI: 0000000000000004
[ 3562.220896] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 3562.228157] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f582450b6d4
[ 3562.235439] R13: 00000000004c6501 R14: 00000000004dae68 R15: 00000000ffffffff
[ 3562.242705] Modules linked in:
[ 3562.246810] ---[ end trace 24ba3b533db9b7cc ]---
[ 3562.253507] RIP: 0010:gre_timeout_obj_to_nlattr+0x77/0x1a0
[ 3562.255306] kobject: 'hci1' (0000000066a6e80b): kobject_add_internal: parent: 'bluetooth', set: 'devices'
[ 3562.259326] Code: 97 85 c7 00 f1 f1 f1 f1 c7 40 04 04 f3 f3 f3 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 e8 b0 96 d3 fb 48 89 d8 48 c1 e8 03 <42> 0f b6 14 38 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85
[ 3562.259341] RSP: 0018:ffff888049e973d0 EFLAGS: 00010246
[ 3562.272514] kobject: 'hci1' (0000000066a6e80b): kobject_uevent_env
[ 3562.300143] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000a281000
[ 3562.307636] RDX: 0000000000018061 RSI: ffffffff8597a090 RDI: ffff8880a1cdf980
[ 3562.311287] kobject: 'hci1' (0000000066a6e80b): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1'
[ 3562.315289] RBP: ffff888049e97460 R08: ffff888057534640 R09: ffff88808d970828
[ 3562.331927] kobject: 'loop3' (0000000014f1ead9): kobject_uevent_env
[ 3562.332148] R10: ffffed1011b2e104 R11: ffff88808d970820 R12: 1ffff110093d2e7b
[ 3562.346717] R13: ffff8880a1cdf980 R14: ffff888049e97438 R15: dffffc0000000000
[ 3562.354194] FS:  00007f582450b700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[ 3562.354315] kobject: 'loop3' (0000000014f1ead9): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 3562.362640] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3562.378471] kobject: 'rfkill316' (00000000e1a540fe): kobject_add_internal: parent: 'hci1', set: 'devices'
[ 3562.388380] CR2: 0000000000ee0b70 CR3: 000000009078f000 CR4: 00000000001406f0
[ 3562.396065] kobject: 'rfkill316' (00000000e1a540fe): kobject_uevent_env
[ 3562.399530] Kernel panic - not syncing: Fatal exception
[ 3562.403133] kobject: 'rfkill316' (00000000e1a540fe): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill316'
[ 3562.409215] Kernel Offset: disabled
[ 3562.423880] Rebooting in 86400 seconds..