last executing test programs:

17m52.193277686s ago: executing program 2 (id=23):
r0 = socket(0x10, 0x80002, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getitimer(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpquota}, {@grpid}]}, 0x4, 0x4fe, &(0x7f0000001080)="$eJzs3c9vU8kdAPDvc2ISgiHQcmgrtVBKSyuE8wOIED0ULq0qhFQV9dQDpImJotg4ihNKUqSGY+9Vi9RT+yf01kMlTj301lv7B9DDSuwu2hVZaQ9evWfnB4mDs0sSg/35SC/vzYzj74ydmbEncSaAnnU2IlYj4khE3IuI4WZ+0jziRuNIb/fq5eOptZePp5Ko1+98lGTlaV5s+Z7UseZ9DkbEL38W8ZtkZ9za8srcZLlcWmimR+qV+ZHa8sql2VwzZ3xibGL02uWr4/vW1jOVv7/46eytX/3zH99+/p/VH/0urVbhD8ezsq3t2E+NpuejsCWvPyJuHUSwDulv/vzw/kl729ci4lzW/4ejL3s2AYBuVq8PR314axoA6Hbp+/9CJLlicy2gELlcsdhYwzsdQ7lytbZ4cbi69GA6sjWsk5HP3Z8tl0aba4UnI5+k6bHsejM9vi19OSJORcQfB45m6eJUtTzdyRc+ANDDjm2b/z8daMz/AECXG+x0BQCAQ2f+B4DeY/4HgN7zJeZ/nw4EgC7h/T8A9B7zPwD0nrbz/5PDqQcAcCh+cft2etTXmv//evrh8tKPCw8vTZdqc8XK0lRxqrowX5ypVmfKpeJUvd7u/srV6vzYlY1kbXnlbqW69GDx7mxlcqZ0t5Q/4PYAAO2dOvPsf0lErF4/mh2R7eXwp+xsrobulut0BYCO6et0BYCO8Xke6F17eI9vGQC6XIstel+z658IPbX5K7yvLnyz1fp/g4kfupv1f+hdX239/yf7Xg/g8Fn/h95Vryf2/AeAHmONH3ir3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjypkR5IrZnuBr6Zfc8VixPGIOBn55P5suTQaESci4r8D+YE0PdbpSgMAbyn3QdLc/+vC8PnC9tIjyWcD2TkifvuXO39+NLm4uDCW5n+8kb/4tJk/fqQTDQAAtrqxM2t9n8/1eXzdq5ePp9aPQ6tfRLy42dhcNI271jwaJf3Rn50HIx8RQ58kzXRD2o6+fYi/+iQivrHZ/kdbIhSyNZDGzqfb46exjx9A/M3Hf3v83Gvxc1lZes5nj8XX96Eu0Gue3WyMk82+l3axZv/Lxdns3Lr/D2Yj1NtbH//Wdox/uY3xr29H/CTr82c30m+uyYsr//r5jsz6cKPsScS3+lvFTzbiJ7uMv+f32MYkvnNut7L6XyMuxO9bxm+oZMPsyGJlfqS2vHJptjI5U5opPRgfnxibGL12+er4SLZGPXI/WS2N/rtVjA+vXzyxW/y0/UPRuv2Dbdr//T22/2+f3/v1d98Q/4ffa/38n35D/HRO/MEe408O3dh1++40/vQu7W/3/F9sH7o+EBHP/78yvceqAgCHoLa8MjdZLpcW2lykrzXb3cbFe3FxdHtOrEa8CxVz8S5ddHpkAg7aZqfvdE0AAAAAAAAAAAAAAIDd1JZX5gbiYD9O1Ok2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0L2+CAAA//+JH82O")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3373526a01e35"], 0x1c}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x5f9a6b6f3b17605e, 0x0)

17m50.505596106s ago: executing program 2 (id=27):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none, 0x7ff}, 0xe)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000300))
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/46, 0x2e}], 0x1, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000008180)={0x2020}, 0x205a)

17m48.933737615s ago: executing program 2 (id=30):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

17m44.507939689s ago: executing program 2 (id=40):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00')

17m39.921149515s ago: executing program 2 (id=51):
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000412, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16], 0x1, 0x9ebf, &(0x7f000000b4c0)="$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")
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1f}}, './file0\x00'})
sendmsg$nl_route(r0, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc4})
syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f, 0x10000}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0x400c6615, &(0x7f0000000340))
syz_emit_vhci(&(0x7f0000000e40)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x3}}}, 0x6)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000026c0)=ANY=[@ANYBLOB='iocharset=cp874,discard,fmask=00000000000000000003777,uid=', @ANYRESHEX, @ANYRES8, @ANYBLOB="b71fe84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0a9ef82589ee2fac726c31d20f98aa1f9761873cd604dab0d22b4b321f4c20044c5a8e018b51e52342814e4c33a7f4807781862b524b303c604203d95ef2f4feb698f5a4f3983ca0adeae004caae16969e9000a6a9d85bf9d4ee333cfeb763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b9883c40449a94847df80ca39e9394f8de077bfd7f0c81e733fe8ad33c339a0f92997d172adcde0c53c97cce8a0f42c862a0c88c9a25ccf6799b85dadc245f608d", @ANYBLOB="2c616c6c6f775f753d30303030303030a552303030303030303030303030303030372c646973636172642c00f7d4dceab5ea879b952debb95a4bd62fee1c5818ede60164889e83a588b4e8d85d0c30a28fa4ac4bf29b850e0f3403fda87be3922e7cff7f0000dd9fd4b9ef9af86ead00000000"], 0x1, 0x150c, &(0x7f0000003fc0)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400)=ANY=[], 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)

17m37.498444508s ago: executing program 2 (id=58):
r0 = socket$inet6(0xa, 0x3, 0x7)
socket(0xa, 0x3, 0x6)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150b, &(0x7f0000000480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
syz_emit_vhci(&(0x7f0000001980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x428}}}, 0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaae9c7f8f1000028006400000002907800000000e000000211009078e0000002000000"], 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0)

17m36.260691775s ago: executing program 32 (id=58):
r0 = socket$inet6(0xa, 0x3, 0x7)
socket(0xa, 0x3, 0x6)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150b, &(0x7f0000000480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
syz_emit_vhci(&(0x7f0000001980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x428}}}, 0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaae9c7f8f1000028006400000002907800000000e000000211009078e0000002000000"], 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0)

17m16.116293908s ago: executing program 0 (id=99):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@nodiscard}, {@fault_type={'fault_type', 0x3d, 0x291}}, {@acl}, {@alloc_mode_reuse}, {@jqfmt_vfsv0}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
openat(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0x2020)

17m12.548701008s ago: executing program 0 (id=109):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r4 = syz_open_dev$cec(0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TIOCPKT(r3, 0x5420, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000480)={{0x80, 0x8}, 'port0\x00', 0x66, 0x2a1e76d0bd0a5514, 0x4, 0x0, 0x71, 0x6e17, 0x0, 0x0, 0x2})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00'})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000007c0)={{0x82}, 'port1\x00', 0x0, 0x121010, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x300, 0x7})

17m7.905056204s ago: executing program 0 (id=118):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001800), 0x4)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000480), 0x6e, 0x0, 0x0, &(0x7f00000007c0)}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_io_uring_setup(0x49e2, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000480)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

17m3.752572457s ago: executing program 0 (id=126):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$vim2m(0x0, 0x10001, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000001080)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
io_uring_setup(0x8a8, 0x0)
mq_open(&(0x7f000084dff0)='!senin\xd58\xd9\x03+\t\xe1\xabx\x00', 0x6e93ebbbcc0884f2, 0x88, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200]}}})
ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800})
close_range(r5, 0xffffffffffffffff, 0x0)

17m2.739355133s ago: executing program 0 (id=127):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setrlimit(0x8, &(0x7f0000000180)={0xffffffffffff8001, 0x7ff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0)
creat(0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000400), 0x1, 0x4b9, &(0x7f0000000480)="$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")
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

17m0.530369245s ago: executing program 0 (id=130):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffeff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
socket$inet6(0x10, 0x4, 0x6)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400})
setsockopt$sock_int(r3, 0x1, 0x4b, 0x0, 0x0)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(0xffffffffffffffff)

16m44.768006603s ago: executing program 33 (id=130):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffeff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
socket$inet6(0x10, 0x4, 0x6)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400})
setsockopt$sock_int(r3, 0x1, 0x4b, 0x0, 0x0)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(0xffffffffffffffff)

1m17.041717234s ago: executing program 5 (id=3061):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2b8, &(0x7f0000001080)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000019080)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff8500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000019140))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000070000000000", @ANYRES32, @ANYBLOB="00000000000000000000408b0000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

1m15.617810291s ago: executing program 5 (id=3064):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$UHID_CREATE2(r1, &(0x7f00000000c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x38, 0x5, 0x4, 0x5, 0x2, 0x8001, "2031349908396de54e4883b8c2ea5a91ba4bba8b0243f83ca15d6691a181442b352eabad237aa3c32901cfc358e812448990e87326eeda72"}}, 0x150)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m13.362777354s ago: executing program 5 (id=3075):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unshare(0x22020400)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)

1m13.303965055s ago: executing program 5 (id=3076):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) (async)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x940, 0x81) (async)
r3 = dup2(r0, r1)
move_mount(r2, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f0000000440)='./file0/file0\x00', 0x330)
r4 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={<r5=>0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000140)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r6, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r7, @ANYBLOB=',uid=', @ANYRESHEX=r5, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") (async)
setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v3={0x3000000, [{0x9, 0x2427}, {0x8, 0x874}], r6}, 0x18, 0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r8=>r4, {0x80, 0x9d7}}, './file0\x00'})
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000280)={0x9a0000, 0x4, 0x80, r8, 0x0, &(0x7f0000000080)={0x9b0941, 0x7fff, '\x00', @p_u8=&(0x7f0000000040)=0x81}}) (async)
umount2(&(0x7f00000004c0)='./file0\x00', 0x0)

1m13.194532055s ago: executing program 5 (id=3078):
socket$l2tp6(0xa, 0x2, 0x73)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x8400)
capget(0x0, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x81})
r0 = add_key$user(0x0, &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000280)="f2000c67926c47a8a3c5", 0xa, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = dup(0xffffffffffffffff)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x20000, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x2000)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4}]})
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

1m11.859266273s ago: executing program 5 (id=3086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c282f415497946f033be026869d000000", @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="0800b70025000000080026006c09000008002700030000000800a00076090000"], 0x3c}}, 0x40020)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x428, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x575, 0x6b}}}}, [@NL80211_ATTR_TX_RATES={0x310, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4e09, 0x3, 0x5, 0x1, 0xb3, 0x6, 0x4000, 0x81]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x6c, 0x5, 0xc, 0x16, 0x12, 0x48, 0x48, 0x9, 0x2, 0x60, 0x5, 0x1b, 0x36, 0x3, 0x48, 0x60, 0x2, 0x1b, 0x2]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0xa}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x2, 0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x3}, {0x4, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x3, 0x9}, {0x3, 0x8}, {0x1}, {0x7, 0x9}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x1}, {0x5, 0xa}, {0x7, 0x6}, {0x4, 0x6}, {0x6, 0x3}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x9}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x7}, {0x7, 0x2}, {0x6, 0x3}, {0x4, 0x6}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x7}, {0x3, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x3, 0xa}, {0x7, 0x6}, {0x5, 0x9}, {0x2, 0x3}, {0x4, 0x5}, {0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x4, 0x5}, {0x7}, {0x1, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x6c, 0x36, 0x1b, 0x16, 0x6c, 0x2, 0x1b, 0x60, 0x5, 0x18, 0x60, 0x1, 0x18, 0x30, 0x18, 0x9, 0x1b, 0x16, 0x18, 0x5]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x8}, {0x7, 0x2}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x5, 0x9}, {0x3, 0xa}, {0x3, 0x6}, {0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x5}, {0x6, 0x8}, {0x1, 0x5}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x6, 0x2}, {0x5, 0x8}, {0x2, 0x1}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x8}, {0x3, 0x8}, {0x6}, {0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0x6}, {0x2, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xffff, 0x4, 0x2, 0x4, 0x1, 0xffff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x2, 0x18, 0x6, 0x2, 0x4, 0x36, 0x60, 0x1, 0x1d8b676b53a687f, 0x60, 0x1b, 0x4, 0xc, 0x6c, 0x12, 0x4, 0x3, 0x36, 0x16, 0x16, 0x4, 0x48, 0x6c, 0x48, 0x6c, 0x4, 0x66, 0x48, 0x6c, 0x3, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0x7, 0xe, 0xfeff, 0x9dde, 0x2, 0x7ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfff8, 0x5, 0x0, 0x0, 0xc22, 0xb, 0x98]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x6, 0x9, 0x9, 0x8711, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x3, 0x4, 0x7, 0x6, 0x1, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0xeab, 0x8, 0x1, 0x5b, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xffff, 0x4a, 0x4, 0x4, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x60, 0xda, 0x4, 0x24, 0x9, 0x30, 0x24, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf3, 0x9000, 0xeadf, 0x2, 0x3, 0x2, 0x8]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8001, 0x3, 0x7, 0x6, 0x5, 0x7097, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xffff, 0x5, 0x9, 0x9, 0x2, 0xeb7, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x200, 0x40, 0x6, 0x0, 0x2, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0xa}, {0x1}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x3}, {0x5}, {0x5, 0x4}, {0x2, 0x3}, {0x7, 0x1}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0xa}, {0x2, 0x3}, {0x7, 0x8}, {0x1, 0x5}, {0x7, 0x4}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x8}, {0x7}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x12, 0x9, 0x24, 0x30, 0x18, 0x60, 0x0, 0x5, 0x36, 0x48, 0x1, 0x30, 0x16, 0x5, 0x18, 0x5, 0x9, 0x18, 0x24, 0x48, 0x9, 0x12, 0x48, 0x1b, 0x60, 0x6c, 0x48, 0xb, 0x13, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc, 0xb, 0xb, 0x48, 0x30, 0x48, 0x36, 0x2, 0x4, 0x48, 0x1c, 0x1b, 0x18, 0x60, 0xb, 0x24, 0x16, 0x30, 0x3, 0xb, 0x5, 0x18, 0x4, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x47, 0x1, 0x0, 0x40, 0x4, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1b3e, 0x6, 0xff22, 0xba4b, 0x9, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x4, 0x1, 0xfffa, 0x100, 0x6]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x4, 0x8, 0x9, 0xd1, 0xe18e, 0x6, 0x588f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8ea, 0x101, 0x7ff, 0x2, 0x1, 0x8, 0x6]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0xc, 0xb, 0xc, 0x30, 0x4, 0x1b, 0x4, 0x24, 0x6, 0x48, 0x1, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x40, 0x8, 0x6, 0xfff7, 0x3697, 0x1]}}]}]}]}, 0x428}, 0x1, 0x0, 0x0, 0x40}, 0x20000100)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000e9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r5}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
signalfd(r7, &(0x7f0000000000)={[0x4]}, 0x8)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r8, @ANYBLOB="08002600e916"], 0x34}}, 0x0)

1m11.332238886s ago: executing program 34 (id=3086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c282f415497946f033be026869d000000", @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="0800b70025000000080026006c09000008002700030000000800a00076090000"], 0x3c}}, 0x40020)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x428, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x575, 0x6b}}}}, [@NL80211_ATTR_TX_RATES={0x310, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4e09, 0x3, 0x5, 0x1, 0xb3, 0x6, 0x4000, 0x81]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x6c, 0x5, 0xc, 0x16, 0x12, 0x48, 0x48, 0x9, 0x2, 0x60, 0x5, 0x1b, 0x36, 0x3, 0x48, 0x60, 0x2, 0x1b, 0x2]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0xa}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x1}, {0x6, 0x4}, {0x2, 0x7}, {0x2, 0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x3}, {0x4, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x3, 0x9}, {0x3, 0x8}, {0x1}, {0x7, 0x9}, {0x6, 0x8}, {0x5, 0x4}, {0x6, 0x1}, {0x5, 0xa}, {0x7, 0x6}, {0x4, 0x6}, {0x6, 0x3}, {0x2, 0x7}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x9}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x7}, {0x7, 0x2}, {0x6, 0x3}, {0x4, 0x6}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x7}, {0x3, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x3, 0xa}, {0x7, 0x6}, {0x5, 0x9}, {0x2, 0x3}, {0x4, 0x5}, {0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x4, 0x5}, {0x7}, {0x1, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x6c, 0x36, 0x1b, 0x16, 0x6c, 0x2, 0x1b, 0x60, 0x5, 0x18, 0x60, 0x1, 0x18, 0x30, 0x18, 0x9, 0x1b, 0x16, 0x18, 0x5]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x8}, {0x7, 0x2}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x5, 0x9}, {0x3, 0xa}, {0x3, 0x6}, {0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x5}, {0x6, 0x8}, {0x1, 0x5}, {0x5, 0x7}, {0x4, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x6, 0x2}, {0x5, 0x8}, {0x2, 0x1}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x8}, {0x3, 0x8}, {0x6}, {0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0x6}, {0x2, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xffff, 0x4, 0x2, 0x4, 0x1, 0xffff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x2, 0x18, 0x6, 0x2, 0x4, 0x36, 0x60, 0x1, 0x1d8b676b53a687f, 0x60, 0x1b, 0x4, 0xc, 0x6c, 0x12, 0x4, 0x3, 0x36, 0x16, 0x16, 0x4, 0x48, 0x6c, 0x48, 0x6c, 0x4, 0x66, 0x48, 0x6c, 0x3, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0x7, 0xe, 0xfeff, 0x9dde, 0x2, 0x7ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfff8, 0x5, 0x0, 0x0, 0xc22, 0xb, 0x98]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x6, 0x9, 0x9, 0x8711, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x3, 0x4, 0x7, 0x6, 0x1, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0xeab, 0x8, 0x1, 0x5b, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xffff, 0x4a, 0x4, 0x4, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x60, 0xda, 0x4, 0x24, 0x9, 0x30, 0x24, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf3, 0x9000, 0xeadf, 0x2, 0x3, 0x2, 0x8]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8001, 0x3, 0x7, 0x6, 0x5, 0x7097, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xffff, 0x5, 0x9, 0x9, 0x2, 0xeb7, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x200, 0x40, 0x6, 0x0, 0x2, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0xa}, {0x1}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x3}, {0x5}, {0x5, 0x4}, {0x2, 0x3}, {0x7, 0x1}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0xa}, {0x2, 0x3}, {0x7, 0x8}, {0x1, 0x5}, {0x7, 0x4}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x8}, {0x7}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x12, 0x9, 0x24, 0x30, 0x18, 0x60, 0x0, 0x5, 0x36, 0x48, 0x1, 0x30, 0x16, 0x5, 0x18, 0x5, 0x9, 0x18, 0x24, 0x48, 0x9, 0x12, 0x48, 0x1b, 0x60, 0x6c, 0x48, 0xb, 0x13, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc, 0xb, 0xb, 0x48, 0x30, 0x48, 0x36, 0x2, 0x4, 0x48, 0x1c, 0x1b, 0x18, 0x60, 0xb, 0x24, 0x16, 0x30, 0x3, 0xb, 0x5, 0x18, 0x4, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x47, 0x1, 0x0, 0x40, 0x4, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1b3e, 0x6, 0xff22, 0xba4b, 0x9, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x4, 0x1, 0xfffa, 0x100, 0x6]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x4, 0x8, 0x9, 0xd1, 0xe18e, 0x6, 0x588f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8ea, 0x101, 0x7ff, 0x2, 0x1, 0x8, 0x6]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0xc, 0xb, 0xc, 0x30, 0x4, 0x1b, 0x4, 0x24, 0x6, 0x48, 0x1, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x40, 0x8, 0x6, 0xfff7, 0x3697, 0x1]}}]}]}]}, 0x428}, 0x1, 0x0, 0x0, 0x40}, 0x20000100)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000e9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r5}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
signalfd(r7, &(0x7f0000000000)={[0x4]}, 0x8)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r8, @ANYBLOB="08002600e916"], 0x34}}, 0x0)

31.28317244s ago: executing program 7 (id=3166):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x200000, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_cache\x00')
pread64(r4, &(0x7f0000000440)=""/197, 0xc5, 0x4)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x2})

31.28239749s ago: executing program 7 (id=3167):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c}}], 0x20}, 0xc080)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040055}, 0x0)
ioctl$int_out(r3, 0x2, &(0x7f0000000380))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x74, r6, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x58, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3, {0x0, 0x7c}}, @val={0x25, 0x3, {0x1, 0xb6}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x6, "31851c27f051"}, {0xdd, 0x6, "1cb11f4c9767"}]}}]}, 0x74}}, 0x0)

31.279296569s ago: executing program 7 (id=3171):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0xf, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
r2 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$alg(0x26, 0x5, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, 0x0}, 0x20)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0})
io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0)

31.24532828s ago: executing program 7 (id=3175):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x201c080, &(0x7f0000000540)=ANY=[], 0x2, 0xc36, &(0x7f0000002540)="$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")
open(&(0x7f0000000100)='./file0\x00', 0x60142, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x1}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x100000}, 0x20)
unshare(0x2a020400)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
listen(r8, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")

21.946786496s ago: executing program 7 (id=3219):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r2, @ANYBLOB="010000000000000000006a00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000500d2000000"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x1c, r5, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x2c, r5, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x21d4840, 0x0, 0x1, 0x0, &(0x7f0000000100))
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]})
chdir(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
getdents(r0, &(0x7f0000000580)=""/199, 0xc7)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20)
ftruncate(0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4be, &(0x7f0000000ec0)="$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")
acct(&(0x7f0000000540)='./file0\x00')

21.23707324s ago: executing program 7 (id=3223):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x800}}) (fail_nth: 2)

21.042874931s ago: executing program 35 (id=3223):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x800}}) (fail_nth: 2)

15.041229215s ago: executing program 6 (id=3238):
request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14.763128127s ago: executing program 6 (id=3239):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
unshare(0x22020400)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x8, 0x20, 0x3, {0x1, @raw_data="538e6e1f445b6f95aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20a59e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082b6a934eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea100"}})
r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpquota}, {@noload}, {@abort}, {@lazytime}, {@usrquota}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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")
r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x843, 0x1)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000140)=0x4)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)

11.123814118s ago: executing program 6 (id=3256):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="01010101", 0x4)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) (fail_nth: 2)

10.72336702s ago: executing program 6 (id=3258):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x7f}, 0x1c) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x20a, 0x0, 0x9e4}, &(0x7f0000000100)=0x10) (async, rerun: 32)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f0000000100)={[{@umask={'umask', 0x3d, 0x400}}, {@gid}, {}, {@uid}, {@dmode}, {@uid}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@unhide}]}, 0x1, 0xc48, &(0x7f0000001d40)="$eJzs3U9sHOd9N/DfM1qKK/l9KyZ2FSeNg01bpDJjufoXU7EKd1XTbAPIMhGKuQXgSqTUhSmSIKlGNtKC6aWHHgIURQ85EWiNAikaGE0R9Mi0LpBcfChy6oloYSMoioItAgQoELCY2WfFJUXaskhKlPz52NR3duZ5Zp5nZj0jC3rmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4ndeuXjqdNpmw6GH0BgA4IG4PPbVU2e2e/4DAI+tKzv9/z8AAAAAAAAAAAAAAHBQpCjiyUgxd3ktTVSfO+qXVvtu3R4fHtm+2pFU1TxUlS9/6qfPnD33pReGznfzUnvmA+rvtc/Ea2NXLjZenr05Nz+1sDA12RifaV+bnZy65z3stv5Wg9UJaNx8/dbk9esLjTPPn920+fbA+/1PHB+4MPTsyWe6ZceHR0bGNorUe8vX7rshHTuN8DgcRZyMFM9976epFRFF7P5c1B/std/qSNWJwaoT48MjVUem262ZxXLjaPdEFBGNnkrN7jna/lpEre+B9mFnzYilsvllgwfL7o3NteZbV6enGqOt+cX2Ynt2ZjR1Wlv2pxFFnE8RyxGx2n/37vqiiFqk+M6xtXQ1v/WjOg9frAYG79yOYh/7eA/Kdjb6IpaLR+CaHWD9UcSrkeJn75yIa/k+U91rvhDxapk/iHirzJciUvnFOBfx3jbfIx5NtSjiT8vrf2EtTVb3g+595dLXGl+ZuT7bU7Z7X/mIz4e77hQP6flwZEs+GAf83lSPIlrVHX8t3f9vdgAAAAAAAAAAAAAAAADYa0eiiE9Hilf+5Q+qccVRjUs/dmHodwf+f++Y8ac/ZD9l2ecjYqm4tzG5h/PAwNE0mtJDHkv8cVaPIv4wj//71sNuDAAAAAAAAAAAAAAAAAAAwMdaET+JFC++eyItR++c4u2ZG40rravTnVlhu3P/dudMX19fX2+kTjZzTuRcyrmccyXnas4ocv2czZwTOZdyLudcybmaMw7l+jmbOSdyLuVczrmSczVn1HL9nM2cEzmXci7nXMm5mjMOyNy9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPkyKK+EWk+PY31lKkiGhGTEQnV/ofdusAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFJ/KuL7kaLxe80762oRkap/O06Uv5yL5uEyPxnNoTJfiubFnK0qa81vPYT2szt9qYgfR4r++tt3Lni+/n2dT3e+BvHWNzc+fabWyUPdjQPv9z9x/NiFoZHPPb3TctquAYOX2jO3bjfGh0dGxnpW1/LRP9mzbiAft9ibrhMRC2+8+Xprenpq/v4Xyq/ALqo/Qgup9nHpqYVqIWoHohkPp++b1B/WDYp9VT7/34sUv/nuv3Yf+J3nfz3+X+fTnSd8/PyPNp7/L27d0T0+/2tb6+Xnf/lM3+75/2TPuhfz70b6ahH1xZtzfccj6gtvvHmyfbN1Y+rG1My5U6e+PDT05bOn+g5H1K+3p6d6lvbkdAEAAAAAAAAAAAAAAAA8OKmI344UrR+vpUZE3K7Gaw1cGHr25DOH4lA13mrTuO3Xxq5cbLw8e3NufmphYWqyMT7TvjY7OXWvh6tXw73Gh0f2pTMf6sg+t/9I/eXZuTfm2zd+f3Hb7UfrF68uLM63rm2/OY5EEdHsXTNYNXh8eKRq9HS7NVNVHd12MP1H15eK+LdIce1cI30+r8vj/7eO8N80/n9p6472cPz/545ujP/7RE/R8pgpFfHzSPEbf/Z0fL5q59G465zlcn8VKQbPfzaXi8NluW4bOu8V6IwMLMv+d6T4u19sLtsdD/nkRtnTH+nkPgLK638sUnz/T74bv5rXbX7/w/bX/+jWHe3T+x+e6ll3dNP7CnbddfL1PxkpXnry7fi1as3/fuD7P7rv3jjRKbzxfo59uv6/3LNuIB/31/eq8wAAAAAAAAAAAI+wvlTEX0eKH47U0gt53b38/b/JrTvap7//9amedZN7M1/Rhy7s+qQCAAAAwAHRl4r4SaS4sfj2nTHUm8d/94z//K2N8Z/DacvWgff7/+v4L1XvDdjLP//rNZCPO7H7bgMAAAAAAAAAAAAAAAAAAMCBklIRL+T51Ceq8fyTO86nvhIpXvmP53K5dLws150HfqD6tX55dubkxenp2Xostq5OTzXG5lrXpsq6T0WKtb/8bK5bVPOrd+eb78zxvjEX+3ykGPmbbtnOXOzducmf2ih7uiz7iUjx73+7uWyemjrPHV2VPVOW/YtI8fV/2L7s8Y2yZ8uy340UP/p6o1v2aFm2+37UT22Uff7abLEPVwUAAAAAAAAAAAAAAAAAAICPm75UxB9Hiv+8uXxnLH+e/7+v52PlrW/2zPe/xe1qnv+Bav7/nZbvZ/7/6r0CSzsdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHk8pingzUsxdXksr/eXnjvql9syt2+PDI9tXO5Kqmoeq8uVP/fSZs+e+9MLQ+W5+cP299ul4bezKxcbLszfn5qcWFqYmG+Mz7Wuzk1P3vIfd1t9qsDoBjZuv35q8fn2hceb5s5s23x54v/+J4wMXhp49+Uy37PjwyMhYT5la330f/S5ph/WHo4g/jxTPfe+n6Yf9EUXs/lx8yHdnvx2pOjFYdWJ8eKTqyHS7NbNYbhztnogiotFTqdk9Rw/gWuxKM2KpbH7Z4MGye2NzrfnW1empxmhrfrG92J6dGU2d1pb9aUQR51PEckSs9t+9u74o4vVI8Z1ja+kf+yMOdc/DFy+PffXUmZ3bUexjH+9B2c5GX8Ry8QhcswOsP4r4+0jxs3dOxD/1R9Si8xNfiHi1zB9EvBWd653KL8a5iPe2+R7xaKpFEf9TXv8La+md/vJ+0L2vXPpa4ysz12d7ynbvK4/88+FBOuD3pnoU8aPqjr+W/tl/1wAAAAAAAAAAAAAAAAAHSBG/EilefPdEqsYH3xlT3J650bjSujrdGdbXHfvXHTO9vr6+3kidbOacyLmUcznnSs7VnFHk+jmbZdbX1yfy56WcyzlXcq7mjEO5fs5mzomcSzmXc67kXM0ZtVw/ZzPnRM6lnMs5V3Ku5owDMnYPAAAAAAAAAAAAAAAAAAB4vBTVPym+/Y21tN7fmV96Ijq5Yj7Qx97/BQAA//9Xevp2") (async)
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x4, 0x61ae, &(0x7f0000007640)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
link(&(0x7f0000000280)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@hl={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000027d1287cff00"}) (async, rerun: 64)
r3 = syz_open_pts(r2, 0x0) (rerun: 64)
r4 = dup(r3)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) (async)
syz_pidfd_open(0x0, 0x0) (async, rerun: 32)
dup3(r2, r4, 0x0) (async, rerun: 32)
r5 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64)
pwritev(r6, &(0x7f0000000480)=[{&(0x7f00000010c0)="aabf", 0x2}, {&(0x7f0000000280)="4067473f8497fb9c6a3c71fe3210d2277d1737f3feebb9bf96a941f60764473481e5c7edc726bf6684ac12d5e486154830bc4476f47ad9478ce9f7e682cad4e3c4da1708f5eebbe42a7c5ea3abeb25731f231bcc31faa67120c32eb50ffb4d4dbae78bc6ad7369", 0x67}, {&(0x7f0000000380)="881fa99f8cec3342ac855129498fa2a3d4a076ae1f1f3b09008496e935541f835bfea3513b7e234eab280524253678ba0512b870634f6889b0e50ef9a1d78670c4b42c6c12ec9edcfa7c3b31fd4049d3b4b3a3584800d563feaf81f75cf9665d4829e372ac82e7511e28305ab4a56227e790328879a84f53488903fba52086e0a7c5349e60950ffcf3f60a71063d", 0x8e}], 0x3, 0x0, 0x100) (async, rerun: 64)
unlink(&(0x7f0000000140)='./file1\x00')

10.607956601s ago: executing program 6 (id=3259):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) (fail_nth: 2)
recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0)

9.769246946s ago: executing program 6 (id=3261):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x50}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5e, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}, {@i_version}, {@data_err_ignore}]}, 0x1, 0x460, &(0x7f0000000280)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffff, 0x0)
ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1013})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r10 = dup3(r8, r9, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000080), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r12, 0x0)
ioctl$MON_IOCG_STATS(r10, 0xc0109207, &(0x7f00000001c0))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'})

6.078984926s ago: executing program 4 (id=3276):
mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@uuid_off, 0x0}], [], 0x2c})

5.879220437s ago: executing program 4 (id=3278):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000100)={[{@grpquota}, {@ikeep}, {@filestreams}, {@filestreams}, {@nolargeio}]}, 0x1, 0x9606, &(0x7f0000009680)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8820b9, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10004, &(0x7f0000000000)={[{@data_err_ignore}]}, 0x1, 0x3ce, &(0x7f00000004c0)="$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")

4.844300023s ago: executing program 1 (id=3280):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000004240)=0x40000006, 0x4)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585611, &(0x7f0000000080)=@mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d7050001"}})

4.762296564s ago: executing program 1 (id=3281):
add_key(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.563646355s ago: executing program 1 (id=3282):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xc, &(0x7f0000000300)={0x80000000008, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x200000c4)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_io_uring_setup(0x6908, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x3, 0xb5}, &(0x7f0000000080), &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_setup(0x1864, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x0, 0x352}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0x5885, 0x4, 0x0, 0x100}, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2})
io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r12 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r12, &(0x7f0000000100)=ANY=[@ANYBLOB='VOLUME\nSYNTH \'Synth Capture\' 004'], 0x32)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0)
dup3(r3, r1, 0x0)
ioctl$PIO_UNIMAPCLR(r11, 0x4b68, 0x0)

3.564364321s ago: executing program 4 (id=3288):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x34}}, 0x0)

3.415742151s ago: executing program 1 (id=3290):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001dc0), 0x22202)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000001e00)={{0x1, 0x33}, {0xfc, 0x8}, 0x50000, 0x7, 0x5})

3.390510181s ago: executing program 1 (id=3291):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4161, 0x0)
syz_read_part_table(0x103c, &(0x7f0000001040)="$eJzszjEOQUEYhdE7iEwlswRqq/i1apVNWILEWjQ2p1BLRK+W95Jz6pubL8zS8X15JdftLrdaJD1pPUmN3A/7bEZy/s5qmWet00ay+vFyevy/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACm5xMAAP//1hgIrg==")

2.506863716s ago: executing program 3 (id=3292):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @remote, 0x65}, 0x1c)

2.419521897s ago: executing program 1 (id=3293):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_disconnect(r0)
unshare(0x22020600)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0)

2.116963939s ago: executing program 4 (id=3295):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0x39}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r0, 0x4004743c, 0x20000015)

2.027640399s ago: executing program 3 (id=3296):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000100)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@norecovery}, {@acl}, {@resgid={'resgid', 0x3d, 0xee01}}, {@norecovery}, {@noauto_da_alloc}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x9b, 0x4d8, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

1.943185499s ago: executing program 8 (id=3298):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x3})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x84, 0xf9, 0x0, [{0x0, 0x1, 0x5b, '\x00', 0x8}, {0xf7, 0x9, 0x3, '\x00', 0xa}, {0x0, 0x3, 0x9, '\x00', 0x9e}, {0x81, 0x6, 0x84, '\x00', 0x1}, {0x5, 0xe, 0x1, '\x00', 0x9}, {0xe2, 0x3, 0x1, '\x00', 0xbf}, {0xfe, 0x7, 0xa0, '\x00', 0x25}, {0x4, 0x7f, 0xfe, '\x00', 0xb}, {0x6, 0xff, 0x4, '\x00', 0xff}, {0x1, 0x2, 0x9, '\x00', 0x4}, {0x9, 0x8, 0xbf, '\x00', 0x5}, {0xfe, 0x0, 0x1, '\x00', 0xfe}, {0x2, 0x7a, 0x89, '\x00', 0x2}, {0xe, 0x7, 0x7e, '\x00', 0xae}, {0x29, 0x8, 0x9, '\x00', 0xb}, {0x0, 0xd9, 0x9, '\x00', 0x3}, {0xfc, 0xff, 0x4, '\x00', 0xe}, {0xf, 0x40, 0x2, '\x00', 0x6}, {0x7, 0x1, 0x2, '\x00', 0x6}, {0x6, 0x0, 0xe0, '\x00', 0x95}, {0x50, 0x7, 0x0, '\x00', 0x3}, {0x5, 0x9, 0x0, '\x00', 0x59}, {0xec, 0xa, 0x0, '\x00', 0x5}, {0x7, 0x1, 0x3, '\x00', 0x1c}]}})

1.90576055s ago: executing program 4 (id=3299):
syz_read_part_table(0x601, &(0x7f0000000100)="$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")
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x5000009)
connect$inet6(r0, &(0x7f0000004140)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000440), 0x1000a)
sendfile(r0, r2, &(0x7f0000000000)=0x9, 0x2000000000001001)

1.699963141s ago: executing program 8 (id=3300):
syz_emit_ethernet(0x57, &(0x7f00000001c0)=ANY=[@ANYBLOB="9d3e485beb2700000000000086dd6072789300213afffc01000000000000000000004200000000ff0b71"], 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.193071644s ago: executing program 8 (id=3301):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000002000010300000000000000000200000000000000000000000800060000c0"], 0x24}}, 0x0)

1.010254225s ago: executing program 3 (id=3302):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1800011, &(0x7f00000001c0), 0x1, 0xb80, &(0x7f0000000c40)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

839.986356ms ago: executing program 8 (id=3303):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x138}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

769.052626ms ago: executing program 8 (id=3304):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000006c0), 0x4, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000340)='./bus\x00', 0x185102, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa3f, 0x2, 0x0, 0x6, 0x5a79, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe]})
mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x800000, 0x0)

653.694937ms ago: executing program 4 (id=3305):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x4000, &(0x7f0000000800)=ANY=[@ANYBLOB="22aa662d2939716f32217aad68b5d90c734bc8df07ac35161421f9a914e3f1df313aad875ca023d86cda8e8fbaf9bcebeec0dd65b28d3c7695dfade080944fd2053e4a49575ce71f83d43652f41213939b80cbcfb3b4ef2138f2f3eb69d1e631eeea33a8c00625", @ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x3, 0x7a6, &(0x7f00000016c0)="$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")
r0 = getpid()
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
preadv(r3, 0x0, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt(r4, 0x0, 0x1, &(0x7f0000000040)=""/53, &(0x7f0000000080)=0x35)

455.940978ms ago: executing program 3 (id=3306):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r1, 0x0, 0x0}, 0x10)

168.74163ms ago: executing program 8 (id=3307):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

162.193179ms ago: executing program 3 (id=3308):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003900)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @loopback={0xffffffffffffff97}, 0x40}, 0x1c, 0x0}}], 0x1, 0x0)

0s ago: executing program 3 (id=3309):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 0000000000000246 R12: 0000000000000001
[ 1064.714280][T16014] R13: 0000000000000000 R14: 00007ffb020c7f80 R15: 00007ffd21e89748
[ 1064.722287][T16014]  </TASK>
[ 1064.725562][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1064.746077][T16014] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1064.783607][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1064.818695][T16015] loop6: detected capacity change from 0 to 4096
[ 1064.874558][T16015] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1064.963033][T16015] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[ 1065.007053][T15989] overlayfs: upper fs does not support tmpfile.
[ 1065.011669][T16015] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1065.073119][T16027] FAULT_INJECTION: forcing a failure.
[ 1065.073119][T16027] name failslab, interval 1, probability 0, space 0, times 0
[ 1065.073919][T16015] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 1065.094559][T15989] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1065.104478][T16027] CPU: 0 PID: 16027 Comm: syz.1.3072 Not tainted 5.15.173-syzkaller #0
[ 1065.112730][T16027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1065.115399][T16028] loop4: detected capacity change from 0 to 16
[ 1065.122783][T16027] Call Trace:
[ 1065.132186][T16027]  <TASK>
[ 1065.135110][T16027]  dump_stack_lvl+0x1e3/0x2d0
[ 1065.139791][T16027]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1065.143463][T16015] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1065.145413][T16027]  ? panic+0x860/0x860
[ 1065.162361][T16027]  ? __might_sleep+0xc0/0xc0
[ 1065.166962][T16027]  should_fail+0x38a/0x4c0
[ 1065.171491][T16027]  should_failslab+0x5/0x20
[ 1065.175997][T16027]  slab_pre_alloc_hook+0x53/0xc0
[ 1065.180936][T16027]  __kmalloc+0x6e/0x300
[ 1065.183485][T16015] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1065.185082][T16027]  ? tomoyo_realpath_from_path+0xd8/0x5e0
[ 1065.201776][T16027]  tomoyo_realpath_from_path+0xd8/0x5e0
[ 1065.204781][T16015] ntfs: volume version 3.1.
[ 1065.207334][T16027]  tomoyo_path_number_perm+0x225/0x810
[ 1065.217251][T16027]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1065.222751][T16027]  ? __fget_files+0x413/0x480
[ 1065.227438][T16027]  security_file_ioctl+0x6d/0xa0
[ 1065.232376][T16027]  __se_sys_ioctl+0x47/0x160
[ 1065.235266][T16015] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[ 1065.236962][T16027]  do_syscall_64+0x3b/0xb0
[ 1065.253038][T16027]  ? clear_bhb_loop+0x15/0x70
[ 1065.257716][T16027]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1065.263605][T16027] RIP: 0033:0x7ffb01f10759
[ 1065.268017][T16027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1065.273820][T16015] ntfs: (device loop6): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[ 1065.287616][T16027] RSP: 002b:00007ffb00388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1065.287640][T16027] RAX: ffffffffffffffda RBX: 00007ffb020c7f80 RCX: 00007ffb01f10759
[ 1065.287653][T16027] RDX: 0000000020000000 RSI: 0000000000008b24 RDI: 0000000000000003
[ 1065.325289][T16027] RBP: 00007ffb00388090 R08: 0000000000000000 R09: 0000000000000000
[ 1065.333261][T16027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1065.341228][T16027] R13: 0000000000000000 R14: 00007ffb020c7f80 R15: 00007ffd21e89748
[ 1065.343944][T16015] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[ 1065.349208][T16027]  </TASK>
[ 1065.366639][T15989] overlayfs: failed to set xattr on upper
[ 1065.372360][T15989] overlayfs: ...falling back to index=off,metacopy=off.
[ 1065.379431][T15989] overlayfs: upper fs missing required features.
[ 1065.381273][T16015] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 1065.386161][T16027] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1065.402834][T16028] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1065.437901][ T4170] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[ 1065.445467][T16015] x_tables: duplicate underflow at hook 2
[ 1065.465314][T16028] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[ 1065.602682][ T4179] ocfs2: Unmounting device (7,3) on (node local)
[ 1065.631506][T16030] loop1: detected capacity change from 0 to 256
[ 1065.730945][T16030] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1065.743578][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1065.811172][T16030] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1065.833629][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1065.927352][T16039] FAULT_INJECTION: forcing a failure.
[ 1065.927352][T16039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1065.983810][T16039] CPU: 1 PID: 16039 Comm: syz.6.3077 Not tainted 5.15.173-syzkaller #0
[ 1065.992079][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1066.002139][T16039] Call Trace:
[ 1066.005419][T16039]  <TASK>
[ 1066.008353][T16039]  dump_stack_lvl+0x1e3/0x2d0
[ 1066.013034][T16039]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1066.018667][T16039]  ? panic+0x860/0x860
[ 1066.022741][T16039]  ? validate_chain+0x112/0x5930
[ 1066.027719][T16039]  ? deref_stack_reg+0xbe/0x110
[ 1066.032579][T16039]  should_fail+0x38a/0x4c0
[ 1066.037006][T16039]  _copy_from_user+0x2d/0x170
[ 1066.041685][T16039]  do_sys_poll+0x253/0x11e0
[ 1066.046281][T16039]  ? validate_chain+0x112/0x5930
[ 1066.051224][T16039]  ? poll_select_finish+0x7b0/0x7b0
[ 1066.056435][T16039]  ? validate_chain+0x112/0x5930
[ 1066.061433][T16039]  ? __lock_acquire+0x1295/0x1ff0
[ 1066.066478][T16039]  ? __context_tracking_exit+0x4c/0x80
[ 1066.071945][T16039]  ? __lock_acquire+0x1ff0/0x1ff0
[ 1066.076983][T16039]  __se_sys_poll+0x1c1/0x400
[ 1066.081579][T16039]  ? print_irqtrace_events+0x210/0x210
[ 1066.087042][T16039]  ? vtime_user_exit+0x2d1/0x400
[ 1066.091980][T16039]  ? __x64_sys_poll+0x80/0x80
[ 1066.096655][T16039]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1066.102638][T16039]  ? lockdep_hardirqs_on+0x94/0x130
[ 1066.107834][T16039]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1066.113802][T16039]  do_syscall_64+0x3b/0xb0
[ 1066.118217][T16039]  ? clear_bhb_loop+0x15/0x70
[ 1066.122898][T16039]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1066.128776][T16039] RIP: 0033:0x7fa24891b759
[ 1066.133175][T16039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1066.152761][T16039] RSP: 002b:00007fa246d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[ 1066.161163][T16039] RAX: ffffffffffffffda RBX: 00007fa248ad2f80 RCX: 00007fa24891b759
[ 1066.169127][T16039] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000200
[ 1066.177088][T16039] RBP: 00007fa246d93090 R08: 0000000000000000 R09: 0000000000000000
[ 1066.185054][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1066.193005][T16039] R13: 0000000000000000 R14: 00007fa248ad2f80 R15: 00007ffdea9c7ea8
[ 1066.200963][T16039]  </TASK>
[ 1066.783590][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1066.863613][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1066.958614][ T5795] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1067.367219][ T1443] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.383611][ T5795] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1067.417878][ T5795] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1067.554398][ T5795] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1067.628169][ T5795] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[ 1067.663524][ T5795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.721136][ T5795] usb 7-1: config 0 descriptor??
[ 1067.765944][ T1443] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.781561][ T5795] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1067.823654][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1067.903641][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1068.838091][ T1443] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.863595][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1068.953585][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1068.980415][T16066] loop4: detected capacity change from 0 to 40427
[ 1069.056828][ T1443] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.097111][T16066] F2FS-fs (loop4): invalid crc value
[ 1069.153060][T16066] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1069.190461][T16074] FAULT_INJECTION: forcing a failure.
[ 1069.190461][T16074] name failslab, interval 1, probability 0, space 0, times 0
[ 1069.247719][T16074] CPU: 0 PID: 16074 Comm: syz.3.3089 Not tainted 5.15.173-syzkaller #0
[ 1069.255991][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1069.266061][T16074] Call Trace:
[ 1069.269353][T16074]  <TASK>
[ 1069.272297][T16074]  dump_stack_lvl+0x1e3/0x2d0
[ 1069.276992][T16074]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1069.282638][T16074]  ? panic+0x860/0x860
[ 1069.286718][T16074]  ? __might_sleep+0xc0/0xc0
[ 1069.291329][T16074]  should_fail+0x38a/0x4c0
[ 1069.295759][T16074]  should_failslab+0x5/0x20
[ 1069.300280][T16074]  slab_pre_alloc_hook+0x53/0xc0
[ 1069.305232][T16074]  __kmalloc+0x6e/0x300
[ 1069.309397][T16074]  ? __se_sys_memfd_create+0x15a/0x590
[ 1069.314867][T16074]  ? strnlen_user+0x1ac/0x270
[ 1069.319554][T16074]  __se_sys_memfd_create+0x15a/0x590
[ 1069.324851][T16074]  ? vtime_user_exit+0x2d1/0x400
[ 1069.329798][T16074]  ? __x64_sys_memfd_create+0x60/0x60
[ 1069.335185][T16074]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1069.341181][T16074]  ? lockdep_hardirqs_on+0x94/0x130
[ 1069.346391][T16074]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1069.352381][T16074]  do_syscall_64+0x3b/0xb0
[ 1069.356801][T16074]  ? clear_bhb_loop+0x15/0x70
[ 1069.361485][T16074]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1069.367394][T16074] RIP: 0033:0x7ff87bbce759
[ 1069.371817][T16074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1069.391428][T16074] RSP: 002b:00007ff87a045e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[ 1069.399852][T16074] RAX: ffffffffffffffda RBX: 000000000000550b RCX: 00007ff87bbce759
[ 1069.407837][T16074] RDX: 00007ff87a045ef0 RSI: 0000000000000000 RDI: 00007ff87bc41fca
[ 1069.415821][T16074] RBP: 00000000200079c0 R08: 00007ff87a045bb7 R09: 00007ff87a045e40
[ 1069.423798][T16074] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200000c0
[ 1069.431998][T16074] R13: 00007ff87a045ef0 R14: 00007ff87a045eb0 R15: 0000000020000400
[ 1069.439989][T16074]  </TASK>
[ 1069.489874][ T5795] usb 7-1: USB disconnect, device number 22
[ 1069.544495][T16063] loop1: detected capacity change from 0 to 262144
[ 1069.584338][T16066] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1069.641164][T16067] chnl_net:caif_netlink_parms(): no params data found
[ 1069.726224][T16063] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1069.764717][T16063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1069.843579][T16086] loop3: detected capacity change from 0 to 1024
[ 1069.894033][ T4176] attempt to access beyond end of device
[ 1069.894033][ T4176] loop4: rw=2049, want=45104, limit=40427
[ 1069.905756][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1069.983637][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1069.999207][ T1443] tipc: Disabling bearer <udp:s>
[ 1070.012536][ T1443] tipc: Disabling bearer <udp:syz2>
[ 1070.033901][ T1443] tipc: Left network mode
[ 1070.223633][ T5795] Bluetooth: hci1: command 0x0409 tx timeout
[ 1070.275479][T16067] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1070.287363][T16067] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1070.305826][T16067] device bridge_slave_0 entered promiscuous mode
[ 1070.364755][T16067] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1070.389574][T16067] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1070.424864][T16067] device bridge_slave_1 entered promiscuous mode
[ 1070.463254][T16092] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3091'.
[ 1070.565808][T16067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1070.632210][T16067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1070.656563][T16108] loop1: detected capacity change from 0 to 256
[ 1070.754356][T16108] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1070.796083][   T26] kauditd_printk_skb: 8 callbacks suppressed
[ 1070.796096][   T26] audit: type=1326 audit(1732062135.169:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.3.3096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87bbce759 code=0x0
[ 1070.855622][T16108] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1070.871476][T16067] team0: Port device team_slave_0 added
[ 1070.919000][T16067] team0: Port device team_slave_1 added
[ 1071.505487][T16067] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1071.548359][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1071.724453][T16122] loop3: detected capacity change from 0 to 128
[ 1071.753762][T16067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1071.778400][T16122] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[ 1072.031267][T16067] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1072.083509][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1072.232542][T16067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.369416][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3097'.
[ 1072.379213][T16130] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3097'.
[ 1072.964980][ T5795] Bluetooth: hci1: command 0x041b tx timeout
[ 1072.996204][T16067] device hsr_slave_0 entered promiscuous mode
[ 1073.040975][T16132] loop3: detected capacity change from 0 to 128
[ 1073.050434][T16067] device hsr_slave_1 entered promiscuous mode
[ 1073.103777][T16132] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1073.137063][T16067] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1073.160079][T16115] loop4: detected capacity change from 0 to 40427
[ 1073.163470][T16067] Cannot create hsr debugfs directory
[ 1073.193624][T16132] ext4 filesystem being mounted at /652/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1073.263562][T16115] F2FS-fs (loop4): Unrecognized mount option "backgroun" or missing value
[ 1073.387336][T16115] loop4: detected capacity change from 0 to 256
[ 1073.422310][T16138] loop6: detected capacity change from 0 to 128
[ 1073.549750][T16138] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1073.567929][T16138] ext4 filesystem being mounted at /561/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1073.938323][ T1443] device batadv0 left promiscuous mode
[ 1073.965884][ T1443] device bridge0 left promiscuous mode
[ 1074.006615][ T1443] device hsr_slave_0 left promiscuous mode
[ 1074.104147][ T1443] device hsr_slave_1 left promiscuous mode
[ 1074.113941][ T1443] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1074.141738][ T1443] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1074.182801][ T1443] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1074.210443][ T1443] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1074.224116][ T1443] device bridge_slave_1 left promiscuous mode
[ 1074.231179][ T1443] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1074.242817][ T1443] device bridge_slave_0 left promiscuous mode
[ 1074.249854][ T1443] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1074.279194][ T1443] device dummy0 left promiscuous mode
[ 1074.285857][ T1443] device veth1_macvtap left promiscuous mode
[ 1074.292238][ T1443] device veth0_macvtap left promiscuous mode
[ 1074.298773][ T1443] device veth1_vlan left promiscuous mode
[ 1075.575684][ T5795] Bluetooth: hci1: command 0x040f tx timeout
[ 1075.598259][T16181] loop6: detected capacity change from 0 to 256
[ 1075.606391][   T26] audit: type=1326 audit(1732062139.979:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16173 comm="syz.1.3106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb01f10759 code=0x0
[ 1075.628320][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1075.692832][T16183] loop4: detected capacity change from 0 to 2048
[ 1075.728158][T16187] loop3: detected capacity change from 0 to 2048
[ 1075.756698][T16188] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1075.813190][T16189] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1075.832779][T16187] FAULT_INJECTION: forcing a failure.
[ 1075.832779][T16187] name failslab, interval 1, probability 0, space 0, times 0
[ 1075.917390][T16187] CPU: 1 PID: 16187 Comm: syz.3.3110 Not tainted 5.15.173-syzkaller #0
[ 1075.925661][T16187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1075.935708][T16187] Call Trace:
[ 1075.938971][T16187]  <TASK>
[ 1075.941885][T16187]  dump_stack_lvl+0x1e3/0x2d0
[ 1075.946558][T16187]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1075.952176][T16187]  ? panic+0x860/0x860
[ 1075.956229][T16187]  ? __might_sleep+0xc0/0xc0
[ 1075.960809][T16187]  should_fail+0x38a/0x4c0
[ 1075.965215][T16187]  should_failslab+0x5/0x20
[ 1075.969702][T16187]  slab_pre_alloc_hook+0x53/0xc0
[ 1075.974625][T16187]  ? getname_flags+0xb8/0x4e0
[ 1075.979289][T16187]  kmem_cache_alloc+0x3f/0x280
[ 1075.984040][T16187]  getname_flags+0xb8/0x4e0
[ 1075.988532][T16187]  __x64_sys_renameat2+0xab/0xe0
[ 1075.993451][T16187]  do_syscall_64+0x3b/0xb0
[ 1075.997854][T16187]  ? clear_bhb_loop+0x15/0x70
[ 1076.002512][T16187]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1076.008390][T16187] RIP: 0033:0x7ff87bbce759
[ 1076.012796][T16187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1076.032496][T16187] RSP: 002b:00007ff87a046038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[ 1076.040895][T16187] RAX: ffffffffffffffda RBX: 00007ff87bd85f80 RCX: 00007ff87bbce759
[ 1076.048850][T16187] RDX: 0000000000000004 RSI: 0000000020000180 RDI: 0000000000000004
[ 1076.056802][T16187] RBP: 00007ff87a046090 R08: 0000000000000000 R09: 0000000000000000
[ 1076.064756][T16187] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001
[ 1076.072709][T16187] R13: 0000000000000000 R14: 00007ff87bd85f80 R15: 00007ffcb81b2e18
[ 1076.080674][T16187]  </TASK>
[ 1076.083731][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1076.270823][T16191] loop4: detected capacity change from 0 to 2048
[ 1076.293322][ T1443] team0 (unregistering): Port device team_slave_1 removed
[ 1076.308791][ T1443] team0 (unregistering): Port device team_slave_0 removed
[ 1076.360721][ T1443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1076.376863][ T1443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1076.415076][T16194] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1076.542224][ T1443] bond0 (unregistering): Released all slaves
[ 1076.733736][ T5795] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[ 1077.163830][ T5795] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1077.250234][ T5795] usb 5-1: not running at top speed; connect to a high speed hub
[ 1077.301320][ T4207] kernel write not supported for file bpf-prog (pid: 4207 comm: kworker/0:3)
[ 1077.356055][ T5795] usb 5-1: config 5 has an invalid interface number: 150 but max is 0
[ 1077.381467][T16067] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1077.397352][ T5795] usb 5-1: config 5 has no interface number 0
[ 1077.413236][ T5795] usb 5-1: config 5 interface 150 has no altsetting 0
[ 1077.455403][T16067] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1077.509407][T16067] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1077.585954][T11767] Bluetooth: hci1: command 0x0419 tx timeout
[ 1077.594771][T16067] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1077.635778][ T5795] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=e2.76
[ 1077.654356][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.711533][ T5795] usb 5-1: Product: syz
[ 1077.733883][ T5795] usb 5-1: Manufacturer: syz
[ 1077.755492][ T5795] usb 5-1: SerialNumber: syz
[ 1077.763926][ T4207] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1077.985277][T16067] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1078.015708][ T4207] usb 4-1: Using ep0 maxpacket: 16
[ 1078.057469][T16067] 8021q: adding VLAN 0 to HW filter on device team0
[ 1078.084153][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1078.094323][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1078.114835][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1078.139828][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1078.194014][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1078.201086][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1078.230906][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1078.256824][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1078.275675][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1078.275705][ T5795] snd_usb_toneport 5-1:5.150: Line 6 GuitarPort found
[ 1078.293680][ T4207] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1078.308403][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1078.315525][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1078.317406][ T4207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.361153][ T4207] usb 4-1: Product: syz
[ 1078.365726][ T4207] usb 4-1: Manufacturer: syz
[ 1078.369550][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1078.371261][ T4207] usb 4-1: SerialNumber: syz
[ 1078.406277][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1078.431366][ T4207] r8152-cfgselector 4-1: config 0 descriptor??
[ 1078.438764][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1078.471013][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1078.494726][ T5795] snd_usb_toneport 5-1:5.150: cannot get proper max packet size
[ 1078.500086][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1078.515087][ T5795] snd_usb_toneport 5-1:5.150: Line 6 GuitarPort now disconnected
[ 1078.551079][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1078.593695][T16239] loop6: detected capacity change from 0 to 16
[ 1078.729167][T16239] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1078.888191][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1078.917043][T15063] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[ 1078.939919][T16239] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[ 1079.023632][   T26] audit: type=1800 audit(1732062143.329:472): pid=16239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3117" name="file3" dev="loop6" ino=89 res=0 errno=0
[ 1079.240966][ T5795] snd_usb_toneport: probe of 5-1:5.150 failed with error -22
[ 1079.257951][ T4207] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1079.275134][ T5795] usb 5-1: USB disconnect, device number 23
[ 1079.288388][ T4207] r8152-cfgselector 4-1: bad CDC descriptors
[ 1079.305476][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1079.344015][ T4207] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1079.358922][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1079.392912][ T4207] r8152-cfgselector 4-1: USB disconnect, device number 25
[ 1079.425622][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1079.523860][T16246] loop6: detected capacity change from 0 to 16
[ 1079.633817][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1080.255576][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1080.359618][T16246] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1080.386289][T15063] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[ 1080.406388][T16245] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[ 1080.425694][   T26] audit: type=1800 audit(1732062144.799:473): pid=16245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3118" name="file3" dev="loop6" ino=89 res=0 errno=0
[ 1080.697397][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1080.708022][T16258] loop1: detected capacity change from 0 to 512
[ 1080.710801][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1080.720597][T16260] loop4: detected capacity change from 0 to 256
[ 1080.752936][T16067] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1080.834724][T16260] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1080.882079][T16258] EXT4-fs (loop1): Unrecognized mount option "mask=^MAY_APPEND" or missing value
[ 1080.901717][   T26] audit: type=1326 audit(1732062145.269:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16264 comm="syz.3.3123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87bbce759 code=0x0
[ 1080.944972][T16260] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1081.618196][T16258] loop1: detected capacity change from 0 to 164
[ 1081.708112][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1081.727364][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1081.838982][T16067] device veth0_vlan entered promiscuous mode
[ 1081.874722][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1081.885576][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1081.954162][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1081.975541][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1082.106478][T16067] device veth1_vlan entered promiscuous mode
[ 1082.576533][T15063] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[ 1082.586688][T15063] CPU: 1 PID: 15063 Comm: kworker/u5:0 Not tainted 5.15.173-syzkaller #0
[ 1082.595122][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1082.605176][T15063] Workqueue: hci0 hci_rx_work
[ 1082.609857][T15063] Call Trace:
[ 1082.613132][T15063]  <TASK>
[ 1082.616064][T15063]  dump_stack_lvl+0x1e3/0x2d0
[ 1082.620767][T15063]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1082.626403][T15063]  ? panic+0x860/0x860
[ 1082.630486][T15063]  ? sysfs_create_dir_ns+0x282/0x390
[ 1082.635775][T15063]  sysfs_create_dir_ns+0x2c6/0x390
[ 1082.640888][T15063]  ? sysfs_warn_dup+0xa0/0xa0
[ 1082.645575][T15063]  kobject_add_internal+0x6e0/0xe00
[ 1082.650786][T15063]  kobject_add+0x14e/0x210
[ 1082.655374][T15063]  ? device_add+0x3c2/0xfd0
[ 1082.659874][T15063]  ? kobject_init+0x1d0/0x1d0
[ 1082.664550][T15063]  ? __raw_spin_lock_init+0x41/0x100
[ 1082.669838][T15063]  ? get_device_parent+0x128/0x400
[ 1082.674957][T15063]  device_add+0x476/0xfd0
[ 1082.679300][T15063]  hci_conn_add_sysfs+0xe4/0x1f0
[ 1082.684253][T15063]  le_conn_complete_evt+0xc15/0x1500
[ 1082.689548][T15063]  ? __schedule+0x12cc/0x45b0
[ 1082.694244][T15063]  ? cs_le_create_conn+0x5f0/0x5f0
[ 1082.699452][T15063]  ? mark_lock+0x98/0x340
[ 1082.703789][T15063]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1082.709782][T15063]  hci_le_meta_evt+0x28c/0x3f50
[ 1082.714654][T15063]  ? mark_lock+0x98/0x340
[ 1082.718991][T15063]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1082.724973][T15063]  ? print_irqtrace_events+0x210/0x210
[ 1082.730438][T15063]  ? hci_remote_host_features_evt+0x280/0x280
[ 1082.736520][T15063]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1082.742157][T15063]  ? lockdep_hardirqs_on+0x94/0x130
[ 1082.747368][T15063]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1082.753016][T15063]  ? hci_event_packet+0x44a/0x1550
[ 1082.758139][T15063]  hci_event_packet+0xc41/0x1550
[ 1082.763103][T15063]  ? rcu_lock_release+0x20/0x20
[ 1082.767974][T15063]  ? hci_send_to_monitor+0x99/0x4d0
[ 1082.773177][T15063]  hci_rx_work+0x232/0x990
[ 1082.777609][T15063]  process_one_work+0x8a1/0x10c0
[ 1082.782565][T15063]  ? worker_detach_from_pool+0x260/0x260
[ 1082.786449][T16067] device veth0_macvtap entered promiscuous mode
[ 1082.788205][T15063]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1082.799978][T15063]  ? kthread_data+0x4e/0xc0
[ 1082.804491][T15063]  ? wq_worker_running+0x97/0x170
[ 1082.809520][T15063]  worker_thread+0xaca/0x1280
[ 1082.814202][T15063]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1082.820153][T15063]  kthread+0x3f6/0x4f0
[ 1082.824228][T15063]  ? rcu_lock_release+0x20/0x20
[ 1082.829083][T15063]  ? kthread_blkcg+0xd0/0xd0
[ 1082.833680][T15063]  ret_from_fork+0x1f/0x30
[ 1082.838113][T15063]  </TASK>
[ 1082.846216][T15063] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1082.911752][T16067] device veth1_macvtap entered promiscuous mode
[ 1082.933505][T15063] Bluetooth: hci0: failed to register connection device
[ 1082.977527][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1083.005216][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1083.016351][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3127'.
[ 1083.053955][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1083.114462][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1083.153554][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1083.182202][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1083.226339][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1083.263825][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1083.293449][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1083.331062][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1083.361797][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1083.373612][T16263] loop6: detected capacity change from 0 to 40427
[ 1083.392646][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1083.412703][T16067] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1083.438522][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1083.450311][T16263] F2FS-fs (loop6): invalid crc value
[ 1083.483154][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1083.502884][T16263] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1083.562929][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1083.583444][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1083.608509][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1083.649430][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1083.679853][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1083.694678][T16263] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1083.700611][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1083.756848][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1083.780709][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1083.808232][T16067] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1083.831263][T16312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3129'.
[ 1083.862061][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1083.894910][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1083.941503][T16067] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1083.971062][T16067] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1083.990441][T16067] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.024020][T16067] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.267617][T16321] FAULT_INJECTION: forcing a failure.
[ 1084.267617][T16321] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 1084.305626][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1084.328634][T16304] loop4: detected capacity change from 0 to 32768
[ 1084.347097][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1084.358304][T16321] CPU: 1 PID: 16321 Comm: syz.1.3132 Not tainted 5.15.173-syzkaller #0
[ 1084.366560][T16321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1084.376597][T16321] Call Trace:
[ 1084.379858][T16321]  <TASK>
[ 1084.382770][T16321]  dump_stack_lvl+0x1e3/0x2d0
[ 1084.387428][T16321]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1084.393042][T16321]  ? panic+0x860/0x860
[ 1084.397096][T16321]  should_fail+0x38a/0x4c0
[ 1084.401495][T16321]  prepare_alloc_pages+0x1db/0x5b0
[ 1084.406589][T16321]  __alloc_pages+0x14f/0x700
[ 1084.411157][T16321]  ? __rmqueue_pcplist+0x23a0/0x23a0
[ 1084.416426][T16321]  ? alloc_pages+0x458/0x570
[ 1084.421010][T16321]  kmalloc_order+0x41/0x150
[ 1084.425507][T16321]  kmalloc_order_trace+0x15/0xe0
[ 1084.430430][T16321]  __kmalloc+0x214/0x300
[ 1084.434656][T16321]  ? ldsem_down_read+0xb2/0xe0
[ 1084.439417][T16321]  file_tty_write+0x323/0x920
[ 1084.444120][T16321]  ? n_hdlc_tty_read+0xa50/0xa50
[ 1084.449042][T16321]  vfs_write+0xacd/0xe50
[ 1084.453274][T16321]  ? file_end_write+0x250/0x250
[ 1084.458106][T16321]  ? __fget_files+0x413/0x480
[ 1084.462769][T16321]  ? __fdget_pos+0x1e9/0x380
[ 1084.467345][T16321]  ? ksys_write+0x77/0x2c0
[ 1084.471744][T16321]  ksys_write+0x1a2/0x2c0
[ 1084.476056][T16321]  ? print_irqtrace_events+0x210/0x210
[ 1084.481495][T16321]  ? __ia32_sys_read+0x80/0x80
[ 1084.486239][T16321]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1084.492217][T16321]  ? lockdep_hardirqs_on+0x94/0x130
[ 1084.497413][T16321]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1084.503373][T16321]  do_syscall_64+0x3b/0xb0
[ 1084.507767][T16321]  ? clear_bhb_loop+0x15/0x70
[ 1084.512430][T16321]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1084.518303][T16321] RIP: 0033:0x7ffb01f10759
[ 1084.522707][T16321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1084.542394][T16321] RSP: 002b:00007ffb00388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1084.550793][T16321] RAX: ffffffffffffffda RBX: 00007ffb020c7f80 RCX: 00007ffb01f10759
[ 1084.558761][T16321] RDX: 00000000fffffdef RSI: 0000000020001040 RDI: 0000000000000007
[ 1084.566726][T16321] RBP: 00007ffb00388090 R08: 0000000000000000 R09: 0000000000000000
[ 1084.574686][T16321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1084.582668][T16321] R13: 0000000000000000 R14: 00007ffb020c7f80 R15: 00007ffd21e89748
[ 1084.590647][T16321]  </TASK>
[ 1084.619876][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1084.631158][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1084.647336][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1084.658353][   T26] audit: type=1326 audit(1732062149.029:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16323 comm="syz.3.3133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87bbce759 code=0x0
[ 1084.694669][T16304] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.3128 (16304)
[ 1084.705960][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1084.821041][T16304] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[ 1084.843249][T16304] BTRFS info (device loop4): force zlib compression, level 3
[ 1084.890180][T16304] BTRFS info (device loop4): max_inline at 4096
[ 1084.904625][T16304] BTRFS info (device loop4): using free space tree
[ 1084.931332][T16304] BTRFS info (device loop4): has skinny extents
[ 1085.222677][T16352] FAULT_INJECTION: forcing a failure.
[ 1085.222677][T16352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1085.235978][T16352] CPU: 0 PID: 16352 Comm: syz.6.3134 Not tainted 5.15.173-syzkaller #0
[ 1085.244232][T16352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1085.254298][T16352] Call Trace:
[ 1085.257580][T16352]  <TASK>
[ 1085.260513][T16352]  dump_stack_lvl+0x1e3/0x2d0
[ 1085.265201][T16352]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1085.270843][T16352]  ? panic+0x860/0x860
[ 1085.274925][T16352]  ? validate_chain+0x112/0x5930
[ 1085.279869][T16352]  ? validate_chain+0x112/0x5930
[ 1085.284827][T16352]  should_fail+0x38a/0x4c0
[ 1085.289255][T16352]  _copy_from_user+0x2d/0x170
[ 1085.293936][T16352]  __copy_msghdr_from_user+0xaf/0x7c0
[ 1085.299320][T16352]  ? __ia32_sys_shutdown+0x60/0x60
[ 1085.304461][T16352]  ___sys_sendmsg+0x166/0x2e0
[ 1085.309148][T16352]  ? __sys_sendmsg+0x260/0x260
[ 1085.313965][T16352]  ? __fdget+0x191/0x220
[ 1085.318214][T16352]  __se_sys_sendmsg+0x19a/0x260
[ 1085.323067][T16352]  ? __x64_sys_sendmsg+0x80/0x80
[ 1085.328013][T16352]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1085.333997][T16352]  ? lockdep_hardirqs_on+0x94/0x130
[ 1085.339197][T16352]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1085.345177][T16352]  do_syscall_64+0x3b/0xb0
[ 1085.349592][T16352]  ? clear_bhb_loop+0x15/0x70
[ 1085.354270][T16352]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1085.360173][T16352] RIP: 0033:0x7fa24891b759
[ 1085.364595][T16352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1085.384212][T16352] RSP: 002b:00007fa246d93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1085.392631][T16352] RAX: ffffffffffffffda RBX: 00007fa248ad2f80 RCX: 00007fa24891b759
[ 1085.400605][T16352] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[ 1085.408577][T16352] RBP: 00007fa246d93090 R08: 0000000000000000 R09: 0000000000000000
[ 1085.416546][T16352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1085.424523][T16352] R13: 0000000000000000 R14: 00007fa248ad2f80 R15: 00007ffdea9c7ea8
[ 1085.432507][T16352]  </TASK>
[ 1086.221703][T16369] loop6: detected capacity change from 0 to 16
[ 1086.869802][T16369] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1086.892261][ T4170] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[ 1086.912584][T16366] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[ 1086.932075][   T26] audit: type=1800 audit(1732062151.299:476): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3139" name="file3" dev="loop6" ino=89 res=0 errno=0
[ 1087.003871][T16304] BTRFS error (device loop4): open_ctree failed
[ 1087.328716][T16332] loop7: detected capacity change from 0 to 40427
[ 1087.455991][T16332] F2FS-fs (loop7): invalid crc value
[ 1087.502203][T16332] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1087.694322][T16332] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1087.844525][T16067] attempt to access beyond end of device
[ 1087.844525][T16067] loop7: rw=2049, want=45104, limit=40427
[ 1088.041256][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1088.438366][T16417] loop6: detected capacity change from 0 to 512
[ 1088.762045][T16373] loop1: detected capacity change from 0 to 32768
[ 1088.802804][T16417] EXT4-fs (loop6): Mount option "dax=inode" incompatible with ext2
[ 1089.092693][T16373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3138 (16373)
[ 1089.797476][T16373] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1089.808459][T16373] BTRFS info (device loop1): using free space tree
[ 1089.812919][T16432] loop4: detected capacity change from 0 to 512
[ 1089.815070][T16373] BTRFS info (device loop1): has skinny extents
[ 1089.928655][T16450] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3150'.
[ 1089.990406][T16432] EXT4-fs (loop4): Mount option "dax=inode" incompatible with ext2
[ 1090.131127][T16456] loop3: detected capacity change from 0 to 1024
[ 1090.138665][T16459] loop7: detected capacity change from 0 to 128
[ 1090.214972][T16456] hfsplus: invalid gid specified
[ 1090.228131][T16456] hfsplus: unable to parse mount options
[ 1090.273676][T16373] BTRFS error (device loop1): open_ctree failed
[ 1090.283618][T10637] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (10637)
[ 1090.299601][T16459] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1090.412386][T16459] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1090.540511][T16478] loop6: detected capacity change from 0 to 512
[ 1090.572551][T16459] fscrypt (loop7, inode 12): Unsupported encryption flags (0x23)
[ 1090.620650][T16478] EXT4-fs (loop6): Mount option "dax=inode" incompatible with ext2
[ 1090.993492][T16474] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1091.263606][T16474] usb 8-1: Using ep0 maxpacket: 32
[ 1091.448948][T16474] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1091.483527][T16474] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11
[ 1091.515218][T16474] usb 8-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1091.530032][T16474] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1091.537166][T16474] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1091.546543][T16474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.575447][T16474] usb 8-1: config 0 descriptor??
[ 1092.353510][    T7] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1092.488582][T16474] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0
[ 1092.694227][T16474] hid-thrustmaster 0003:044F:B65D.0003: setup data couldn't be sent
[ 1092.725684][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1092.743493][    C1] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71
[ 1092.761561][T16474] usb 8-1: USB disconnect, device number 2
[ 1092.923584][ T4258] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1093.152113][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1093.174959][    T7] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[ 1093.184529][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1093.193826][ T4258] usb 2-1: Using ep0 maxpacket: 32
[ 1093.206616][    T7] usb 7-1: config 0 descriptor??
[ 1093.482671][T16543] loop7: detected capacity change from 0 to 16
[ 1093.524466][ T4258] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1093.561612][T16543] erofs: (device loop7): mounted with root inode @ nid 36.
[ 1093.641844][ T4170] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[ 1093.665124][T16543] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[ 1093.893046][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1093.903685][   T26] audit: type=1800 audit(1732062158.059:477): pid=16543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3164" name="file3" dev="loop7" ino=89 res=0 errno=0
[ 1094.133675][ T4258] usb 2-1: Product: syz
[ 1094.137983][ T4258] usb 2-1: Manufacturer: syz
[ 1094.142669][ T4258] usb 2-1: SerialNumber: syz
[ 1094.149956][ T4258] usb 2-1: config 0 descriptor??
[ 1094.203586][    T7] usbhid 7-1:0.0: can't add hid device: -71
[ 1094.209541][    T7] usbhid: probe of 7-1:0.0 failed with error -71
[ 1094.234492][    T7] usb 7-1: USB disconnect, device number 23
[ 1094.242807][ T4258] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1094.250634][T16554] loop6: detected capacity change from 0 to 128
[ 1094.293361][T16554] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[ 1094.452029][  T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1095.163038][  T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1095.528900][  T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1095.688306][T16576] loop6: detected capacity change from 0 to 256
[ 1095.711172][  T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1095.742538][T16576] exfat: Deprecated parameter 'namecase'
[ 1095.761756][T16541] chnl_net:caif_netlink_parms(): no params data found
[ 1095.786999][T16576] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1096.447706][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[ 1096.473943][ T4258] gspca_ov534_9: reg_r err -32
[ 1096.482659][   T26] audit: type=1800 audit(1732062160.849:478): pid=16573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3170" name="file1" dev="loop6" ino=1049338 res=0 errno=0
[ 1096.503999][   T26] audit: type=1800 audit(1732062160.859:479): pid=16573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3170" name="file1" dev="loop6" ino=1049338 res=0 errno=0
[ 1096.876893][T16541] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1096.909718][T16541] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1096.955890][T16541] device bridge_slave_0 entered promiscuous mode
[ 1096.996935][T16541] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1097.037213][T16541] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1097.081845][T16541] device bridge_slave_1 entered promiscuous mode
[ 1097.104300][  T154] tipc: Disabling bearer <udp:syz2>
[ 1097.110207][  T154] tipc: Left network mode
[ 1097.251577][T16541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1097.263840][ T4258] gspca_ov534_9: Unknown sensor 0000
[ 1097.263898][ T4258] ov534_9: probe of 2-1:0.0 failed with error -22
[ 1097.270489][T16541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1097.360133][T16541] team0: Port device team_slave_0 added
[ 1097.376373][T16541] team0: Port device team_slave_1 added
[ 1097.418484][T16541] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1097.434574][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1097.461188][T16541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1097.475645][T16541] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1097.482680][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1097.483314][ T4258] usb 2-1: USB disconnect, device number 30
[ 1097.509368][T16541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1097.599591][T16541] device hsr_slave_0 entered promiscuous mode
[ 1097.606551][T16541] device hsr_slave_1 entered promiscuous mode
[ 1097.613006][T16541] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1097.620603][T16541] Cannot create hsr debugfs directory
[ 1098.000655][  T154] device batadv0 left promiscuous mode
[ 1098.008497][  T154] device bridge0 left promiscuous mode
[ 1098.017677][  T154] device hsr_slave_0 left promiscuous mode
[ 1098.028756][  T154] device hsr_slave_1 left promiscuous mode
[ 1098.035351][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1098.042765][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1098.050928][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1098.058517][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1098.066143][  T154] device bridge_slave_1 left promiscuous mode
[ 1098.072297][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.081068][  T154] device bridge_slave_0 left promiscuous mode
[ 1098.087874][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.100243][  T154] device veth1_macvtap left promiscuous mode
[ 1098.107154][  T154] device veth0_macvtap left promiscuous mode
[ 1098.113160][  T154] device veth1_vlan left promiscuous mode
[ 1098.119011][  T154] device veth0_vlan left promiscuous mode
[ 1098.248412][  T154] team0 (unregistering): Port device team_slave_1 removed
[ 1098.259850][  T154] team0 (unregistering): Port device team_slave_0 removed
[ 1098.275592][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1098.289493][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1098.351165][  T154] bond0 (unregistering): Released all slaves
[ 1098.553835][T16390] Bluetooth: hci2: command 0x041b tx timeout
[ 1098.664389][T16541] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1098.691674][T16541] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1098.702467][T16541] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1098.726388][T16541] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1098.831704][T16541] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1098.859634][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1098.889271][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1098.904363][T16541] 8021q: adding VLAN 0 to HW filter on device team0
[ 1098.913204][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1098.922380][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1098.937588][T10425] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1098.944714][T10425] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1098.958217][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1098.989142][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1099.014222][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1099.022689][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1099.029802][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1099.054360][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1099.075646][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1099.105752][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1099.120127][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1099.129231][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1099.145897][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1099.159922][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1099.169905][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1099.189272][T16541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1099.201457][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1099.231395][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1099.244434][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1099.264943][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1099.429892][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1099.453119][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1099.466357][T16541] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1099.693767][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1099.702965][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1099.749108][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1099.790953][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1099.820319][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1099.828939][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1099.861508][T16541] device veth0_vlan entered promiscuous mode
[ 1099.887504][T16541] device veth1_vlan entered promiscuous mode
[ 1099.920407][T16541] device veth0_macvtap entered promiscuous mode
[ 1099.929222][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1099.944216][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1099.963832][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1099.972600][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1099.996855][T16541] device veth1_macvtap entered promiscuous mode
[ 1100.010057][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1100.034956][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1100.051884][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1100.062692][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.075328][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1100.087148][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.097324][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1100.108058][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.119484][T16541] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1100.132046][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1100.154261][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1100.165168][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1100.176317][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.187718][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1100.199616][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.210231][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1100.223181][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.238682][T16541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1100.249266][T16541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.267014][T16541] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1100.277096][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1100.286006][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1100.298124][T16541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.308534][T16541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.321374][T16541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.332883][T16541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.420577][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1100.439707][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1100.458725][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1100.476402][ T8950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1100.486923][ T8950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1100.500079][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1100.568949][T16691] loop4: detected capacity change from 0 to 128
[ 1100.624043][ T6571] Bluetooth: hci2: command 0x040f tx timeout
[ 1100.672630][T16691] FAULT_INJECTION: forcing a failure.
[ 1100.672630][T16691] name failslab, interval 1, probability 0, space 0, times 0
[ 1100.685511][T16691] CPU: 0 PID: 16691 Comm: syz.4.3163 Not tainted 5.15.173-syzkaller #0
[ 1100.693750][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1100.703805][T16691] Call Trace:
[ 1100.707071][T16691]  <TASK>
[ 1100.709985][T16691]  dump_stack_lvl+0x1e3/0x2d0
[ 1100.714644][T16691]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1100.720259][T16691]  ? panic+0x860/0x860
[ 1100.724316][T16691]  ? __might_sleep+0xc0/0xc0
[ 1100.728888][T16691]  should_fail+0x38a/0x4c0
[ 1100.733290][T16691]  should_failslab+0x5/0x20
[ 1100.737945][T16691]  slab_pre_alloc_hook+0x53/0xc0
[ 1100.742877][T16691]  ? getname_flags+0xb8/0x4e0
[ 1100.747560][T16691]  kmem_cache_alloc+0x3f/0x280
[ 1100.752337][T16691]  getname_flags+0xb8/0x4e0
[ 1100.756841][T16691]  __x64_sys_renameat2+0xab/0xe0
[ 1100.761764][T16691]  do_syscall_64+0x3b/0xb0
[ 1100.766161][T16691]  ? clear_bhb_loop+0x15/0x70
[ 1100.770829][T16691]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1100.776707][T16691] RIP: 0033:0x7fbd65e30759
[ 1100.781104][T16691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1100.800700][T16691] RSP: 002b:00007fbd642a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[ 1100.809120][T16691] RAX: ffffffffffffffda RBX: 00007fbd65fe7f80 RCX: 00007fbd65e30759
[ 1100.817072][T16691] RDX: ffffffffffffff9c RSI: 0000000020000400 RDI: ffffffffffffff9c
[ 1100.825030][T16691] RBP: 00007fbd642a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1100.832984][T16691] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[ 1100.840936][T16691] R13: 0000000000000000 R14: 00007fbd65fe7f80 R15: 00007fff91f6ac08
[ 1100.848908][T16691]  </TASK>
[ 1102.705595][T16390] Bluetooth: hci2: command 0x0419 tx timeout
[ 1107.757190][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3173'.
[ 1107.794358][T16786] loop3: detected capacity change from 0 to 512
[ 1107.937152][T16789] loop7: detected capacity change from 0 to 2048
[ 1107.943960][T16786] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[ 1108.101728][T16786] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3176: bg 0: block 131: padding at end of block bitmap is not set
[ 1108.557374][T16790] loop6: detected capacity change from 0 to 4096
[ 1108.569713][T16786] EXT4-fs (loop3): Remounting filesystem read-only
[ 1108.598721][T16786] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem
[ 1108.610891][T16786] EXT4-fs (loop3): Remounting filesystem read-only
[ 1108.648521][T16786] EXT4-fs (loop3): 1 truncate cleaned up
[ 1108.663856][T16786] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,i_version,data_err=ignore,. Quota mode: writeback.
[ 1108.731951][ T4275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.026450][ T4275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.145696][T16814] loop4: detected capacity change from 0 to 128
[ 1109.242453][T16814] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[ 1109.269041][ T4275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.451463][T16818] loop3: detected capacity change from 0 to 256
[ 1109.525109][ T4275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.723738][T16824] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1110.715970][T16824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3180'.
[ 1110.725103][T16824] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3180'.
[ 1110.783726][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[ 1110.861654][T16830] loop4: detected capacity change from 0 to 256
[ 1111.080553][T16837] loop3: detected capacity change from 0 to 512
[ 1111.110627][T16834] loop6: detected capacity change from 0 to 4096
[ 1111.200864][T16837] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 1111.225482][T16799] chnl_net:caif_netlink_parms(): no params data found
[ 1111.241474][T16837] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[ 1111.258214][T16834] ntfs: volume version 3.1.
[ 1111.300557][T16837] EXT4-fs (loop3): group descriptors corrupted!
[ 1111.433899][T16845] loop4: detected capacity change from 0 to 512
[ 1111.459326][T16848] loop6: detected capacity change from 0 to 512
[ 1111.521410][T16845] EXT4-fs (loop4): Mount option "dax=inode" incompatible with ext2
[ 1111.530865][T16848] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[ 1111.629225][T16799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1111.645066][T16848] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3189: bg 0: block 131: padding at end of block bitmap is not set
[ 1111.699794][T16799] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1111.709822][T16799] device bridge_slave_0 entered promiscuous mode
[ 1111.725332][T16848] EXT4-fs (loop6): Remounting filesystem read-only
[ 1111.733055][T16848] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem
[ 1111.814997][T16848] EXT4-fs (loop6): Remounting filesystem read-only
[ 1111.821684][T16848] EXT4-fs (loop6): 1 truncate cleaned up
[ 1111.827569][T16848] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,i_version,data_err=ignore,. Quota mode: writeback.
[ 1111.850592][T16799] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1111.861959][T16799] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1111.892757][T16855] loop4: detected capacity change from 0 to 4096
[ 1111.934555][T16799] device bridge_slave_1 entered promiscuous mode
[ 1111.952292][T16855] NILFS (loop4): invalid segment: Checksum error in segment payload
[ 1111.960661][T16855] NILFS (loop4): trying rollback from an earlier position
[ 1111.981761][T16855] NILFS (loop4): recovery cancelled because norecovery option was specified for a read/write mount
[ 1112.114864][T16799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1112.129632][T16863] loop6: detected capacity change from 0 to 128
[ 1112.156176][T16799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1112.181081][T16863] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[ 1112.339294][T16799] team0: Port device team_slave_0 added
[ 1112.347520][T16799] team0: Port device team_slave_1 added
[ 1112.376106][T16871] loop3: detected capacity change from 0 to 128
[ 1112.509142][T16871] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[ 1112.627604][T16799] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1112.634767][T16799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1112.675700][T16799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1112.753183][T16859] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3191'.
[ 1112.791116][T16799] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1112.855868][T16799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1112.871562][ T5795] Bluetooth: hci0: command 0x041b tx timeout
[ 1113.063471][T16799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1113.163666][ T5795] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1113.455016][T16894] loop6: detected capacity change from 0 to 4096
[ 1113.492819][T16896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3194'.
[ 1113.501858][T16896] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3194'.
[ 1113.545514][T16799] device hsr_slave_0 entered promiscuous mode
[ 1113.556901][T16894] ntfs: (device loop6): parse_options(): Unrecognized mount option [}ð€—«ôÌõEž.
[ 1113.579852][T16799] device hsr_slave_1 entered promiscuous mode
[ 1113.630616][T16799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1113.662121][T16799] Cannot create hsr debugfs directory
[ 1113.793525][ T5795] usb 5-1: Using ep0 maxpacket: 8
[ 1113.798893][T16900] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[ 1113.813830][T16900] overlayfs: missing 'lowerdir'
[ 1113.819521][T16902] FAULT_INJECTION: forcing a failure.
[ 1113.819521][T16902] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1113.859837][T16902] CPU: 0 PID: 16902 Comm: syz.6.3200 Not tainted 5.15.173-syzkaller #0
[ 1113.868102][T16902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1113.878154][T16902] Call Trace:
[ 1113.881429][T16902]  <TASK>
[ 1113.884355][T16902]  dump_stack_lvl+0x1e3/0x2d0
[ 1113.889031][T16902]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1113.894654][T16902]  ? panic+0x860/0x860
[ 1113.898717][T16902]  ? validate_chain+0x112/0x5930
[ 1113.903646][T16902]  ? validate_chain+0x112/0x5930
[ 1113.908610][T16902]  should_fail+0x38a/0x4c0
[ 1113.913026][T16902]  _copy_from_user+0x2d/0x170
[ 1113.917703][T16902]  iovec_from_user+0x13b/0x390
[ 1113.922477][T16902]  __import_iovec+0x72/0x4b0
[ 1113.927071][T16902]  ? __ia32_sys_shutdown+0x60/0x60
[ 1113.932193][T16902]  import_iovec+0xe6/0x120
[ 1113.936619][T16902]  ___sys_sendmsg+0x215/0x2e0
[ 1113.941297][T16902]  ? __sys_sendmsg+0x260/0x260
[ 1113.946098][T16902]  ? __fdget+0x191/0x220
[ 1113.950341][T16902]  __se_sys_sendmsg+0x19a/0x260
[ 1113.955191][T16902]  ? __x64_sys_sendmsg+0x80/0x80
[ 1113.960137][T16902]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1113.966114][T16902]  ? lockdep_hardirqs_on+0x94/0x130
[ 1113.971311][T16902]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1113.977303][T16902]  do_syscall_64+0x3b/0xb0
[ 1113.981728][T16902]  ? clear_bhb_loop+0x15/0x70
[ 1113.986408][T16902]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1113.992304][T16902] RIP: 0033:0x7fa24891b759
[ 1113.996729][T16902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1114.016341][T16902] RSP: 002b:00007fa246d93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1114.024759][T16902] RAX: ffffffffffffffda RBX: 00007fa248ad2f80 RCX: 00007fa24891b759
[ 1114.032732][T16902] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003
[ 1114.040703][T16902] RBP: 00007fa246d93090 R08: 0000000000000000 R09: 0000000000000000
[ 1114.048665][T16902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1114.056629][T16902] R13: 0000000000000000 R14: 00007fa248ad2f80 R15: 00007ffdea9c7ea8
[ 1114.064612][T16902]  </TASK>
[ 1114.270786][ T5795] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60
[ 1114.303119][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1114.324651][ T5795] usb 5-1: Product: syz
[ 1114.328829][ T5795] usb 5-1: Manufacturer: syz
[ 1114.345524][ T5795] usb 5-1: SerialNumber: syz
[ 1114.372265][ T5795] r8152-cfgselector 5-1: config 0 descriptor??
[ 1114.643623][ T4275] device batadv0 left promiscuous mode
[ 1114.657355][ T4275] device bridge0 left promiscuous mode
[ 1114.696098][ T4275] device hsr_slave_0 left promiscuous mode
[ 1114.713666][ T4275] device hsr_slave_1 left promiscuous mode
[ 1114.774675][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1114.789942][T16940] loop3: detected capacity change from 0 to 16
[ 1114.812698][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1114.893498][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1114.957463][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1115.127320][ T4275] device bridge_slave_1 left promiscuous mode
[ 1115.200124][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1115.317722][ T4275] device bridge_slave_0 left promiscuous mode
[ 1115.327026][T16943] loop4: detected capacity change from 0 to 256
[ 1115.398485][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1115.402017][ T4207] Bluetooth: hci0: command 0x040f tx timeout
[ 1115.418353][T16940] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1115.454514][T16943] exfat: Bad value for 'uid'
[ 1115.468460][ T4275] device veth0_macvtap left promiscuous mode
[ 1115.480507][ T4275] device veth1_vlan left promiscuous mode
[ 1115.514037][T16945] loop6: detected capacity change from 0 to 128
[ 1115.617821][T16945] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1115.706505][T16945] ext4 filesystem being mounted at /590/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1115.746982][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.753295][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.806769][T16950] loop3: detected capacity change from 0 to 2048
[ 1115.823575][ T5795] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1115.840883][ T5795] r8152-cfgselector 5-1: bad CDC descriptors
[ 1115.858193][T16935] EXT4-fs warning (device loop6): ext4_group_extend:1852: can't read last block, resize aborted
[ 1115.890863][T16951] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1115.908275][ T5795] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1115.920738][T16950] NILFS (loop3): error -2 truncating bmap (ino=16)
[ 1115.944429][ T5795] r8152-cfgselector 5-1: USB disconnect, device number 24
[ 1116.044362][ T4275] team0 (unregistering): Port device team_slave_1 removed
[ 1116.059160][ T4275] team0 (unregistering): Port device team_slave_0 removed
[ 1116.075325][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1116.094602][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1116.176143][ T4275] bond0 (unregistering): Released all slaves
[ 1116.636881][T16799] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1116.665526][T16970] overlayfs: missing 'lowerdir'
[ 1116.727956][T16799] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1116.774641][T16799] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1116.786338][T16799] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1116.868521][T16974] loop3: detected capacity change from 0 to 512
[ 1116.977756][T16799] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1117.035145][T16974] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[ 1117.039443][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1117.074730][T16974] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3214: bg 0: block 131: padding at end of block bitmap is not set
[ 1117.100205][T16067] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh
[ 1117.100945][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1117.117003][T16067] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh
[ 1117.209571][T16799] 8021q: adding VLAN 0 to HW filter on device team0
[ 1117.241060][T16989] input: syz1 as /devices/virtual/input/input158
[ 1117.262721][T16974] EXT4-fs (loop3): Remounting filesystem read-only
[ 1117.283698][T16974] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem
[ 1117.299181][T16974] EXT4-fs (loop3): Remounting filesystem read-only
[ 1117.315756][T16974] EXT4-fs (loop3): 1 truncate cleaned up
[ 1117.328274][T16974] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,i_version,data_err=ignore,. Quota mode: writeback.
[ 1117.355467][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1117.379565][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1117.410275][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1117.417406][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1117.423666][ T5801] Bluetooth: hci0: command 0x0419 tx timeout
[ 1117.456092][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1117.506331][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1117.545635][ T1443] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1117.552709][ T1443] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1117.569096][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1117.580515][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1117.631606][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1117.657130][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1117.671745][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1117.833707][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1117.841662][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1117.886663][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1117.907177][T17016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3224'.
[ 1117.922530][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1117.957277][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1118.012732][T16799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1118.070852][T16799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1118.101274][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1118.141312][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1118.152959][T16996] loop4: detected capacity change from 0 to 32768
[ 1118.444953][T16996] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1118.559081][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1118.599080][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1118.614112][T16541] ocfs2: Unmounting device (7,4) on (node local)
[ 1118.659304][T16799] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1118.821216][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1118.838503][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1118.892354][T16799] device veth0_vlan entered promiscuous mode
[ 1118.954726][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1118.979976][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1119.006589][T17043] FAULT_INJECTION: forcing a failure.
[ 1119.006589][T17043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1119.024354][T16799] device veth1_vlan entered promiscuous mode
[ 1119.047926][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1119.064569][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1119.071583][T17043] CPU: 1 PID: 17043 Comm: syz.4.3228 Not tainted 5.15.173-syzkaller #0
[ 1119.073005][T17037] loop3: detected capacity change from 0 to 4096
[ 1119.079992][T17043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1119.080005][T17043] Call Trace:
[ 1119.080011][T17043]  <TASK>
[ 1119.080018][T17043]  dump_stack_lvl+0x1e3/0x2d0
[ 1119.080044][T17043]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1119.080062][T17043]  ? panic+0x860/0x860
[ 1119.080084][T17043]  ? __might_sleep+0xc0/0xc0
[ 1119.080108][T17043]  should_fail+0x38a/0x4c0
[ 1119.080133][T17043]  copy_page_from_iter+0x33b/0x750
[ 1119.080168][T17043]  tun_get_user+0x1c55/0x40f0
[ 1119.080203][T17043]  ? tun_ring_recv+0xcc0/0xcc0
[ 1119.080227][T17043]  ? rcu_lock_release+0x5/0x20
[ 1119.080264][T17043]  tun_chr_write_iter+0x10c/0x1e0
[ 1119.080284][T17043]  vfs_write+0xacd/0xe50
[ 1119.080308][T17043]  ? file_end_write+0x250/0x250
[ 1119.094386][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1119.096647][T17043]  ? __fget_files+0x413/0x480
[ 1119.171604][T17043]  ? __fdget_pos+0x1e9/0x380
[ 1119.176183][T17043]  ? ksys_write+0x77/0x2c0
[ 1119.180583][T17043]  ksys_write+0x1a2/0x2c0
[ 1119.184897][T17043]  ? print_irqtrace_events+0x210/0x210
[ 1119.190350][T17043]  ? __ia32_sys_read+0x80/0x80
[ 1119.195099][T17043]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1119.201060][T17043]  ? lockdep_hardirqs_on+0x94/0x130
[ 1119.206241][T17043]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1119.212204][T17043]  do_syscall_64+0x3b/0xb0
[ 1119.216600][T17043]  ? clear_bhb_loop+0x15/0x70
[ 1119.221259][T17043]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1119.227133][T17043] RIP: 0033:0x7fbd65e2f23f
[ 1119.231536][T17043] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[ 1119.251123][T17043] RSP: 002b:00007fbd642a8000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1119.259523][T17043] RAX: ffffffffffffffda RBX: 00007fbd65fe7f80 RCX: 00007fbd65e2f23f
[ 1119.267477][T17043] RDX: 000000000000006f RSI: 00000000200008c0 RDI: 00000000000000c8
[ 1119.275438][T17043] RBP: 00007fbd642a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1119.283390][T17043] R10: 000000000000006f R11: 0000000000000293 R12: 0000000000000001
[ 1119.291343][T17043] R13: 0000000000000000 R14: 00007fbd65fe7f80 R15: 00007fff91f6ac08
[ 1119.299314][T17043]  </TASK>
[ 1119.318756][T17028] loop6: detected capacity change from 0 to 40427
[ 1119.376356][T17028] F2FS-fs (loop6): invalid crc value
[ 1119.402624][T17037] ntfs: volume version 3.1.
[ 1119.470054][T17028] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1119.502934][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1119.524520][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1119.555202][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1119.597093][T16799] device veth0_macvtap entered promiscuous mode
[ 1119.674713][T16799] device veth1_macvtap entered promiscuous mode
[ 1119.700634][T17028] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1119.717943][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1119.717942][T17060] loop4: detected capacity change from 0 to 128
[ 1119.823560][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.862442][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1119.893487][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.903320][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1119.926539][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.958107][T16799] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1119.982144][T17032] chnl_net:caif_netlink_parms(): no params data found
[ 1120.017700][T17060] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[ 1120.062298][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1120.081144][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1120.120783][T16172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1120.123083][T17066] loop3: detected capacity change from 0 to 128
[ 1120.148565][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1120.163509][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1120.196872][T17066] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[ 1120.204930][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1120.233009][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1120.253241][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1120.273760][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1120.296568][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1120.317542][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1120.339158][T16799] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1120.370199][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1120.393044][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1120.497387][ T5801] Bluetooth: hci1: command 0x0409 tx timeout
[ 1120.506099][T16799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1120.591099][T16799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1120.653508][T16799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1121.225532][T16799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1121.384556][T17071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3230'.
[ 1121.393559][T17071] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3230'.
[ 1121.704579][T17032] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1121.714239][T17032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1121.744959][T17032] device bridge_slave_0 entered promiscuous mode
[ 1121.802302][T17032] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1121.813559][T17032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1121.848476][T17032] device bridge_slave_1 entered promiscuous mode
[ 1122.012762][T17081] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3232'.
[ 1122.054554][T17032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1122.079982][T17082] loop6: detected capacity change from 0 to 512
[ 1122.140823][T17032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1122.291853][T17082] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1122.328303][T17032] team0: Port device team_slave_0 added
[ 1122.360152][T17032] team0: Port device team_slave_1 added
[ 1122.374403][ T8950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1122.382677][ T8950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1122.393952][T17082] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1122.520288][T10425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1122.541861][T10425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1122.543710][ T5795] Bluetooth: hci1: command 0x041b tx timeout
[ 1122.564612][T10425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1122.611718][T17032] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1122.646937][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1122.714363][T17032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1122.728254][T17032] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1122.744548][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1122.843999][T17032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1122.866437][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1122.988052][T17079] loop4: detected capacity change from 0 to 32768
[ 1123.010562][T17032] device hsr_slave_0 entered promiscuous mode
[ 1123.028413][T17032] device hsr_slave_1 entered promiscuous mode
[ 1123.138094][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1123.285480][T17032] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1123.432349][T17032] Cannot create hsr debugfs directory
[ 1123.496417][T17079] XFS (loop4): Mounting V5 Filesystem
[ 1123.845800][T17079] XFS (loop4): Ending clean mount
[ 1124.048405][T17079] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3234'.
[ 1124.085803][ T4275] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1124.149571][ T4275] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1124.212542][ T4275] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1124.298210][ T4275] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1124.413659][T16387] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1124.448705][T17121] loop1: detected capacity change from 0 to 32768
[ 1124.499323][T17032] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1124.512527][T17137] loop3: detected capacity change from 0 to 128
[ 1124.513014][T17032] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1124.540651][T17032] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1124.551435][T17032] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1124.553786][ T4258] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1124.581051][T17137] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[ 1124.623574][ T5795] Bluetooth: hci1: command 0x040f tx timeout
[ 1124.686648][T17032] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1124.693621][T16387] usb 5-1: Using ep0 maxpacket: 32
[ 1124.759030][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1124.943846][T16387] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[ 1124.944648][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1124.958073][T16387] usb 5-1: config 0 has no interface number 0
[ 1125.151219][ T4258] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1125.183259][ T4258] usb 7-1: config 1 has no interface number 0
[ 1125.231213][ T4258] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1125.269554][ T4258] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1125.283662][T16387] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[ 1125.301736][T16387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1125.316538][ T4258] usb 7-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xF9, skipping
[ 1125.337878][T16387] usb 5-1: Product: syz
[ 1125.362902][T16387] usb 5-1: config 0 descriptor??
[ 1125.417639][T16387] usb 5-1: can't set config #0, error -71
[ 1125.424890][T16387] usb 5-1: USB disconnect, device number 25
[ 1125.449481][T17032] 8021q: adding VLAN 0 to HW filter on device team0
[ 1125.465310][T17140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3241'.
[ 1125.474856][T17140] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3241'.
[ 1125.613691][ T4258] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1125.626373][ T4258] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1125.630140][T17146] loop1: detected capacity change from 0 to 512
[ 1125.634699][ T4258] usb 7-1: Product: syz
[ 1125.645044][ T4258] usb 7-1: Manufacturer: syz
[ 1125.649844][ T4258] usb 7-1: SerialNumber: syz
[ 1125.660436][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1125.671054][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1125.681289][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1125.688389][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1125.699632][   T26] audit: type=1326 audit(1732062190.069:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17145 comm="syz.3.3244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87bbce759 code=0x0
[ 1125.763949][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1125.789843][T16541] XFS (loop4): Unmounting Filesystem
[ 1125.790476][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1125.809695][T17146] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1125.821026][T17146] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1125.862429][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1125.875505][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1125.882570][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1125.897857][T17130] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1125.909325][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1125.918328][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1126.003140][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1126.039167][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1126.066811][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1126.077365][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1126.105666][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1126.126253][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1126.179233][T17032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1126.196833][T17032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1126.231423][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1126.256418][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1126.295818][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1126.589170][T17130] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1126.617742][ T4258] cdc_ncm 7-1:1.1: bind() failure
[ 1126.632421][T17189] loop3: detected capacity change from 0 to 128
[ 1126.697422][ T4275] device hsr_slave_0 left promiscuous mode
[ 1126.713295][ T4275] device hsr_slave_1 left promiscuous mode
[ 1126.720228][ T4207] Bluetooth: hci1: command 0x0419 tx timeout
[ 1126.728679][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1126.729331][T17189] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1126.736623][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1126.757166][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1126.765140][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1126.773124][ T4275] device bridge_slave_1 left promiscuous mode
[ 1126.781650][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1126.782018][T17189] ext4 filesystem being mounted at /697/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1126.804616][ T4275] device bridge_slave_0 left promiscuous mode
[ 1126.821836][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1126.855804][ T4275] device veth1_macvtap left promiscuous mode
[ 1126.861847][ T4275] device veth0_macvtap left promiscuous mode
[ 1126.868644][T17130] loop6: detected capacity change from 0 to 1024
[ 1126.875536][ T4275] device veth1_vlan left promiscuous mode
[ 1126.881417][ T4275] device veth0_vlan left promiscuous mode
[ 1126.958400][T17130] EXT4-fs (loop6): Ignoring removed bh option
[ 1126.971471][T17189] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1127.011589][T17130] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,grpquota,noload,abort,lazytime,usrquota,resgid=0x0000000000000000,bh,,errors=continue. Quota mode: writeback.
[ 1127.066186][T17130] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1127.078459][T17189] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[ 1127.092665][   T26] audit: type=1800 audit(1732062191.459:481): pid=17130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3239" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1127.093779][T17130] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3239: bg 0: block 273: padding at end of block bitmap is not set
[ 1127.134362][ T5795] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1127.181947][   T26] audit: type=1804 audit(1732062191.509:482): pid=17130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3239" name="/newroot/599/file1/file1" dev="loop6" ino=15 res=1 errno=0
[ 1127.288859][ T4275] team0 (unregistering): Port device team_slave_1 removed
[ 1127.346538][ T4275] team0 (unregistering): Port device team_slave_0 removed
[ 1127.374436][T17211] loop3: detected capacity change from 0 to 1024
[ 1127.381131][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1127.404157][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1127.438703][T17214] loop4: detected capacity change from 0 to 512
[ 1127.497602][T17211] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none.
[ 1127.516100][ T5795] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[ 1127.526046][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.536988][ T5795] usb 2-1: config 0 descriptor??
[ 1127.559060][ T4275] bond0 (unregistering): Released all slaves
[ 1127.571428][T17214] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1127.594744][T17214] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1127.660591][T17220] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[ 1127.701039][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1127.712190][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1127.714235][T16390] usb 7-1: USB disconnect, device number 24
[ 1127.730023][T17032] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1127.864021][T17220] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 836 with error 28
[ 1127.938302][T17220] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1127.938302][T17220] 
[ 1127.992130][T17227] FAULT_INJECTION: forcing a failure.
[ 1127.992130][T17227] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1128.012384][T17220] EXT4-fs (loop3): Total free blocks count 0
[ 1128.018542][T17220] EXT4-fs (loop3): Free/Dirty block details
[ 1128.033647][T17227] CPU: 0 PID: 17227 Comm: syz.6.3256 Not tainted 5.15.173-syzkaller #0
[ 1128.041912][T17227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1128.048757][T17220] EXT4-fs (loop3): free_blocks=68451041280
[ 1128.051971][T17227] Call Trace:
[ 1128.051982][T17227]  <TASK>
[ 1128.057910][T17220] EXT4-fs (loop3): dirty_blocks=848
[ 1128.061015][T17227]  dump_stack_lvl+0x1e3/0x2d0
[ 1128.061044][T17227]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1128.061062][T17227]  ? panic+0x860/0x860
[ 1128.061090][T17227]  should_fail+0x38a/0x4c0
[ 1128.061114][T17227]  strncpy_from_user+0x32/0x370
[ 1128.061136][T17227]  getname_flags+0xf5/0x4e0
[ 1128.061177][T17227]  __x64_sys_execveat+0xa9/0xe0
[ 1128.061198][T17227]  do_syscall_64+0x3b/0xb0
[ 1128.061213][T17227]  ? clear_bhb_loop+0x15/0x70
[ 1128.061231][T17227]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1128.061251][T17227] RIP: 0033:0x7fa24891b759
[ 1128.061268][T17227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1128.061282][T17227] RSP: 002b:00007fa246d93038 EFLAGS: 00000246
[ 1128.064571][T17220] EXT4-fs (loop3): Block reservation details
[ 1128.069367][T17227]  ORIG_RAX: 0000000000000142
[ 1128.074106][T17220] EXT4-fs (loop3): i_reserved_data_blocks=53
[ 1128.079624][T17227] RAX: ffffffffffffffda RBX: 00007fa248ad2f80 RCX: 00007fa24891b759
[ 1128.079639][T17227] RDX: 0000000020000340 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 1128.079651][T17227] RBP: 00007fa246d93090 R08: 0000000000000000 R09: 0000000000000000
[ 1128.079662][T17227] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000001
[ 1128.195603][T17227] R13: 0000000000000000 R14: 00007fa248ad2f80 R15: 00007ffdea9c7ea8
[ 1128.203575][T17227]  </TASK>
[ 1128.391736][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1128.399247][T17248] FAULT_INJECTION: forcing a failure.
[ 1128.399247][T17248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1128.414703][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1128.434236][T17248] CPU: 0 PID: 17248 Comm: syz.6.3259 Not tainted 5.15.173-syzkaller #0
[ 1128.442508][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1128.452570][T17248] Call Trace:
[ 1128.455861][T17248]  <TASK>
[ 1128.458813][T17248]  dump_stack_lvl+0x1e3/0x2d0
[ 1128.463511][T17248]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1128.469158][T17248]  ? panic+0x860/0x860
[ 1128.473247][T17248]  ? validate_chain+0x112/0x5930
[ 1128.476528][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1128.478198][T17248]  ? validate_chain+0x112/0x5930
[ 1128.487084][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1128.490728][T17248]  should_fail+0x38a/0x4c0
[ 1128.502227][T17032] device veth0_vlan entered promiscuous mode
[ 1128.502727][T17248]  _copy_from_user+0x2d/0x170
[ 1128.513334][T17248]  iovec_from_user+0x13b/0x390
[ 1128.518111][T17248]  __import_iovec+0x72/0x4b0
[ 1128.519872][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1128.522696][T17248]  ? __ia32_sys_shutdown+0x60/0x60
[ 1128.531141][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1128.534956][T17248]  import_iovec+0xe6/0x120
[ 1128.534987][T17248]  ___sys_sendmsg+0x215/0x2e0
[ 1128.547496][T17032] device veth1_vlan entered promiscuous mode
[ 1128.551247][T17248]  ? __sys_sendmsg+0x260/0x260
[ 1128.561981][T17248]  ? __fdget+0x191/0x220
[ 1128.566238][T17248]  __se_sys_sendmsg+0x19a/0x260
[ 1128.571106][T17248]  ? __x64_sys_sendmsg+0x80/0x80
[ 1128.576066][T17248]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1128.582055][T17248]  ? lockdep_hardirqs_on+0x94/0x130
[ 1128.583043][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1128.587256][T17248]  ? syscall_enter_from_user_mode+0x2e/0x240
[ 1128.587285][T17248]  do_syscall_64+0x3b/0xb0
[ 1128.596307][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1128.600675][T17248]  ? clear_bhb_loop+0x15/0x70
[ 1128.612560][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1128.617159][T17248]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1128.617186][T17248] RIP: 0033:0x7fa24891b759
[ 1128.617204][T17248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1128.617218][T17248] RSP: 002b:00007fa246d93038 EFLAGS: 00000246
[ 1128.625889][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1128.630942][T17248]  ORIG_RAX: 000000000000002e
[ 1128.638140][T17032] device veth0_macvtap entered promiscuous mode
[ 1128.655013][T17248] RAX: ffffffffffffffda RBX: 00007fa248ad2f80 RCX: 00007fa24891b759
[ 1128.655030][T17248] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004
[ 1128.655040][T17248] RBP: 00007fa246d93090 R08: 0000000000000000 R09: 0000000000000000
[ 1128.655050][T17248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1128.655060][T17248] R13: 0000000000000000 R14: 00007fa248ad2f80 R15: 00007ffdea9c7ea8
[ 1128.655084][T17248]  </TASK>
[ 1128.676740][T17032] device veth1_macvtap entered promiscuous mode
[ 1128.741444][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1128.753766][ T4207] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1128.754068][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1128.782804][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.812689][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.823654][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.839970][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.850292][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.865748][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.877341][T17032] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1128.911883][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1128.913729][ T5795] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1128.924886][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1128.941317][ T8950] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 836 with error 28
[ 1128.966649][ T8950] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1128.966649][ T8950] 
[ 1128.988972][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1128.999541][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.015273][ T4207] usb 5-1: Using ep0 maxpacket: 32
[ 1129.027156][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.049995][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.060659][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.076774][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.087361][T17032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.098252][T17032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.109785][T17032] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1129.128301][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1129.133740][ T4207] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[ 1129.142892][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1129.153205][ T4207] usb 5-1: config 0 has no interface number 0
[ 1129.173657][ T4207] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1129.193184][ T4207] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[ 1129.208436][ T5795] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1129.232932][T17032] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.256637][ T5795] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[ 1129.267068][T17032] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.283593][ T4207] usb 5-1: config 0 interface 126 has no altsetting 0
[ 1129.290692][T17032] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.299610][ T5795] asix: probe of 2-1:0.0 failed with error -71
[ 1129.309331][T17032] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.323944][ T5795] usb 2-1: USB disconnect, device number 31
[ 1129.363092][T17262] loop6: detected capacity change from 0 to 512
[ 1129.443796][ T4207] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[ 1129.485553][ T4207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.514054][ T4207] usb 5-1: Product: syz
[ 1129.518591][ T4207] usb 5-1: Manufacturer: syz
[ 1129.519826][T17262] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[ 1129.523276][ T4207] usb 5-1: SerialNumber: syz
[ 1129.532974][ T1443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1129.538939][ T4207] usb 5-1: config 0 descriptor??
[ 1129.563922][T17236] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1129.576533][T17236] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1129.608279][T17262] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3261: bg 0: block 131: padding at end of block bitmap is not set
[ 1129.641569][ T1443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1129.655189][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1129.655799][T17262] EXT4-fs (loop6): Remounting filesystem read-only
[ 1129.671978][T17262] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem
[ 1129.681524][T17262] EXT4-fs (loop6): Remounting filesystem read-only
[ 1129.692907][T17262] EXT4-fs (loop6): 1 truncate cleaned up
[ 1129.696663][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1129.705610][T17262] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,i_version,data_err=ignore,. Quota mode: writeback.
[ 1129.712547][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1129.794933][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1130.089211][ T4207] ir_usb 5-1:0.126: IR Dongle converter detected
[ 1130.290763][T17295] loop1: detected capacity change from 0 to 128
[ 1130.301976][T17292] loop8: detected capacity change from 0 to 1024
[ 1130.311391][ T4207] usb 5-1: IR Dongle converter now attached to ttyUSB0
[ 1130.550218][T17292] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[ 1130.598485][T17292] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[ 1130.698453][T17295] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1131.159999][T17295] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1131.382401][  T144] hfsplus: b-tree write err: -5, ino 4
[ 1131.468556][T17236] loop4: detected capacity change from 0 to 128
[ 1131.593219][T17236] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[ 1131.800549][T17291] chnl_net:caif_netlink_parms(): no params data found
[ 1132.589342][T17236] loop4: detected capacity change from 0 to 8192
[ 1132.846707][T17291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1132.860889][T11767] Bluetooth: hci3: command 0x0409 tx timeout
[ 1132.892728][T17291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1132.916751][ T6571] usb 5-1: USB disconnect, device number 26
[ 1132.934424][T17291] device bridge_slave_0 entered promiscuous mode
[ 1132.973950][ T6571] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[ 1132.982924][ T6571] ir_usb 5-1:0.126: device disconnected
[ 1132.999172][T17291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1133.024549][T17291] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1133.032606][T17291] device bridge_slave_1 entered promiscuous mode
[ 1133.308337][T17291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1133.386052][T17291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1133.635970][T17291] team0: Port device team_slave_0 added
[ 1133.661154][T17291] team0: Port device team_slave_1 added
[ 1133.678029][T17364] loop8: detected capacity change from 0 to 2048
[ 1133.773545][T17291] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1133.812445][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1133.869686][T17371] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1133.882887][T17364] FAULT_INJECTION: forcing a failure.
[ 1133.882887][T17364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1133.943459][T17291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1133.945418][T17364] CPU: 1 PID: 17364 Comm: syz.8.3279 Not tainted 5.15.173-syzkaller #0
[ 1133.962204][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1133.972259][T17364] Call Trace:
[ 1133.975537][T17364]  <TASK>
[ 1133.978465][T17364]  dump_stack_lvl+0x1e3/0x2d0
[ 1133.983152][T17364]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1133.985650][T17291] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1133.988777][T17364]  ? panic+0x860/0x860
[ 1133.988813][T17364]  should_fail+0x38a/0x4c0
[ 1134.004158][T17364]  strncpy_from_user+0x32/0x370
[ 1134.009015][T17364]  getname_flags+0xf5/0x4e0
[ 1134.013521][T17364]  __x64_sys_renameat2+0xab/0xe0
[ 1134.018452][T17364]  do_syscall_64+0x3b/0xb0
[ 1134.022873][T17364]  ? clear_bhb_loop+0x15/0x70
[ 1134.026138][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1134.027545][T17364]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1134.059253][T17364] RIP: 0033:0x7f4aa99de759
[ 1134.063669][T17364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1134.083274][T17364] RSP: 002b:00007f4aa7e56038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[ 1134.091690][T17364] RAX: ffffffffffffffda RBX: 00007f4aa9b95f80 RCX: 00007f4aa99de759
[ 1134.099660][T17364] RDX: 0000000000000004 RSI: 0000000020000180 RDI: 0000000000000004
[ 1134.107629][T17364] RBP: 00007f4aa7e56090 R08: 0000000000000000 R09: 0000000000000000
[ 1134.115599][T17364] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001
[ 1134.123572][T17364] R13: 0000000000000000 R14: 00007f4aa9b95f80 R15: 00007ffd0ddd6a28
[ 1134.125991][T17291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1134.131555][T17364]  </TASK>
[ 1134.320506][T17291] device hsr_slave_0 entered promiscuous mode
[ 1134.362340][T17291] device hsr_slave_1 entered promiscuous mode
[ 1134.388193][T17291] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1134.412027][T17291] Cannot create hsr debugfs directory
[ 1134.545502][T17356] loop4: detected capacity change from 0 to 32768
[ 1134.624302][T17356] XFS: ikeep mount option is deprecated.
[ 1134.688002][T17291] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1134.694615][T17356] XFS (loop4): Mounting V5 Filesystem
[ 1134.884768][T17356] XFS (loop4): Ending clean mount
[ 1134.891175][T17394] ALSA: seq fatal error: cannot create timer (-22)
[ 1134.915220][T17356] XFS (loop4): Quotacheck needed: Please wait.
[ 1134.944268][ T5795] Bluetooth: hci3: command 0x041b tx timeout
[ 1135.050022][T17291] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.084956][T17356] XFS (loop4): Quotacheck: Done.
[ 1135.138514][T17402] loop8: detected capacity change from 0 to 512
[ 1135.214440][T17291] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.272132][T17402] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[ 1135.295709][T17409] loop3: detected capacity change from 0 to 512
[ 1135.330961][T17402] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,nogrpid,nogrpid,,errors=continue. Quota mode: none.
[ 1135.391830][   T26] audit: type=1800 audit(1732062199.759:483): pid=17402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3286" name="file0" dev="loop8" ino=13 res=0 errno=0
[ 1135.419175][T17409] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 1135.466681][T17291] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.475070][T17409] EXT4-fs (loop3): invalid journal inode
[ 1135.487034][T16541] XFS (loop4): Unmounting Filesystem
[ 1135.493940][T17409] EXT4-fs (loop3): can't get journal size
[ 1135.502147][   T26] audit: type=1800 audit(1732062199.809:484): pid=17415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3286" name="file2" dev="loop8" ino=16 res=0 errno=0
[ 1135.574154][T17409] EXT4-fs (loop3): 1 truncate cleaned up
[ 1135.579821][T17409] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[ 1136.179875][T17429] loop1: detected capacity change from 0 to 8192
[ 1136.269065][T17429]  loop1: p1 p2 p3
[ 1136.564133][T17428] loop8: detected capacity change from 0 to 2048
[ 1136.639443][T17428] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1136.832228][T16806] udevd[16806]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[ 1136.833261][T16810] udevd[16810]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[ 1136.852768][T16793] udevd[16793]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[ 1136.862989][ T5801] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1136.872189][T17291] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1136.928276][T17291] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1136.961224][T17291] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1136.975847][T17445] syz.4.3295 (17445) used obsolete PPPIOCDETACH ioctl
[ 1136.997462][T17291] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1137.001235][T17452] loop3: detected capacity change from 0 to 512
[ 1137.023814][T16390] Bluetooth: hci3: command 0x040f tx timeout
[ 1137.091521][T17452] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1137.125410][T16808] udevd[16808]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[ 1137.141938][T16793] udevd[16793]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[ 1137.160865][T16806] udevd[16806]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[ 1137.210952][T17461] loop4: detected capacity change from 0 to 2048
[ 1137.218100][T17452] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000]
[ 1137.253592][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1137.313827][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1137.337683][T17291] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1137.361500][T17452] EXT4-fs (loop3): 1 truncate cleaned up
[ 1137.370001][T17461]  loop4: p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 
[ 1137.393595][T17452] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback.
[ 1137.396764][T17471] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1137.493504][ T5801] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1137.544691][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1137.552437][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1137.569038][T17291] 8021q: adding VLAN 0 to HW filter on device team0
[ 1137.578918][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1137.603145][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1137.612132][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1137.619246][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1137.633274][ T5801] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1137.659734][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1137.669317][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1137.684639][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1137.693272][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1137.705876][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1137.712946][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1137.721888][ T1443] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[ 1137.734282][ T5801] usb 2-1: config 0 descriptor??
[ 1137.739850][ T1443] EXT4-fs error (device loop3): ext4_release_dquot:6220: comm kworker/u4:4: Failed to release dquot type 1
[ 1137.756093][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1137.765479][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1137.780165][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1137.808101][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1137.823261][T17452] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[ 1137.846696][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1137.871274][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1137.906461][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1137.931776][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1137.958058][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1137.978703][   T26] audit: type=1800 audit(1732062202.349:485): pid=17452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3296" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 1138.002842][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1138.020689][  T154] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5)
[ 1138.021497][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1138.040495][  T154] EXT4-fs error (device loop3): ext4_release_dquot:6220: comm kworker/u4:2: Failed to release dquot type 1
[ 1138.048932][T17291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1138.106933][T17461]  loop4: p197 could not be added: -ENOMEM
[ 1138.216513][ T5801] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[ 1138.278601][ T5801] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1138.326900][T17490] loop3: detected capacity change from 0 to 4096
[ 1138.361369][T17498] loop8: detected capacity change from 0 to 2048
[ 1138.387201][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1138.401642][T17490] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1138.424085][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1138.479717][T17291] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1138.490796][T17490] EXT4-fs (loop3): re-mounted. Opts: usrjquota=. Quota mode: writeback.
[ 1138.517480][T17498] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1138.518901][ T5801] usb 2-1: USB disconnect, device number 32
[ 1138.664150][T17511] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.3304: iget: checksum invalid
[ 1138.768092][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1138.820913][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1138.844638][T17032] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[ 1138.894881][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1138.907889][T17032] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[ 1138.917749][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1138.961831][T17291] device veth0_vlan entered promiscuous mode
[ 1138.973907][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1139.000207][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1139.148085][T17477] Bluetooth: hci3: command 0x0419 tx timeout
[ 1139.163022][T17039] ------------[ cut here ]------------
[ 1139.168988][T17039] sysfs group 'byte_queue_limits' not found for kobject 'tx-0'
[ 1139.177281][T17039] WARNING: CPU: 1 PID: 17039 at fs/sysfs/group.c:281 sysfs_remove_group+0x179/0x2a0
[ 1139.186727][T17039] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1139.190656][T17039] CPU: 1 PID: 17039 Comm: kbnepd bnep0 Not tainted 5.15.173-syzkaller #0
[ 1139.204429][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1139.214686][T17039] RIP: 0010:sysfs_remove_group+0x179/0x2a0
[ 1139.220517][T17039] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 4a a1 cc ff 49 8b 14 24 48 c7 c7 40 bc 99 8a 4c 89 f6 e8 c7 64 4e ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 c8 82 ff
[ 1139.243018][T17039] RSP: 0018:ffffc90004407928 EFLAGS: 00010246
[ 1139.271602][T17039] RAX: 9fbbea470b772000 RBX: ffff888020dbcc48 RCX: ffff88802bced940
[ 1139.279762][T17039] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1139.287786][T17039] RBP: dffffc0000000000 R08: ffffffff81669a1c R09: ffffed10172267a8
[ 1139.295892][T17039] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888020dbcc18
[ 1139.303546][T17477] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[ 1139.303924][T17039] R13: 1ffffffff16fd878 R14: ffffffff8b7ecae0 R15: ffff88807e090cb0
[ 1139.319423][T17039] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[ 1139.329010][T17039] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1139.335754][T17039] CR2: 00007ffe9ea15dbc CR3: 000000000c68e000 CR4: 00000000003506e0
[ 1139.345800][T17039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1139.354121][T17039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1139.362102][T17039] Call Trace:
[ 1139.365478][T17039]  <TASK>
[ 1139.368416][T17039]  ? __warn+0x15b/0x300
[ 1139.372582][T17039]  ? sysfs_remove_group+0x179/0x2a0
[ 1139.379389][T17039]  ? report_bug+0x1b7/0x2e0
[ 1139.384075][T17039]  ? handle_bug+0x3d/0x70
[ 1139.388413][T17039]  ? exc_invalid_op+0x16/0x40
[ 1139.393101][T17039]  ? asm_exc_invalid_op+0x16/0x20
[ 1139.398245][T17039]  ? __wake_up_klogd+0xcc/0x100
[ 1139.403111][T17039]  ? sysfs_remove_group+0x179/0x2a0
[ 1139.408422][T17039]  ? sysfs_remove_group+0x179/0x2a0
[ 1139.413998][T17039]  netdev_queue_update_kobjects+0x37c/0x3f0
[ 1139.419922][T17039]  netdev_unregister_kobject+0x10d/0x250
[ 1139.426623][T17039]  unregister_netdevice_many+0x13a6/0x18f0
[ 1139.432469][T17039]  ? alloc_netdev_mqs+0xc10/0xc10
[ 1139.437557][T17039]  ? mutex_lock_io_nested+0x60/0x60
[ 1139.442773][T17039]  ? read_lock_is_recursive+0x10/0x10
[ 1139.448355][T17039]  unregister_netdev+0x19b/0x210
[ 1139.453585][T17039]  ? clear_nonspinnable+0x60/0x60
[ 1139.458624][T17039]  ? unlist_netdevice+0x5b0/0x5b0
[ 1139.465271][T17039]  bnep_session+0x2b57/0x2d40
[ 1139.469977][T17039]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1139.476111][T17039]  ? bnep_add_connection+0xdb0/0xdb0
[ 1139.481407][T17039]  ? _raw_spin_unlock+0x40/0x40
[ 1139.487915][T17039]  ? lockdep_hardirqs_on+0x4/0x130
[ 1139.493046][T17039]  ? wait_woken+0x1b0/0x1b0
[ 1139.497616][T17039]  ? __kthread_parkme+0x15c/0x1c0
[ 1139.502663][T17039]  kthread+0x3f6/0x4f0
[ 1139.507045][T17039]  ? bnep_add_connection+0xdb0/0xdb0
[ 1139.512341][T17039]  ? kthread_blkcg+0xd0/0xd0
[ 1139.520049][T17039]  ret_from_fork+0x1f/0x30
[ 1139.524540][T17039]  </TASK>
[ 1139.527595][T17039] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1139.534865][T17039] CPU: 1 PID: 17039 Comm: kbnepd bnep0 Not tainted 5.15.173-syzkaller #0
[ 1139.543276][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1139.553329][T17039] Call Trace:
[ 1139.556608][T17039]  <TASK>
[ 1139.559537][T17039]  dump_stack_lvl+0x1e3/0x2d0
[ 1139.564218][T17039]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 1139.569860][T17039]  ? panic+0x860/0x860
[ 1139.573942][T17039]  ? sysfs_remove_group+0xd0/0x2a0
[ 1139.579056][T17039]  ? sysfs_remove_group+0xd0/0x2a0
[ 1139.584175][T17039]  panic+0x318/0x860
[ 1139.588126][T17039]  ? __warn+0x16a/0x300
[ 1139.592285][T17039]  ? fb_is_primary_device+0xd0/0xd0
[ 1139.597498][T17039]  ? ret_from_fork+0x1f/0x30
[ 1139.602095][T17039]  ? sysfs_remove_group+0x179/0x2a0
[ 1139.607305][T17039]  __warn+0x2b2/0x300
[ 1139.611293][T17039]  ? sysfs_remove_group+0x179/0x2a0
[ 1139.616489][T17039]  report_bug+0x1b7/0x2e0
[ 1139.620830][T17039]  handle_bug+0x3d/0x70
[ 1139.624991][T17039]  exc_invalid_op+0x16/0x40
[ 1139.629681][T17039]  asm_exc_invalid_op+0x16/0x20
[ 1139.634539][T17039] RIP: 0010:sysfs_remove_group+0x179/0x2a0
[ 1139.640349][T17039] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 4a a1 cc ff 49 8b 14 24 48 c7 c7 40 bc 99 8a 4c 89 f6 e8 c7 64 4e ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e1 c8 82 ff
[ 1139.659957][T17039] RSP: 0018:ffffc90004407928 EFLAGS: 00010246
[ 1139.666034][T17039] RAX: 9fbbea470b772000 RBX: ffff888020dbcc48 RCX: ffff88802bced940
[ 1139.674011][T17039] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1139.676103][T16793] udevd[16793]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[ 1139.681983][T17039] RBP: dffffc0000000000 R08: ffffffff81669a1c R09: ffffed10172267a8
[ 1139.696262][T16839] udevd[16839]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory
[ 1139.699712][T17039] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888020dbcc18
[ 1139.712664][T16843] udevd[16843]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory
[ 1139.717474][T17039] R13: 1ffffffff16fd878 R14: ffffffff8b7ecae0 R15: ffff88807e090cb0
[ 1139.717497][T17039]  ? __wake_up_klogd+0xcc/0x100
[ 1139.717525][T17039]  ? sysfs_remove_group+0x179/0x2a0
[ 1139.730667][T16840] udevd[16840]: inotify_add_watch(7, /dev/loop4p10, 10) failed: No such file or directory
[ 1139.735269][T17039]  netdev_queue_update_kobjects+0x37c/0x3f0
[ 1139.735302][T17039]  netdev_unregister_kobject+0x10d/0x250
[ 1139.735324][T17039]  unregister_netdevice_many+0x13a6/0x18f0
[ 1139.735353][T17039]  ? alloc_netdev_mqs+0xc10/0xc10
[ 1139.735371][T17039]  ? mutex_lock_io_nested+0x60/0x60
[ 1139.735396][T17039]  ? read_lock_is_recursive+0x10/0x10
[ 1139.735420][T17039]  unregister_netdev+0x19b/0x210
[ 1139.735438][T17039]  ? clear_nonspinnable+0x60/0x60
[ 1139.735460][T17039]  ? unlist_netdevice+0x5b0/0x5b0
[ 1139.735487][T17039]  bnep_session+0x2b57/0x2d40
[ 1139.735518][T17039]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1139.735545][T17039]  ? bnep_add_connection+0xdb0/0xdb0
[ 1139.819022][T17039]  ? _raw_spin_unlock+0x40/0x40
[ 1139.823886][T17039]  ? lockdep_hardirqs_on+0x4/0x130
[ 1139.829003][T17039]  ? wait_woken+0x1b0/0x1b0
[ 1139.833515][T17039]  ? __kthread_parkme+0x15c/0x1c0
[ 1139.838544][T17039]  kthread+0x3f6/0x4f0
[ 1139.842613][T17039]  ? bnep_add_connection+0xdb0/0xdb0
[ 1139.847900][T17039]  ? kthread_blkcg+0xd0/0xd0
[ 1139.852491][T17039]  ret_from_fork+0x1f/0x30
[ 1139.856925][T17039]  </TASK>
[ 1139.860152][T17039] Kernel Offset: disabled
[ 1139.864808][T17039] Rebooting in 86400 seconds..