last executing test programs:

48.503820414s ago: executing program 3 (id=39):
r0 = eventfd2(0x43, 0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000500)}], 0x1)

45.420921739s ago: executing program 3 (id=45):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="010600000000000000ee0800"], 0xac}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000741555204505808002000102030109022400010000500009043500"], 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, 0x0)
ioprio_get$uid(0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'sit0\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0x8, 0x2, "01b8f2f00ccb"}})
socket$inet_tcp(0x2, 0x1, 0x0)
fsopen(&(0x7f0000000140)='qnx6\x00', 0x1)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000440))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1, 0x5, 0x6)

40.026277607s ago: executing program 3 (id=52):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='nilfs2_transaction_transition\x00', r0, 0x0, 0xc0b}, 0x18)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
mremap(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000003000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x0)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x6ffffffa, 0x0, 0x0, 0x201, 0x12, 0x0, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

38.528264166s ago: executing program 3 (id=59):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f0000002280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c000927ef269377351d90aeb50529825f700786beb0826da0bf9d36620d87d004d56ca63f2e70957efda4662ca0eab69a6221732d7cbdd8f6c022eb6c842004c94d39a0aa81d68ad1cca39fa8ddbb70aa75c886c11149d401ffcdab20fb3aed07ec97390337828e6bfa896e5875ceb3a020461d98fc2a61ac4685346c0fac3e0114e8bf33c9c8d36d9e451b5fb0b94421daa4e5142e192401bec01a9dbeba53d105f78b91bc6e07d984c1071ac746a483083a8c2eb0ed62057c9c4b4ec5bf54162a901e9c1f3f8b4e8c813e2a061482a7ca495b2f7c5ba527fbbd320d96e977145ed6152b9ce4ccef88a3"], 0x1, 0xc32, &(0x7f0000009100)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
io_cancel(0x0, 0xfffffffffffffffe, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)

35.239080556s ago: executing program 3 (id=65):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x33, 0x5, 0x0, 0xffffffffffffffff, 0x7f}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

33.775228169s ago: executing program 3 (id=70):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66, 0x0, 0x80}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
connect$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}, 0x7}}, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10)
sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

33.09900718s ago: executing program 32 (id=70):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66, 0x0, 0x80}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
connect$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x1, {{0x41, 0x1}, 0x7}}, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10)
sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

24.269087443s ago: executing program 1 (id=83):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x33, 0x5, 0x0, 0xffffffffffffffff, 0x7f}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4002}, 0x90)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdd}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4a1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200408c9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={<r6=>0x0, @in6={{0xa, 0x4e24, 0x3a, @local, 0x4009}}, [0xb, 0x14ee, 0x2000, 0xfffffffffffffffa, 0xfff, 0x7, 0x8000, 0x8000, 0x0, 0xffffffffffffffff, 0x6, 0x3, 0x4, 0xe, 0x3]}, 0x0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000580)={r6, 0x2}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000001b00)=""/102392, 0x18ff8)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

21.016197721s ago: executing program 2 (id=87):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$kcm(0x29, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mknod$loop(0x0, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r6, r5})
writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

20.8338772s ago: executing program 4 (id=88):
socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x4e21, 0x50000000, @local, 0xb}}}, 0x88)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x1, 0x5a2a, &(0x7f00000010c0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r2, 0x2007ffb)
sendfile(0xffffffffffffffff, r2, 0x0, 0x1000000201005)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota'])
lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x4f27, 0x5, 0x2, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x1600, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x395, 0x80000089, 0xfffffffd, 0x7, 0x1007, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]})
syz_emit_ethernet(0x6d, &(0x7f0000000540)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xdc, 0x42, "5515", "33762244bebd569637c54853a92ce976a7b67d38b83a5b91e1d18914ab289ed24815f822fa9fa12ecefe8ebc310d9e6ede7320707a57e429a3ca4ff269cc1b9e9e3f7e358b8e285f0dc95d83476e62a094c7b950e3dae6"}}}}}, 0x0)
socket(0x400000000010, 0x3, 0x0)

20.761395055s ago: executing program 1 (id=89):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x20000})

19.418499384s ago: executing program 1 (id=90):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_pts(0xffffffffffffffff, 0x2800)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
close(r5)
syz_io_uring_setup(0x25c4, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

18.208702681s ago: executing program 1 (id=92):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f0000002280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c000927ef269377351d90aeb50529825f700786beb0826da0bf9d36620d87d004d56ca63f2e70957efda4662ca0eab69a6221732d7cbdd8f6c022eb6c842004c94d39a0aa81d68ad1cca39fa8ddbb70aa75c886c11149d401ffcdab20fb3aed07ec97390337828e6bfa896e5875ceb3a020461d98fc2a61ac4685346c0fac3e0114e8bf33c9c8d36d9e451b5fb0b94421daa4e5142e192401bec01a9dbeba53d105f78b91bc6e07d984c1071ac746a483083a8c2eb0ed62057c9c4b4ec5bf54162a901e9c1f3f8b4e8c813e2a061482a7ca495b2f7c5ba527fbbd320d96e977145ed6152b9ce4ccef88a3"], 0x1, 0xc32, &(0x7f0000009100)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
io_cancel(0x0, 0xfffffffffffffffe, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)

14.905230824s ago: executing program 1 (id=94):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
creat(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])

13.514526205s ago: executing program 0 (id=97):
syz_open_dev$video4linux(0x0, 0xe, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x40}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "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"}, 0x10e)

12.920373701s ago: executing program 2 (id=98):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec970003b02b00fe8000000000000000000000000000aaff0200"/51], 0xffe)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x20, 0x7fff0004}]})
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d30303030303030303030303030303030303030303033372c6e6f6465636f6d706f73652c00"], 0x1, 0x6a4, &(0x7f0000000cc0)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x24, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x80)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
listxattr(0x0, 0x0, 0x0)
write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000200)='nv\x00', 0x3)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)

11.634447971s ago: executing program 0 (id=99):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800"], 0x3c}}, 0x0)

9.963685799s ago: executing program 4 (id=101):
prctl$PR_GET_FPEMU(0x9, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x22020400)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r2, 0x0, 0xff2e)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127)
open$dir(0x0, 0x101000, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=<r5=>0x0)
r6 = syz_open_procfs(r5, 0x0)
preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001240)=""/4088, 0xff8}], 0x1, 0x161, 0x0)

9.9062079s ago: executing program 0 (id=102):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x46, 0x4)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

9.845060542s ago: executing program 2 (id=103):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_pts(0xffffffffffffffff, 0x2800)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
close(r5)
syz_io_uring_setup(0x25c4, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

9.650325505s ago: executing program 1 (id=104):
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffc, 0xffffffff, 0x8}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005200010000000000000000001c000000080002"], 0x1c}}, 0x80)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30001000000900020073797a310000000014000380080001400000000008040000000000004800000016160101000b008000000000010000000900020073797a3100000000090001ad8e3abd2d9dbbfd001c000380180003801400010070676d367265673100000000000000001400000010000100000000"], 0xd0}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

8.455945464s ago: executing program 33 (id=104):
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffc, 0xffffffff, 0x8}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005200010000000000000000001c000000080002"], 0x1c}}, 0x80)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30001000000900020073797a310000000014000380080001400000000008040000000000004800000016160101000b008000000000010000000900020073797a3100000000090001ad8e3abd2d9dbbfd001c000380180003801400010070676d367265673100000000000000001400000010000100000000"], 0xd0}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

8.445030251s ago: executing program 0 (id=106):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f0000002280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c000927ef269377351d90aeb50529825f700786beb0826da0bf9d36620d87d004d56ca63f2e70957efda4662ca0eab69a6221732d7cbdd8f6c022eb6c842004c94d39a0aa81d68ad1cca39fa8ddbb70aa75c886c11149d401ffcdab20fb3aed07ec97390337828e6bfa896e5875ceb3a020461d98fc2a61ac4685346c0fac3e0114e8bf33c9c8d36d9e451b5fb0b94421daa4e5142e192401bec01a9dbeba53d105f78b91bc6e07d984c1071ac746a483083a8c2eb0ed62057c9c4b4ec5bf54162a901e9c1f3f8b4e8c813e2a061482a7ca495b2f7c5ba527fbbd320d96e977145ed6152b9ce4ccef88a3"], 0x1, 0xc32, &(0x7f0000009100)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
io_cancel(0x0, 0xfffffffffffffffe, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)

8.444174668s ago: executing program 2 (id=107):
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='status\x00')
sendfile(r0, r0, 0x0, 0x8000000009)
creat(&(0x7f00000002c0)='./file0\x00', 0x2c)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r3 = memfd_create(&(0x7f0000019080)='@@\x00', 0x1)
pread64(r3, 0x0, 0x0, 0x7fffffffffffffff)
r4 = dup(r2)
syz_usb_connect$hid(0x4, 0xffffffffffffff33, 0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
shutdown(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d7265616461686561642c6b226f0fddfe7fb885fb407f75f5d533047f54c87ca788e8fc9a56"])
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40)

8.442139785s ago: executing program 5 (id=108):
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

7.260792639s ago: executing program 0 (id=109):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, <r1=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r1, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x20000})

7.134008066s ago: executing program 5 (id=110):
syz_open_dev$video4linux(0x0, 0xe, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x40}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "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"}, 0x10e)

6.292459138s ago: executing program 0 (id=111):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
umount2(&(0x7f0000000080)='./file0\x00', 0x8)

5.886288699s ago: executing program 34 (id=111):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
umount2(&(0x7f0000000080)='./file0\x00', 0x8)

5.875887592s ago: executing program 2 (id=113):
socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x4e21, 0x50000000, @local, 0xb}}}, 0x88)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x1, 0x5a2a, &(0x7f00000010c0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r3, 0x2007ffb)
sendfile(r2, r3, 0x0, 0x1000000201005)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota'])
lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x4f27, 0x5, 0x2, 0x47, 0x2, 0xcc7, 0xfff, 0x7, 0x5, 0x3ff, 0x7f, 0x1600, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffc0, 0x0, 0x2f, 0x395, 0x80000089, 0xfffffffd, 0x7, 0x1007, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]})
syz_emit_ethernet(0x6d, &(0x7f0000000540)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xdc, 0x42, "5515", "33762244bebd569637c54853a92ce976a7b67d38b83a5b91e1d18914ab289ed24815f822fa9fa12ecefe8ebc310d9e6ede7320707a57e429a3ca4ff269cc1b9e9e3f7e358b8e285f0dc95d83476e62a094c7b950e3dae6"}}}}}, 0x0)
socket(0x400000000010, 0x3, 0x0)

5.874865119s ago: executing program 5 (id=114):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800"], 0x3c}}, 0x0)

5.363453878s ago: executing program 5 (id=115):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
creat(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])

3.767605138s ago: executing program 5 (id=116):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c014)

3.758430346s ago: executing program 2 (id=117):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x46, 0x4)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2.367295366s ago: executing program 4 (id=118):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_pts(0xffffffffffffffff, 0x2800)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
close(r5)
syz_io_uring_setup(0x25c4, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1.443282815s ago: executing program 5 (id=119):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
listen(r0, 0x3841b273)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0x108)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
pread64(r1, 0x0, 0x0, 0xce2)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
open(0x0, 0x111200, 0x187)

1.396633949s ago: executing program 4 (id=120):
r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

654.000164ms ago: executing program 4 (id=121):
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x1, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e0000002"], 0x1e8}}, 0x0)

0s ago: executing program 4 (id=122):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000005c0)={'pcl726\x00', [0x4f27, 0xfffffffc, 0x4, 0x4, 0x3, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x2, 0x7f, 0x3, 0x40000005, 0x8d, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x1000003, 0x100008, 0x4086, 0x0, 0xfffffff8]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts.
[   78.814391][ T5845] cgroup: Unknown subsys name 'net'
[   78.935561][ T5845] cgroup: Unknown subsys name 'cpuset'
[   78.944965][ T5845] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.505970][ T5845] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.590172][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   83.599461][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.616244][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.625188][ T5882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   83.633001][ T5882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   83.641023][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.648828][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.655982][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   83.664815][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   83.671959][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.680165][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.686271][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.688921][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.703397][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.706250][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.717004][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.718683][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.725268][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.740759][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.743785][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.756440][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.759287][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.763752][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.772190][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.778693][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.785493][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.791757][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.806520][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.821299][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.831934][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.563606][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   84.647921][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   84.720759][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   84.825700][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   84.954044][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   85.117734][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   85.129702][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.137173][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.144790][ T5862] bridge_slave_0: entered allmulticast mode
[   85.152954][ T5862] bridge_slave_0: entered promiscuous mode
[   85.218626][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.226544][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.233724][ T5862] bridge_slave_1: entered allmulticast mode
[   85.241112][ T5862] bridge_slave_1: entered promiscuous mode
[   85.265226][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.272382][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.279523][ T5861] bridge_slave_0: entered allmulticast mode
[   85.287229][ T5861] bridge_slave_0: entered promiscuous mode
[   85.359420][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.366714][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.374260][ T5856] bridge_slave_0: entered allmulticast mode
[   85.381726][ T5856] bridge_slave_0: entered promiscuous mode
[   85.388959][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.396173][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.406167][ T5861] bridge_slave_1: entered allmulticast mode
[   85.414114][ T5861] bridge_slave_1: entered promiscuous mode
[   85.428359][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.435513][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.443156][ T5858] bridge_slave_0: entered allmulticast mode
[   85.450497][ T5858] bridge_slave_0: entered promiscuous mode
[   85.481051][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.488280][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.495666][ T5856] bridge_slave_1: entered allmulticast mode
[   85.503070][ T5856] bridge_slave_1: entered promiscuous mode
[   85.568495][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.575809][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.583077][ T5858] bridge_slave_1: entered allmulticast mode
[   85.590671][ T5858] bridge_slave_1: entered promiscuous mode
[   85.607857][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.649929][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.659484][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.667202][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.674422][ T5857] bridge_slave_0: entered allmulticast mode
[   85.681967][ T5857] bridge_slave_0: entered promiscuous mode
[   85.710406][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.724151][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.737266][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.746620][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.754366][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.761577][ T5857] bridge_slave_1: entered allmulticast mode
[   85.768938][ T5857] bridge_slave_1: entered promiscuous mode
[   85.802908][ T5880] Bluetooth: hci0: command tx timeout
[   85.806328][ T5865] Bluetooth: hci5: command tx timeout
[   85.842736][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.883503][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.888228][ T5865] Bluetooth: hci4: command tx timeout
[   85.897339][ T5880] Bluetooth: hci1: command tx timeout
[   85.898060][ T5874] Bluetooth: hci2: command tx timeout
[   85.903800][ T5877] Bluetooth: hci3: command tx timeout
[   85.913545][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.923989][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.931082][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.938866][ T5859] bridge_slave_0: entered allmulticast mode
[   85.946380][ T5859] bridge_slave_0: entered promiscuous mode
[   86.033961][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.063299][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.070852][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.084064][ T5859] bridge_slave_1: entered allmulticast mode
[   86.094848][ T5859] bridge_slave_1: entered promiscuous mode
[   86.122567][ T5862] team0: Port device team_slave_0 added
[   86.130405][ T5856] team0: Port device team_slave_0 added
[   86.139362][ T5856] team0: Port device team_slave_1 added
[   86.147661][ T5861] team0: Port device team_slave_0 added
[   86.157303][ T5861] team0: Port device team_slave_1 added
[   86.166747][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.197814][ T5858] team0: Port device team_slave_0 added
[   86.224527][ T5862] team0: Port device team_slave_1 added
[   86.292524][ T5858] team0: Port device team_slave_1 added
[   86.302249][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.446114][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.480192][ T5857] team0: Port device team_slave_0 added
[   86.488284][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.499940][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.526481][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.540026][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.547336][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.573760][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.586613][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.593683][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.620298][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.632383][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.639327][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.665659][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.726896][ T5859] team0: Port device team_slave_0 added
[   86.734690][ T5857] team0: Port device team_slave_1 added
[   86.743052][ T5859] team0: Port device team_slave_1 added
[   86.749524][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.756517][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.782618][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.801163][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.808470][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.834494][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.847559][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.855073][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.881179][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.893742][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.900669][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.926942][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.077595][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.085100][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.111139][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.123928][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.130862][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.156822][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.168917][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.176173][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.202084][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.215036][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.222054][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.248011][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.282753][ T5862] hsr_slave_0: entered promiscuous mode
[   87.289184][ T5862] hsr_slave_1: entered promiscuous mode
[   87.383292][ T5858] hsr_slave_0: entered promiscuous mode
[   87.389721][ T5858] hsr_slave_1: entered promiscuous mode
[   87.396236][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   87.402034][ T5858] Cannot create hsr debugfs directory
[   87.430558][ T5856] hsr_slave_0: entered promiscuous mode
[   87.437670][ T5856] hsr_slave_1: entered promiscuous mode
[   87.444074][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   87.449793][ T5856] Cannot create hsr debugfs directory
[   87.510445][ T5861] hsr_slave_0: entered promiscuous mode
[   87.517056][ T5861] hsr_slave_1: entered promiscuous mode
[   87.523538][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   87.529252][ T5861] Cannot create hsr debugfs directory
[   87.584200][ T5857] hsr_slave_0: entered promiscuous mode
[   87.590562][ T5857] hsr_slave_1: entered promiscuous mode
[   87.597213][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   87.602949][ T5857] Cannot create hsr debugfs directory
[   87.710374][ T5859] hsr_slave_0: entered promiscuous mode
[   87.717230][ T5859] hsr_slave_1: entered promiscuous mode
[   87.723733][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[   87.729458][ T5859] Cannot create hsr debugfs directory
[   87.881977][ T5880] Bluetooth: hci0: command tx timeout
[   87.891819][ T5877] Bluetooth: hci5: command tx timeout
[   87.962117][ T5877] Bluetooth: hci3: command tx timeout
[   87.962234][ T5880] Bluetooth: hci1: command tx timeout
[   87.973062][ T5880] Bluetooth: hci4: command tx timeout
[   87.977626][ T5877] Bluetooth: hci2: command tx timeout
[   88.435486][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.450621][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.464795][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.487234][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.556129][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.575926][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.587464][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.620122][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.670012][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   88.690168][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.756783][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.786960][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.850696][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.887467][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.900418][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.914584][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.034257][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.061063][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.076052][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.089333][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.100144][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.154001][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.180949][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   89.224365][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.231601][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.298301][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   89.326107][ T5859] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   89.340724][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.347854][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.357308][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.364452][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.375872][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.382985][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.422175][ T5859] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   89.459238][ T5859] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   89.470986][ T5859] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   89.500929][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.621342][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   89.678647][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.685818][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.720043][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.760252][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.782983][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.790131][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.887671][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   89.908698][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   89.956495][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.963656][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.971253][ T5877] Bluetooth: hci0: command tx timeout
[   89.978074][ T5880] Bluetooth: hci5: command tx timeout
[   90.017272][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.024428][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.038862][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.046015][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.055531][ T5880] Bluetooth: hci2: command tx timeout
[   90.060932][ T5880] Bluetooth: hci1: command tx timeout
[   90.068113][ T5880] Bluetooth: hci3: command tx timeout
[   90.073816][ T5880] Bluetooth: hci4: command tx timeout
[   90.130943][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.138084][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.183319][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.221014][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.359780][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.373647][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   90.406057][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.473260][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.480395][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.551045][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.558220][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.579627][ T5856] veth0_vlan: entered promiscuous mode
[   90.659676][ T5856] veth1_vlan: entered promiscuous mode
[   90.688714][ T5862] veth0_vlan: entered promiscuous mode
[   90.740075][ T5862] veth1_vlan: entered promiscuous mode
[   90.758629][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.841314][ T5856] veth0_macvtap: entered promiscuous mode
[   90.905270][ T5856] veth1_macvtap: entered promiscuous mode
[   91.014264][ T5862] veth0_macvtap: entered promiscuous mode
[   91.053135][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.066407][ T5862] veth1_macvtap: entered promiscuous mode
[   91.128156][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.176721][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.187027][   T43] cfg80211: failed to load regulatory.db
[   91.238217][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.265482][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.290394][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.313074][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.330197][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.344510][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.378953][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.421094][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.437956][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.466196][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.489621][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.590897][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.616114][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.634703][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.776731][ T5861] veth0_vlan: entered promiscuous mode
[   91.795997][ T5861] veth1_vlan: entered promiscuous mode
[   91.838763][ T5857] veth0_vlan: entered promiscuous mode
[   91.845475][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.858321][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.872439][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.880246][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.900598][ T5861] veth0_macvtap: entered promiscuous mode
[   91.971597][ T5857] veth1_vlan: entered promiscuous mode
[   91.994043][ T5861] veth1_macvtap: entered promiscuous mode
[   92.047214][ T5858] veth0_vlan: entered promiscuous mode
[   92.048819][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   92.069409][ T5877] Bluetooth: hci5: command tx timeout
[   92.069426][ T5880] Bluetooth: hci0: command tx timeout
[   92.117603][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.125530][ T5858] veth1_vlan: entered promiscuous mode
[   92.133283][ T5880] Bluetooth: hci4: command tx timeout
[   92.133310][ T5877] Bluetooth: hci3: command tx timeout
[   92.138679][ T5880] Bluetooth: hci1: command tx timeout
[   92.144088][ T5865] Bluetooth: hci2: command tx timeout
[   92.165070][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.186349][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.219096][ T5858] veth0_macvtap: entered promiscuous mode
[   92.272691][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.305143][ T5858] veth1_macvtap: entered promiscuous mode
[   92.324689][ T5857] veth0_macvtap: entered promiscuous mode
[   92.375250][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.387306][ T5857] veth1_macvtap: entered promiscuous mode
[   92.408814][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.429593][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.477991][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.509666][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.522116][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.530634][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.539546][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   92.561894][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.669151][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.748107][ T4438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.810868][ T6018] Bluetooth: MGMT ver 1.23
[   92.816517][ T6018] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[   92.826895][ T2937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.920702][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.965357][ T5859] veth0_vlan: entered promiscuous mode
[   92.971791][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.980461][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.019510][ T2937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.037411][ T6021] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8'.
[   93.044235][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.058911][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.090384][ T2937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.113693][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.135293][ T5859] veth1_vlan: entered promiscuous mode
[   93.276930][ T4438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.297021][ T4438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.307158][ T4438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.308846][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.330086][ T4438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.334580][  T975] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.353621][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.473879][ T5859] veth0_macvtap: entered promiscuous mode
[   93.491660][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.531772][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.532050][  T975] usb 4-1: Using ep0 maxpacket: 32
[   93.609697][  T975] usb 4-1: config 0 has an invalid interface number: 53 but max is 0
[   93.622773][ T5859] veth1_macvtap: entered promiscuous mode
[   93.633566][  T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.662056][  T975] usb 4-1: config 0 has no interface number 0
[   93.702055][  T975] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[   93.711125][  T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.733679][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.751224][  T975] usb 4-1: Product: syz
[   93.755950][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.899171][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.916449][  T975] usb 4-1: Manufacturer: syz
[   94.002658][ T6026] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   94.636609][  T975] usb 4-1: SerialNumber: syz
[   94.668359][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.719831][  T975] usb 4-1: config 0 descriptor??
[   94.728815][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.756352][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.814425][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.881562][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.029117][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.120940][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.398970][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.501350][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.603731][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.706126][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.088881][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.330554][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.596932][ T5979] usb 4-1: USB disconnect, device number 2
[   97.962632][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   98.282025][   T24] usb 2-1: Using ep0 maxpacket: 32
[   98.288976][   T24] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[   98.300909][   T24] usb 2-1: config 0 has no interface number 0
[   98.307488][   T24] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   98.318767][   T24] usb 2-1: config 0 interface 85 has no altsetting 0
[   98.328216][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.335694][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   98.350190][ T6050] loop3: detected capacity change from 0 to 64
[   98.364502][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.367101][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.389075][   T24] usb 2-1: Product: syz
[   98.397897][   T24] usb 2-1: Manufacturer: syz
[   98.423982][   T24] usb 2-1: SerialNumber: syz
[   98.438438][ T6050] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET)
[   98.448846][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'.
[   98.468632][   T24] usb 2-1: config 0 descriptor??
[   98.559068][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.590651][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.909750][   T24] appletouch 2-1:0.85: Geyser mode initialized.
[   98.971168][   T24] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5
[   98.992830][ T6058] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16'.
[   99.116044][ T5999] usb 2-1: USB disconnect, device number 2
[   99.310886][ T5999] appletouch 2-1:0.85: input: appletouch disconnected
[  100.590860][ T6072] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  100.695864][ T5954] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  100.877635][ T6061] syz.3.17 (6061): drop_caches: 2
[  101.225022][ T5954] usb 2-1: Using ep0 maxpacket: 32
[  101.296210][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.339360][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.612923][ T6056] loop2: detected capacity change from 0 to 40427
[  101.661593][ T6056] F2FS-fs (loop2): build fault injection rate: 25
[  101.689282][ T6056] F2FS-fs (loop2): invalid crc value
[  101.709939][ T5954] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  101.719053][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.743923][ T6085] netlink: 152 bytes leftover after parsing attributes in process `syz.5.25'.
[  101.744726][ T5954] usb 2-1: config 0 descriptor??
[  101.788538][ T6056] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4)
[  102.282079][ T5963] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  102.371937][ T5954] usbhid 2-1:0.0: can't add hid device: -32
[  102.388581][ T5954] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  102.401385][ T6092] netlink: 168 bytes leftover after parsing attributes in process `syz.3.27'.
[  102.460064][ T6092] Zero length message leads to an empty skb
[  102.574044][ T5963] usb 6-1: Using ep0 maxpacket: 32
[  102.592080][ T5963] usb 6-1: config 0 has an invalid interface number: 53 but max is 0
[  102.600268][ T5963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.621642][ T5963] usb 6-1: config 0 has no interface number 0
[  102.634169][ T5963] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  102.651638][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.659777][ T5963] usb 6-1: Product: syz
[  102.668241][ T5963] usb 6-1: Manufacturer: syz
[  102.678999][ T5963] usb 6-1: SerialNumber: syz
[  102.757679][ T5963] usb 6-1: config 0 descriptor??
[  102.921231][   T30] audit: type=1326 audit(1755898563.196:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6094 comm="syz.2.28" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f245238ebe9 code=0x0
[  104.923009][ T5877] Bluetooth: hci4: command 0x0405 tx timeout
[  105.450950][ T5864] usb 6-1: USB disconnect, device number 2
[  105.547048][ T5954] usb 2-1: USB disconnect, device number 3
[  106.104090][ T6102] loop3: detected capacity change from 0 to 4096
[  106.276112][ T6105] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.784613][ T6113] loop5: detected capacity change from 0 to 1024
[  107.263329][ T6120] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  108.022909][  T972] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  108.741765][ T6122] loop1: detected capacity change from 0 to 32768
[  108.761684][  T972] usb 1-1: Using ep0 maxpacket: 32
[  108.778800][  T972] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  108.800292][  T972] usb 1-1: config 0 has no interface number 0
[  108.819710][  T972] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.939028][   T73] hfsplus: b-tree write err: -5, ino 4
[  108.981312][  T972] usb 1-1: config 0 interface 85 has no altsetting 0
[  109.014465][ T6122] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  109.014492][ T6122]   allowing incompatible features above 0.0: (unknown version)
[  109.014507][ T6122]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  109.059084][ T6122] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  109.067564][ T6122] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  109.076270][ T6122] bcachefs (loop1): Version upgrade required:
[  109.076270][ T6122] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  109.076270][ T6122] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  109.076270][ T6122]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  109.171948][  T972] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  109.181021][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.190021][ T6122] bcachefs (loop1): dropping and reconstructing all alloc info
[  109.220150][ T6122] bcachefs (loop1): accounting_read... done
[  109.233297][ T6122] bcachefs (loop1): alloc_read... done
[  109.244745][ T6122] bcachefs (loop1): snapshots_read... done
[  109.254598][ T6122] bcachefs (loop1): check_allocations...
[  109.276805][  T972] usb 1-1: Product: syz
[  109.298148][  T972] usb 1-1: Manufacturer: syz
[  109.312676][  T972] usb 1-1: SerialNumber: syz
[  109.328620][ T6102] syz.3.30 (6102) used greatest stack depth: 17672 bytes left
[  109.367880][  T972] usb 1-1: config 0 descriptor??
[  109.382538][ T6122]  done
[  109.392669][ T6122] bcachefs (loop1): going read-write
[  109.417440][ T6122] bcachefs (loop1): done starting filesystem
[  109.509147][ T6138] loop5: detected capacity change from 0 to 128
[  109.601951][ T6138] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  109.717830][ T6138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.670210][  T972] appletouch 1-1:0.85: Geyser mode initialized.
[  110.688043][  T972] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input6
[  111.843582][ T6143] pimreg: entered allmulticast mode
[  111.891830][    C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -1
[  112.342744][ T6154] netlink: 168 bytes leftover after parsing attributes in process `syz.2.42'.
[  112.748661][ T6159] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  112.752600][  T972] usb 1-1: USB disconnect, device number 2
[  112.760465][    C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  113.365673][ T5861] bcachefs (loop1): shutting down
[  113.370860][ T5861] bcachefs (loop1): going read-only
[  113.429551][ T5861] bcachefs (loop1): finished waiting for writes to stop
[  113.443131][ T6162] netlink: 152 bytes leftover after parsing attributes in process `syz.3.45'.
[  113.466326][ T6159] netlink: 'syz.0.44': attribute type 10 has an invalid length.
[  113.589689][ T5861] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  113.640613][ T6169] loop0: detected capacity change from 0 to 1024
[  113.656879][  T972] appletouch 1-1:0.85: input: appletouch disconnected
[  113.671919][ T5861] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  113.734176][ T5861] bcachefs (loop1): unclean shutdown complete, journal seq 11
[  113.781705][ T5924] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  113.801875][ T5861] bcachefs (loop1): done going read-only, filesystem not clean
[  113.867910][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.876205][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.041586][ T5924] usb 4-1: Using ep0 maxpacket: 32
[  114.048981][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.056548][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.507693][ T5924] usb 4-1: config 0 has an invalid interface number: 53 but max is 0
[  114.536470][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.646960][ T5861] bcachefs (loop1): shutdown complete
[  114.663896][ T5924] usb 4-1: config 0 has no interface number 0
[  114.700284][ T5924] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  114.744556][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.801756][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[  114.851585][ T5924] usb 4-1: Product: syz
[  114.861231][ T5924] usb 4-1: Manufacturer: syz
[  114.881522][ T5924] usb 4-1: SerialNumber: syz
[  114.909586][ T5924] usb 4-1: config 0 descriptor??
[  117.738462][ T5979] usb 4-1: USB disconnect, device number 3
[  117.966280][   T30] audit: type=1326 audit(1755898578.256:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.0.50" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f933978ebe9 code=0x0
[  118.253325][ T6188] loop3: detected capacity change from 0 to 4096
[  118.415234][ T6193] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.783346][ T6207] loop2: detected capacity change from 0 to 32768
[  119.881581][ T5979] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  120.029667][ T6209] loop5: detected capacity change from 0 to 32768
[  120.051253][ T6209] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.58 (6209)
[  120.120263][ T6209] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  120.131762][ T6209] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  120.141097][ T6209] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  120.198920][ T6213] loop3: detected capacity change from 0 to 2048
[  120.293959][ T6213] =======================================================
[  120.293959][ T6213] WARNING: The mand mount option has been deprecated and
[  120.293959][ T6213]          and is ignored by this kernel. Remove the mand
[  120.293959][ T6213]          option from the mount to silence this warning.
[  120.293959][ T6213] =======================================================
[  120.350754][ T5979] usb 5-1: Using ep0 maxpacket: 32
[  120.407680][ T6207] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  120.407701][ T6207]   allowing incompatible features above 0.0: (unknown version)
[  120.407712][ T6207]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  120.446127][ T6207] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  120.454328][ T6207] bcachefs (loop2): initializing new filesystem
[  120.467976][ T6207] bcachefs (loop2): going read-write
[  120.477423][ T6209] BTRFS info (device loop5): rebuilding free space tree
[  120.507344][ T6209] BTRFS info (device loop5): disabling free space tree
[  120.513802][ T6213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.514345][ T6209] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  120.532760][ T6209] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  120.553998][ T6209] BTRFS info (device loop5): enabling ssd optimizations
[  120.560948][ T6209] BTRFS info (device loop5): enabling disk space caching
[  120.568709][ T6209] BTRFS info (device loop5): force clearing of disk cache
[  120.575882][ T6209] BTRFS info (device loop5): use zlib compression, level 3
[  120.597304][ T5979] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  120.607822][ T5979] usb 5-1: config 0 has no interface number 0
[  120.614424][ T5979] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  120.625518][ T5979] usb 5-1: config 0 interface 85 has no altsetting 0
[  120.635764][ T6207] bcachefs (loop2): marking superblocks
[  120.636077][ T5979] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  120.652289][ T6207] bcachefs (loop2): initializing freespace
[  120.661118][ T6207] bcachefs (loop2): done initializing freespace
[  120.669625][ T6207] bcachefs (loop2): reading snapshots table
[  120.675569][ T6207] bcachefs (loop2): reading snapshots done
[  120.926039][ T6207] bcachefs (loop2): done starting filesystem
[  120.945252][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.953438][ T5979] usb 5-1: Product: syz
[  120.957808][ T5979] usb 5-1: Manufacturer: syz
[  120.966613][ T5979] usb 5-1: SerialNumber: syz
[  121.125017][ T6240] overlayfs: upper fs needs to support d_type.
[  121.133421][ T6240] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  121.140438][ T6240] overlayfs: failed to set xattr on upper
[  121.146242][ T6240] overlayfs: ...falling back to redirect_dir=nofollow.
[  121.153190][ T6240] overlayfs: ...falling back to index=off.
[  121.159048][ T6240] overlayfs: ...falling back to uuid=null.
[  121.165171][ T6240] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  121.781824][ T5859] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  121.826437][ T6207] syz.2.60 (6207) used greatest stack depth: 15768 bytes left
[  121.894158][ T5979] usb 5-1: config 0 descriptor??
[  122.036167][ T5857] bcachefs (loop2): shutting down
[  122.041261][ T5857] bcachefs (loop2): going read-only
[  122.078764][ T5857] bcachefs (loop2): finished waiting for writes to stop
[  122.191647][ T5979] appletouch 5-1:0.85: Failed to read mode from device.
[  122.211755][ T5979] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  122.240385][ T5857] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4
[  122.356853][ T5857] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  122.366758][ T5979] usb 5-1: USB disconnect, device number 2
[  122.404036][ T5857] bcachefs (loop2): clean shutdown complete, journal seq 5
[  122.425004][ T5857] bcachefs (loop2): marking filesystem clean
[  122.489414][ T6253] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  122.643943][ T5862] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  122.725897][ T5862] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  122.791380][ T6258] binder: 6248:6258 ioctl 4018620d 0 returned -22
[  123.182193][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'.
[  123.316991][ T5857] bcachefs (loop2): shutdown complete
[  123.882159][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[  124.156709][ T3498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.350295][ T3498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.524213][ T3498] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.703650][ T3498] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.043746][ T6278] loop0: detected capacity change from 0 to 32768
[  125.687367][ T3498] bridge_slave_1: left allmulticast mode
[  125.707746][ T5880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  125.719189][ T5880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  125.728158][ T5880] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  125.745925][ T5880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  125.753594][ T5880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  125.822411][ T3498] bridge_slave_1: left promiscuous mode
[  125.828492][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.937046][ T3498] bridge_slave_0: left allmulticast mode
[  125.961523][ T3498] bridge_slave_0: left promiscuous mode
[  125.967680][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.052219][ T6278] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  126.052249][ T6278]   allowing incompatible features above 0.0: (unknown version)
[  126.052264][ T6278]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  126.094664][ T6278] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  126.102998][ T6278] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  126.111156][ T6278] bcachefs (loop0): Version upgrade required:
[  126.111156][ T6278] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  126.111156][ T6278] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  126.111156][ T6278]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  126.224109][ T6278] bcachefs (loop0): dropping and reconstructing all alloc info
[  126.302091][ T6278] bcachefs (loop0): accounting_read... done
[  126.380684][ T6278] bcachefs (loop0): alloc_read... done
[  126.388730][ T6278] bcachefs (loop0): snapshots_read... done
[  126.423315][ T6278] bcachefs (loop0): check_allocations... done
[  126.482801][ T6278] bcachefs (loop0): going read-write
[  126.538225][ T6278] bcachefs (loop0): done starting filesystem
[  127.193074][ T6303] process 'syz.4.74' launched '/dev/fd/6' with NULL argv: empty string added
[  127.802915][ T5880] Bluetooth: hci5: command tx timeout
[  129.880975][ T6303] loop4: detected capacity change from 0 to 1024
[  130.280186][ T5880] Bluetooth: hci5: command tx timeout
[  130.995874][ T6313] 9pnet: Could not find request transport: fd0x0000000000000005
[  132.136973][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  132.143496][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  132.362262][ T5880] Bluetooth: hci5: command tx timeout
[  132.622248][ T6330] loop2: detected capacity change from 0 to 1024
[  133.735293][ T6338] cgroup: fork rejected by pids controller in /syz4
[  133.835945][ T6338] loop4: detected capacity change from 0 to 1024
[  135.078805][ T5880] Bluetooth: hci5: command tx timeout
[  135.664973][ T6419] netlink: 'syz.1.83': attribute type 10 has an invalid length.
[  135.678627][ T6338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.780528][ T6491] loop1: detected capacity change from 0 to 1024
[  136.326107][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.437765][ T5858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.448345][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.490526][ T3498] bond0 (unregistering): Released all slaves
[  136.536098][ T6302] pimreg: entered allmulticast mode
[  136.651435][ T5856] bcachefs (loop0): shutting down
[  136.660237][ T5856] bcachefs (loop0): going read-only
[  136.669116][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.678096][ T6419] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  136.687480][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.707345][ T5856] bcachefs (loop0): finished waiting for writes to stop
[  136.715913][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.733030][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  136.754300][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.770417][ T5856] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10
[  136.774623][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.788200][ T5856] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10
[  136.807111][ T5856] bcachefs (loop0): unclean shutdown complete, journal seq 11
[  136.818181][ T4438] hfsplus: b-tree write err: -5, ino 4
[  136.824933][ T5856] bcachefs (loop0): done going read-only, filesystem not clean
[  136.880332][ T6422] bond0: (slave batadv0): Releasing backup interface
[  136.890541][ T5856] bcachefs (loop0): shutdown complete
[  136.901713][    T9] usb 6-1: Using ep0 maxpacket: 32
[  136.916051][    T9] usb 6-1: config 0 has an invalid interface number: 53 but max is 0
[  136.924500][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.950056][    T9] usb 6-1: config 0 has no interface number 0
[  136.977972][    T9] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  137.007584][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.041079][    T9] usb 6-1: Product: syz
[  137.051250][    T9] usb 6-1: Manufacturer: syz
[  137.064941][    T9] usb 6-1: SerialNumber: syz
[  137.098680][    T9] usb 6-1: config 0 descriptor??
[  137.311324][ T6575] loop4: detected capacity change from 0 to 32768
[  138.341585][ T5979] usb 6-1: USB disconnect, device number 3
[  138.763749][ T6575] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  138.763771][ T6575]   allowing incompatible features above 0.0: (unknown version)
[  138.763782][ T6575]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  138.802656][ T6575] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  138.811421][ T6575] bcachefs (loop4): initializing new filesystem
[  139.282248][ T6575] bcachefs (loop4): going read-write
[  139.655627][ T6593] 9pnet_fd: Insufficient options for proto=fd
[  139.684762][ T6575] bcachefs (loop4): marking superblocks
[  139.697697][ T6575] bcachefs (loop4): initializing freespace
[  139.706425][ T6575] bcachefs (loop4): done initializing freespace
[  139.715238][ T6575] bcachefs (loop4): reading snapshots table
[  139.721142][ T6575] bcachefs (loop4): reading snapshots done
[  139.798595][ T6599] loop1: detected capacity change from 0 to 2048
[  139.826627][ T6575] bcachefs (loop4): done starting filesystem
[  139.887574][ T6599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.391630][ T6603] overlayfs: failed to resolve './file1': -2
[  142.918155][ T3498] hsr_slave_0: left promiscuous mode
[  142.971500][ T5861] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  142.980013][ T5861] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  143.029215][ T3498] hsr_slave_1: left promiscuous mode
[  143.041962][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.078665][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.160656][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.169114][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.255750][ T3498] veth1_macvtap: left promiscuous mode
[  143.261411][ T3498] veth0_macvtap: left promiscuous mode
[  143.268653][ T3498] veth1_vlan: left promiscuous mode
[  143.274111][ T3498] veth0_vlan: left promiscuous mode
[  144.713714][   T30] audit: type=1326 audit(1755898604.846:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.97" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f933978ebe9 code=0x0
[  145.206102][ T6616] cgroup: fork rejected by pids controller in /syz5
[  145.358809][ T6616] loop5: detected capacity change from 0 to 1024
[  145.598778][ T6645] loop2: detected capacity change from 0 to 1024
[  145.862871][ T6616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.602226][ T5874] Bluetooth: hci5: command 0x0405 tx timeout
[  146.679956][ T5859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.775096][ T6773] netlink: 'syz.5.100': attribute type 10 has an invalid length.
[  146.839367][ T3498] team0 (unregistering): Port device team_slave_1 removed
[  146.875020][ T3498] team0 (unregistering): Port device team_slave_0 removed
[  146.890451][ T6775] loop5: detected capacity change from 0 to 1024
[  147.764485][ T6280] chnl_net:caif_netlink_parms(): no params data found
[  147.913442][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.945841][ T6773] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  147.972240][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.994564][ T5858] bcachefs (loop4): shutting down
[  147.999593][ T5858] bcachefs (loop4): going read-only
[  148.004958][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.012636][   T36] hfsplus: b-tree write err: -5, ino 4
[  148.073509][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.080873][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.096002][ T5858] bcachefs (loop4): finished waiting for writes to stop
[  148.101235][ T6778] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  148.123054][ T5858] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11
[  148.346758][ T6774] bond0: (slave batadv0): Releasing backup interface
[  148.359007][ T5858] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11
[  148.898023][ T5858] bcachefs (loop4): clean shutdown complete, journal seq 12
[  149.047919][ T5858] bcachefs (loop4): marking filesystem clean
[  149.179764][ T5858] bcachefs (loop4): shutdown complete
[  149.502940][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.522153][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.529323][ T6280] bridge_slave_0: entered allmulticast mode
[  149.546147][ T6280] bridge_slave_0: entered promiscuous mode
[  149.555197][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.570403][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.578822][ T6280] bridge_slave_1: entered allmulticast mode
[  149.606937][ T6791] loop0: detected capacity change from 0 to 2048
[  149.611019][ T6280] bridge_slave_1: entered promiscuous mode
[  149.664158][ T6791] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.053908][ T6796] overlayfs: upper fs needs to support d_type.
[  150.072252][ T6796] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  150.079319][ T6796] overlayfs: failed to set xattr on upper
[  150.085931][ T6796] overlayfs: ...falling back to redirect_dir=nofollow.
[  150.093499][ T6796] overlayfs: ...falling back to index=off.
[  150.099370][ T6796] overlayfs: ...falling back to uuid=null.
[  150.106501][ T6796] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  150.558181][ T6280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.580223][ T5856] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  150.612010][ T6280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.621291][ T5856] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  150.759164][ T6280] team0: Port device team_slave_0 added
[  150.793526][ T6280] team0: Port device team_slave_1 added
[  151.223029][   T30] audit: type=1326 audit(1755898611.506:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.5.110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e00d8ebe9 code=0x0
[  151.359773][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  151.370218][ T2909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.372074][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  151.388418][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  151.403581][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.410510][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.428956][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  151.444003][ T6280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.445503][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.465394][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.473836][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.500029][ T6280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.631049][ T2909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.668021][ T6280] hsr_slave_0: entered promiscuous mode
[  151.689130][ T6280] hsr_slave_1: entered promiscuous mode
[  151.786941][ T2909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.033354][ T2909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.379983][ T6806] loop2: detected capacity change from 0 to 32768
[  152.494979][ T6806] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  152.495006][ T6806]   allowing incompatible features above 0.0: (unknown version)
[  152.495020][ T6806]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  152.533651][ T6806] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  152.543222][ T6806] bcachefs (loop2): initializing new filesystem
[  152.556848][ T6806] bcachefs (loop2): going read-write
[  152.597368][ T6806] bcachefs (loop2): marking superblocks
[  152.615106][ T6806] bcachefs (loop2): initializing freespace
[  152.624796][ T6806] bcachefs (loop2): done initializing freespace
[  152.633814][ T6806] bcachefs (loop2): reading snapshots table
[  152.641847][ T6806] bcachefs (loop2): reading snapshots done
[  152.677790][ T6806] bcachefs (loop2): done starting filesystem
[  152.732737][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  152.741066][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  152.754579][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  152.763604][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  153.782401][ T5874] Bluetooth: hci0: command tx timeout
[  153.816195][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  154.198884][ T2909] bridge_slave_1: left allmulticast mode
[  154.211550][ T2909] bridge_slave_1: left promiscuous mode
[  154.217959][ T2909] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.244719][ T2909] bridge_slave_0: left allmulticast mode
[  154.260608][ T2909] bridge_slave_0: left promiscuous mode
[  154.280199][ T2909] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.377296][ T5857] bcachefs (loop2): shutting down
[  154.448537][ T5857] bcachefs (loop2): going read-only
[  154.454894][ T5857] bcachefs (loop2): finished waiting for writes to stop
[  154.467697][ T5857] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4
[  154.517485][ T5857] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  154.716134][ T5857] bcachefs (loop2): clean shutdown complete, journal seq 5
[  154.835929][ T5857] bcachefs (loop2): marking filesystem clean
[  154.971066][ T5857] bcachefs (loop2): shutdown complete
[  155.439553][ T2909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.454584][ T2909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.470190][ T2909] bond0 (unregistering): Released all slaves
[  155.812097][ T5874] Bluetooth: hci0: command tx timeout
[  155.882704][ T5874] Bluetooth: hci4: command tx timeout
[  155.944614][ T6800] chnl_net:caif_netlink_parms(): no params data found
[  156.473702][ T6280] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  156.517278][ T6280] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  156.703460][ T6280] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  156.880999][ T6280] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  157.039883][ T2909] hsr_slave_0: left promiscuous mode
[  157.103137][ T2909] hsr_slave_1: left promiscuous mode
[  157.189950][ T2909] veth1_macvtap: left promiscuous mode
[  157.195747][ T2909] veth0_macvtap: left promiscuous mode
[  157.203788][ T2909] veth1_vlan: left promiscuous mode
[  157.209373][ T2909] veth0_vlan: left promiscuous mode
[  157.331096][ T6859] netlink: 148 bytes leftover after parsing attributes in process `syz.4.121'.
[  157.342852][ T6859] netlink: 108 bytes leftover after parsing attributes in process `syz.4.121'.
[  157.859719][ T2909] pimreg (unregistering): left allmulticast mode
[  157.883525][ T5874] Bluetooth: hci0: command tx timeout
[  157.894786][ T6861] ------------[ cut here ]------------
[  157.902845][ T6861] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46
[  157.914540][ T6861] shift exponent -4 is negative
[  157.919526][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.4.122 Not tainted syzkaller #0 PREEMPT(full) 
[  157.919555][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  157.919569][ T6861] Call Trace:
[  157.919578][ T6861]  <TASK>
[  157.919588][ T6861]  dump_stack_lvl+0x189/0x250
[  157.919626][ T6861]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.919656][ T6861]  ? __pfx__printk+0x10/0x10
[  157.919708][ T6861]  ubsan_epilogue+0xa/0x40
[  157.919742][ T6861]  __ubsan_handle_shift_out_of_bounds+0x386/0x410
[  157.919791][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.919824][ T6861]  ? __kmalloc_noprof+0x29b/0x4f0
[  157.919868][ T6861]  pcl726_attach+0xac4/0xd50
[  157.919920][ T6861]  comedi_device_attach+0x51f/0x720
[  157.919965][ T6861]  comedi_unlocked_ioctl+0x5ff/0x1020
[  157.919992][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.920029][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.920060][ T6861]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  157.920122][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.920150][ T6861]  ? __lock_acquire+0xab9/0xd20
[  157.920210][ T6861]  ? __fget_files+0x2a/0x420
[  157.920252][ T6861]  ? __fget_files+0x2a/0x420
[  157.920287][ T6861]  ? __fget_files+0x3a0/0x420
[  157.920322][ T6861]  ? __fget_files+0x2a/0x420
[  157.920362][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.920389][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.920418][ T6861]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  157.920446][ T6861]  __se_sys_ioctl+0xfc/0x170
[  157.920479][ T6861]  do_syscall_64+0xfa/0x3b0
[  157.920519][ T6861]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.920552][ T6861]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.920575][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  157.920601][ T6861]  ? exc_page_fault+0x9f/0xf0
[  157.920637][ T6861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.920660][ T6861] RIP: 0033:0x7f334898ebe9
[  157.920681][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.920701][ T6861] RSP: 002b:00007f33498d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  157.920725][ T6861] RAX: ffffffffffffffda RBX: 00007f3348bb5fa0 RCX: 00007f334898ebe9
[  157.920743][ T6861] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000003
[  157.920760][ T6861] RBP: 00007f3348a11e19 R08: 0000000000000000 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  157.920775][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.920789][ T6861] R13: 00007f3348bb6038 R14: 00007f3348bb5fa0 R15: 00007ffe13947548
[  157.920827][ T6861]  </TASK>
[  157.920944][ T6861] ---[ end trace ]---
[  157.971818][ T5874] Bluetooth: hci4: command tx timeout
[  158.185715][ T6861] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  158.192922][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.4.122 Not tainted syzkaller #0 PREEMPT(full) 
[  158.202103][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  158.212147][ T6861] Call Trace:
[  158.215407][ T6861]  <TASK>
[  158.218318][ T6861]  dump_stack_lvl+0x99/0x250
[  158.222897][ T6861]  ? __asan_memcpy+0x40/0x70
[  158.227492][ T6861]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.232678][ T6861]  ? __pfx__printk+0x10/0x10
[  158.237281][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.242909][ T6861]  vpanic+0x281/0x750
[  158.246899][ T6861]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.252114][ T6861]  ? __pfx_vpanic+0x10/0x10
[  158.256638][ T6861]  panic+0xb9/0xc0
[  158.260368][ T6861]  ? __pfx_panic+0x10/0x10
[  158.264785][ T6861]  ? __pfx__printk+0x10/0x10
[  158.269385][ T6861]  check_panic_on_warn+0x89/0xb0
[  158.274324][ T6861]  __ubsan_handle_shift_out_of_bounds+0x386/0x410
[  158.280749][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.286378][ T6861]  ? __kmalloc_noprof+0x29b/0x4f0
[  158.291409][ T6861]  pcl726_attach+0xac4/0xd50
[  158.296010][ T6861]  comedi_device_attach+0x51f/0x720
[  158.301223][ T6861]  comedi_unlocked_ioctl+0x5ff/0x1020
[  158.306590][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.312304][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.317931][ T6861]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  158.323783][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.329424][ T6861]  ? __lock_acquire+0xab9/0xd20
[  158.334293][ T6861]  ? __fget_files+0x2a/0x420
[  158.338886][ T6861]  ? __fget_files+0x2a/0x420
[  158.343476][ T6861]  ? __fget_files+0x3a0/0x420
[  158.348150][ T6861]  ? __fget_files+0x2a/0x420
[  158.352750][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.358379][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.364005][ T6861]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  158.369815][ T6861]  __se_sys_ioctl+0xfc/0x170
[  158.374492][ T6861]  do_syscall_64+0xfa/0x3b0
[  158.379019][ T6861]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.384215][ T6861]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.390273][ T6861]  ? srso_alias_return_thunk+0x5/0xfbef5
[  158.395985][ T6861]  ? exc_page_fault+0x9f/0xf0
[  158.400662][ T6861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.406549][ T6861] RIP: 0033:0x7f334898ebe9
[  158.410949][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.430541][ T6861] RSP: 002b:00007f33498d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  158.439131][ T6861] RAX: ffffffffffffffda RBX: 00007f3348bb5fa0 RCX: 00007f334898ebe9
[  158.447088][ T6861] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000003
[  158.455048][ T6861] RBP: 00007f3348a11e19 R08: 0000000000000000 R09: 0000000000000000
[  158.463010][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.470974][ T6861] R13: 00007f3348bb6038 R14: 00007f3348bb5fa0 R15: 00007ffe13947548
[  158.478956][ T6861]  </TASK>
[  158.482183][ T6861] Kernel Offset: disabled
[  158.486525][ T6861] Rebooting in 86400 seconds..