last executing test programs:

9.521276909s ago: executing program 3 (id=266):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f0000000480)={[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}, 0x4, 0x790, &(0x7f0000000f80)="$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")
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2000000000000273, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
msgctl$IPC_RMID(r1, 0x0)
keyctl$link(0x8, r2, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6)
write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d)

7.514469724s ago: executing program 0 (id=272):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000007000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac1414bb0500040005"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2])

7.332587637s ago: executing program 4 (id=273):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x40040}, 0x44)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000002400)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000000340)={0x10, 0xfffffffffffffff5, r3}, 0x10)
ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000080)={0x0, 0x0, {0x9, 0x81, 0x0, 0xff}})

7.056652816s ago: executing program 3 (id=274):
socket$inet6(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c0000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001})
socket$inet6(0xa, 0x40000080806, 0x0)
socket$inet6(0xa, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000000f80)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
memfd_create(&(0x7f0000000240)='-B\xd5NI\xc4\xb5 \xe5\v.j\xf4\x8di\x11\xef\x8bl\xc9\x1e\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xff\x03\x00\x00nh#\xcf)\x1e\xc8\xc0\"\x9cc\x10d\xee\xa9\xab\x06\x97kf\xc7\x820\x80T\r\xde\xc58M\xcd\xfb\xcc\x82n=\x7f=\x8b\x1d\xea\xef\xe3\x00\x00\x03\r\x00\x00\x10\x00@\x00\x00\x00\x00\x00\x00\x00\xcbM\x8a_\xbf\xb59Q\x05\x82E\x12p\xcf\x15@o\xac\x17P;\x11\x93\x97\xb6\xdc\xad\x00C\x87\xc1\xbb\xb2>\xa3 #\xd5T\xdd\x8cn<\xd0$$\x9bo\x03\xdb#(\x03\x00\x00\x00\xe3r%/\xca\xb4\xd1x\xd8\xb0uN\xcf\b%\x00\x00\x00\x00\x00\x00\x00\bUO\x9f(\xe4\xda\x1eLj:\x8av\xd4\xe1\xc2ze\x16\asP\xae&yF.\xe8\xf5\xa2\xdf\x86\xa0t\x05~~\x92U\x1e\x87\xdb\xdfg\x9enz\b\xfaw\xfb*[r\x0e\xcb`\xdf\xa1\x16{<)\x9d\x99h\x00\x10\x02\x00'/302, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

6.868779212s ago: executing program 1 (id=275):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (fail_nth: 6)

6.742098803s ago: executing program 2 (id=276):
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa58\xf5\x18x\xc9\xb9\x03\t\x06\x96gf5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0;\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)=',', 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmStZY22aaLOJN2mz6UBKYpTa+F9sBZcgZxW1AccbIit0n6LRHzvDyiMjyY03bYPakhb6ErovpS9FNF1ayEPpQ7ePVZotJJRCCXlIHwqCJss+9EEPgdKWjcK9c0Ya2fJau15ZsvfzMePvnTu/OzrnntGdO6AzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiM9+7tKp0+mgWwEAPExXJr506myKgYNuBwDw8Fz1+R8AAAAAAAAAAAAAAA67FEUcixSDr2ykqep+R/1yq33r9uTY+O6bHU2RohZFVV/e6qfPnD33qfMXRrr55tu/0z4cz01cvdR4duHGzcW5paW52cZkuzWzMDu352d40O3vNFztgMaNF27NXru21Dhz8uyOh28PvTbwxLGhixdOnB/p1k6OjY9P9NT09b/tn36Xe83wOBJFNCPFG0Ovp2ZE1OLB98V9Xjv77WjVieGqE5Nj41VH5lvN9nL5YKrlqlpEo2ej0e4+eghj8UBGI1bK5pcNHi67N3Gzudicnp9rfLG5uNxabi20U63T2rI/jajFSIpYjYj1XSb59kcRH40UL53aSNMRUXT3wyericH3b09tH/q4B2U7G/0Rq7VHYMwOsYEo4kqk+Nmrx2Om3Gf5Fh+P+EKZr0S8XOZnIlL5wjgX8VOTxR8bfVHEv0WKhbSRZqvjQfe4cvnLjc+3ry301HaPK4/8+8PDdMiPTfUoYro64m+kt3+yAwAAAAAAAAAAAAAAAMA77WgU8e1I8UfP/E41rziqeenvuzjynud/s3fO+NP3eZ6y9mRErNT2Nie3P08dTrXy3z50jD2pRxHfyPP//uCgGwMAAAAAAAAAAAAAAAAAAPCuVsTzkeIrJ46n1aiu/XskqmuKt9rXG1eb0/Odq8J2r/3bvWb65ubmZiN1cjTnVM6VnKs513Ku54xa3j7naM6pnCs5V3Ou5VzPGUXePudozqmcKzlXc67lXM8ZfXn7nKM5p3Ku5FzNuZZzPWcckmv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TmpRxM8jxbe+tpEiRcRoxFR0cm3goFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJTqqYiTkWLt+Xp1f7UWcTUifr65udm9RcRGmQ/qoPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4qn/20iNiLg99NrAE8eGLl44cX6kiCJSWdJb/9zE1UuNZxdu3FycW1qam21MtlszC7Nze/1x9cut9q3bk2Pj+9KZ+zq6z+0/Wn924eaLi63rX13e9fHB+qXppeXF5szuD8fRqEVM9a4Zrho8OTZeNXq+1WxXm6baPRpYixjda2cAAAAAAAAAAAAAAAAAAAA4NAZTEZ+LFD/5z3OpO2+8rzPn/5c694qt2pd/b/u7AObvyK7e7w/Yy3Laa0OHq4n3jcmx8fGJntV9/XeXlm1KqYinI8UnXvpQNR8+xeCuc+PLuveWdTfO5bqhXynrVnZU1Ycnx8YbVxbaJy7Nzy/MNJeb0/NzjYmbzZn8xQEre+0GAAAAAAAAAAAAAAAAAAAA7GYwFfGjSPHff/vvqXvd+Tz/v69zr2f+/29UU+gr9bQzt1Rz+99bze3vLL/v4sjgR5+51/r9mP9ftimlIr4ZKc7+6EPV9fS78/+n7qgt6/4kUrz+zEdyXe1IWdfsdqfzjNda83Onytq/jBS/+ka3Nqra67n2qe3a02Xt0Ujx5xs7a7+aaz+wXXumrD0eKb73X7vXfnC79mxZ+5NI8Y9/0+jWDpa1v5trj23XnpxZmJ+9324tx/87keKvr/xW6vb5nuPf8/0PK3fklrvG/M2X36nxH+pZt5LH9Y/z+DfvM/7nI8V36h/JdZ19P50ff7L6f3v8PxEp/uNfd9Zey7Xv3649vdduHbRy/L8dKb77Fz/e6nMe//74+/+N7RHfOf6/3Lczt14lBzT+T/asG8rtmnnru+NdZ+nFr7/QnJ+fW7RgwYKFrYWDPjLxMJTv/38aKf7/WJG65zH5/f89nXvb53//843t9/+Ld+SWA3r/f3/Puov5rKW/L6K+fONm/9MR9aUXv36idaN5fe76XPvM6VOf/vT506dOn+8/0j25217a8757HJTj/4NI8cO/++HW55it87/K7uf/g3fklgMa/6d6+7TjvGbPu+JdqRz/v4oUT372x1ufN3eO/87z/+7n/+Mf25lbv38HNP4f6Fk3lNvVeov7AgAAAAAAAAAA4FEymIr4s0jx23/466k7h2gvf/83e0duOaC//zrWs272Ic1r2PNOBgA4RMrzvw9Gin/a/P7WXO6d53/xa93a3vO/ezkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHXYoifj9SDL6ykdYGyvsd9cut9q3bk2Pju292NEWKWhRVfXmrnz5z9tynzl8Y6eabb/9O+3A8N3H1UuPZhRs3F+eWluZmG5Pt1szC7Nyen+FBt7/TcLUDGjdeuDV77dpS48zJszsevj302sATx4YuXjhxfqRTO9CYHBsfn+ip6et/2z/9Luke649EEd+PFG8MvZ6+OxBRiwffF/d57ey3o1UnhqtOTI6NVx2ZbzXby+WDqZarahGNno1Gu/soj9t+jsUDGY1YKZtfNni47N7EzeZic3p+rvHF5uJya7m10E61TmvL/jSiFiMpYjUi1gfufrr+KOKbkeKlUxvpnwciiu5++OSViS+dOnv/9tT2oY97ULaz0R+xWnsExuwQG4gi/iFS/OzV4/G9gYi+6Nzi4xFfKPOViJfL/ExEKl8Y5yJ+usvriEdTXxRxLlIspI306kB5POgeVy5/ufH59rWFntruceWRf394mA75sakeRfygOuJvpH/xew0AAAAAAAAAAAAAAABwiBSxGim+cuJ4quYHb80pbrWvN642p+c70/q6c/+6c6Y3Nzc3G6mTozmncq7kXM25lnM9Z9Ty9jlHc07lXMm5mnMt53rOKPL2OUdzTuVcybmacy3nes7oy9vnHM05lXMl52rOtZzrOeOQzN0DAAAAAAAAAAAAAAAAAAAeL7Uoqqu4f+trG2lzoHN96ano5JrrgT72fhEAAP//gMd2Mw==")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="190000000400000008000000ffffff7f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48)
ioctl$FS_IOC_SETFLAGS(r4, 0xc0086c43, &(0x7f0000000080)=0x700)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
sendmsg$sock(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="38141e1e96", 0x5}, {&(0x7f0000000280)="9ec305", 0x3}], 0x2}, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x9, &(0x7f00000000c0)=@raw=[@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb5}}, @exit], &(0x7f0000000000)='GPL\x00', 0x6, 0x8e, &(0x7f0000000640)=""/142, 0x40f00, 0x10, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)

6.639727657s ago: executing program 0 (id=277):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)

5.952448604s ago: executing program 4 (id=278):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

5.67278298s ago: executing program 1 (id=279):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xffbffffffffffffd}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.297732869s ago: executing program 4 (id=280):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2)

5.292491793s ago: executing program 3 (id=281):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x9, 0x1, {0xa, @pix_mp={0x9, 0x85, 0x0, 0x8, 0x2, [{0xc, 0xffffffff}, {0x3, 0x8001}, {0xa64a80ed, 0x7fffffff}, {0xf, 0x2}, {0x2, 0x1}, {0x4ce, 0x8}, {0x7fb, 0x9}, {0x6, 0x1}], 0x4, 0xff, 0x4, 0x2, 0x5}}, 0x1})
ioprio_set$uid(0x3, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getpid()
mount$bind(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2088, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e030000"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0)

4.820831389s ago: executing program 2 (id=282):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket(0x1e, 0x805, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0], 0x20)

4.505048866s ago: executing program 0 (id=283):
r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4200, 0x40, 0x20}, 0x18)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={<r1=>0x0, 0x9e, "478385946d41d89658fe4a2b759eeca3e1f40b863db89abb3b640b82c13dcf99f518fb25cd2ad9da626f9d799ec4466148e486bd60cdc9ab55b1bfd8c950c20b88a43607c63c517adb8105c96de320a2b1a5522c8709a362a39c156f029bd72554bc5da96ec59e651fb4a2743a69c9909c48aaf567a640e1b158d50380392aeefbed0b1ea2eed7a2c54b042d34c842f8cd1d20d8ec284f2e3867b6ee3452"}, &(0x7f0000000140)=0xa6)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @multicast1}}, 0xffff, 0x2, 0x7ff, 0x6, 0x4}, &(0x7f0000000240)=0x98)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000340)={0x6, 'geneve1\x00', {0x6}, 0x9})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000380)={0x3, 0x30314142, 0x2, @discrete={0x400, 0xb10}})
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000003c0))
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'veth0_vlan\x00', {0x1}, 0xffff})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x1411, 0x100, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004004)
r5 = open$dir(&(0x7f0000000700)='./file0\x00', 0x80a00, 0x2)
getdents64(r5, &(0x7f0000000740)=""/128, 0x80)
ioctl(r5, 0x7, &(0x7f00000007c0)="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")
r6 = socket$inet6(0xa, 0x800, 0x7)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001800)={0x1, &(0x7f00000017c0)=[{0x6b4, 0xc, 0x1, 0x6}]})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001840)="4a522d5e6a6f01b2e0dbd170d19d3dee", 0x10)
rt_sigprocmask(0x1, &(0x7f0000001880)={[0x1]}, 0x0, 0x8)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001980)={0xfffffffffffffffc, <r7=>r0})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000019c0), &(0x7f0000001a00)=0xc)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000001a40)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @default, 0x3, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000001ac0)=0x9, 0xfffffffffffffff8, 0x6)
syz_io_uring_setup(0x658, &(0x7f0000001b00)={0x0, 0x5198, 0x0, 0x2, 0x268, 0x0, r7}, &(0x7f0000001b80), &(0x7f0000001bc0))
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000001c00)={0x5, 0x6c, 0x3, 0x7, 0x3})

3.677445264s ago: executing program 3 (id=284):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f0000000480)={[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}, 0x4, 0x790, &(0x7f0000000f80)="$eJzs3c9rHFUcAPDvTHaT/k4qClZRAx5aEPPLgj9QaMGjiKCevDQkaSnd/qCJYEOEFrEnjwXBiwiCF2+KF0FKT4p46UX6H0ilSBBaxUNkprPJttlNds1upnU/H5jkvXm7+95k+c6bHy/zAuhbo9mPNOJARFxMIoaL9UlEVPNUJeLI3dfdWV6a+Wt5aSaJlZW3/0jy19xeXpqJhvdkdhdv2xER168l8cjA+nrnLyyemq7V5s4X+fGF0+fG5y8sPn/y9PSJuRNzZ6ampl6eOjz54sRU17b1o6d+/uafy29+/Om+G1d+v/7dviSOxJ6irHE7umU0Rlf/Jo0qEfF6tysryUCxPWnDuqRSYoPoSNrwHT4ewzEQa1/ecFz7ttTGAQA9sZItAECfSfT/ANBn6tcBbi8vzdSXcq9IANvl1tHIb9RncX+nWO6WVOJI/ntHPg5g159JNN7WTepjB7Yo+4yv36t+ni3Ro/vwQHMXL+U3/pv0/0ke/yP5KJ718T8QUewftub+fYj4h+2zlfh/qwv1i38AAAAAAADonqtHI+KlZvf/0tXxP9Hk/t9QREx0of7N7/+lN7tQDdDEraMRrxbP9rl3/N/qE11GBorc3oh4LKrJ8ZO1uSz290XEoagOZfnJ5h+f7zLevTz5Q6v6G8f/ZUtWf30sYNGOm5Whe98zO70wvdXtBiJuXYp4otIs/pPV/j9pMf73WJt1fL/01dOtyjaPf6BXVr6IONi0/197cl2y8fP5xvPjgfH6UcF6i8de+7BV/W3F/9q/KQFdlPX/uzaO/5Gk8Xmd853X8cntic9alf3X4//B5J38qaKDxboPphcWzk9GDCZvrF/fvUeIwkOtHg/1eMni/9Czzc//Nzr+r0bEuTbr/PLH6q+tykbzSHX8D2XI4n+2o/6/88TfvzzZclfRXv9/OO/TDxVrXP+DjbUboGW3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuimNiD2RpGOr6TQdG4vYHRGPxq60dnZ+4bnjZ98/M5uVRYxENT1+sjY3ERHDd/NJlp/M02v5qfvyL0TE/oi4MrQzz4/NnK3Nlr3xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDY3WL+/8xvQ2W3DgDomR1lNwAA2Hb6fwDoP/p/AOg/Hff/P+3tTUMAgG3j/B8A+o/+HwAAAAAAAAAAAAAAAAAAAAAAAAB6av8zV28kEXHxlZ35khksyqqltgzotbTsBgClGSi7AUBpKu28KElWzwmA/w/n+ECySXnrKUJcQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH8cPNDu/P9tzRQKPETM3gf9y/z/0L8c1UP/Mv8/YP5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY3PyFxVPTtdrceYluJyoPRjMehMRQRDwAzZDoIFH2ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfBvwEAAP//snoPXw==")
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2000000000000273, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
msgctl$IPC_RMID(r1, 0x0)
keyctl$link(0x8, r2, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6)
write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d)

3.659390182s ago: executing program 1 (id=285):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_io_uring_setup(0x90, &(0x7f0000000340)={0x0, 0xf1bd, 0x400, 0x4, 0x400132a}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, 0x0)
io_uring_enter(r1, 0x47ba, 0x233a, 0x0, 0x0, 0x41)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"})

3.499966613s ago: executing program 4 (id=286):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="29af18d168b3a6ab8b", 0x9, 0x8885, &(0x7f0000000540)={0xa, 0x4e23, 0xa0000000, @mcast1, 0x7}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
r0 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x94bc, 0x10100}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@hci={0x1f, 0x2}})
io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0)

3.397650888s ago: executing program 2 (id=287):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000007000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac1414bb0500040005"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2])

2.926280793s ago: executing program 0 (id=288):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20)

2.717650327s ago: executing program 1 (id=289):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0xd01, 0x0, [0x0, 0x400000001300, 0x400000001330, 0x400000001360], 0x0, 0x0, 0x0}, 0x108)

2.574852574s ago: executing program 2 (id=290):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

2.514211968s ago: executing program 4 (id=291):
socket$inet6(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c0000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001})
socket$inet6(0xa, 0x40000080806, 0x0)
socket$inet6(0xa, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y")
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
memfd_create(&(0x7f0000000240)='-B\xd5NI\xc4\xb5 \xe5\v.j\xf4\x8di\x11\xef\x8bl\xc9\x1e\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xff\x03\x00\x00nh#\xcf)\x1e\xc8\xc0\"\x9cc\x10d\xee\xa9\xab\x06\x97kf\xc7\x820\x80T\r\xde\xc58M\xcd\xfb\xcc\x82n=\x7f=\x8b\x1d\xea\xef\xe3\x00\x00\x03\r\x00\x00\x10\x00@\x00\x00\x00\x00\x00\x00\x00\xcbM\x8a_\xbf\xb59Q\x05\x82E\x12p\xcf\x15@o\xac\x17P;\x11\x93\x97\xb6\xdc\xad\x00C\x87\xc1\xbb\xb2>\xa3 #\xd5T\xdd\x8cn<\xd0$$\x9bo\x03\xdb#(\x03\x00\x00\x00\xe3r%/\xca\xb4\xd1x\xd8\xb0uN\xcf\b%\x00\x00\x00\x00\x00\x00\x00\bUO\x9f(\xe4\xda\x1eLj:\x8av\xd4\xe1\xc2ze\x16\asP\xae&yF.\xe8\xf5\xa2\xdf\x86\xa0t\x05~~\x92U\x1e\x87\xdb\xdfg\x9enz\b\xfaw\xfb*[r\x0e\xcb`\xdf\xa1\x16{<)\x9d\x99h\x00\x10\x02\x00'/302, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

2.189685759s ago: executing program 0 (id=292):
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa58\xf5\x18x\xc9\xb9\x03\t\x06\x96gf5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0;\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)=',', 0x1)
r3 = accept4(r2, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="190000000400000008000000ffffff7f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48)
ioctl$FS_IOC_SETFLAGS(r4, 0xc0086c43, &(0x7f0000000080)=0x700)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
sendmsg$sock(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="38141e1e96", 0x5}, {&(0x7f0000000280)="9ec305", 0x3}], 0x2}, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x9, &(0x7f00000000c0)=@raw=[@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb5}}, @exit], &(0x7f0000000000)='GPL\x00', 0x6, 0x8e, &(0x7f0000000640)=""/142, 0x40f00, 0x10, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)

2.018903988s ago: executing program 1 (id=293):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x3000000, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x5d8, &(0x7f00000006c0)="$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")
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000dc0)=@random={'trusted.', 'cQm.apple.derIn/\x99,\x14\xdd\xaafo\x00\x00\x00\x00S~\x16~^\x1e\xc7Bm\xc5\x9c\xae\x1ec\xb6;\x7f~Y]\f\xb9Z\x1b\x9f\xfa\x1b<\xfb5\xc6\"\xd9\xe8\'GrDYA\xfaX;\xdb\x99\xfet\xbd\xf9\xe5\x11\xa7`\x97\x92\xd0N\x01$I\xfd\xfaE\x8a\x16\xfc\xfb\xf3\xf0\xdc\x03\xb9=\xe8:\xdb|\xf1\x8bF\x92\x12\xac\xd4\xad\x11f!\xe6t\xc1I\xf4\x06\x92\xbe\xee\xd9\xb7\xb9N\xa3\b\xd7h\xdeEA\xfc\xf3\xe0S,X\xc0NA\x9ex\xed_\x03\xc2K\x1b\fl\xfc\x9d\xcf\x9f\x12O\xd9H\x0f7\xcf\x8d\xdb\x87\x94\xd8\xd4\xae\xeb\xb7\x1d\xc0t\xe9\x16#\xc9\v\xd53\xef\xb2\xe1\xb9\xa3\x8b\xf8R\xac\xa4z\x14\x80\xd8$\xc5\xb9\x97\x0e<J\n\x81\x1a\x7f`\f\xf4qcq\n@\x06'}, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x7fff, 0x2, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xe7ffffff, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_get$pid(0x0, r2)
ptrace(0x10, r2)
socket$inet6_udp(0xa, 0x2, 0x0)
ptrace$peekuser(0x3, r2, 0x0)
unshare(0x24000400)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x2, &(0x7f0000000000)={0x2, 0x1, 0x80}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x1e0, 0x4c, 0x2500, 0x0, 0x73, 0x2f8, 0x258, 0x258, 0x2f8, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [0xff000000], 'ip6_vti0\x00', 'ip6gretap0\x00', {}, {}, 0x73}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@string={{0xc0}, {0xd5b, 0x3, 'kmp\x00', "3544c08391066b5c8145b99f3893671f3a792466a074bdf1d251ba410e0ecc8995ee9959b6ba7854ec1bd3bafbd779e5e732a66e67f59830e3515fa1c27b505c71a903fb28be1b5f7c3193f791588303c30ec4ffca7d6e656494624875c83a4163617aea8bd753d5821d79be1a712bef2c9d37af10eb75900acf96a3b1c1454f", 0x57, 0x3, {0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)
unshare(0x22020600)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r7, r6, 0x4, r6}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x40c9)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000280)={&(0x7f0000499000/0x3000)=nil, &(0x7f0000911000/0x4000)=nil, &(0x7f00009da000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000088e000/0x4000)=nil, &(0x7f0000323000/0x1000)=nil, &(0x7f000014a000/0x4000)=nil, &(0x7f00000fa000/0x1000)=nil, &(0x7f0000b01000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
sendmsg$nl_route(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01810100000000000d000000000000006970697000000000140002800500040000000000050105000300000056209b918f963dd8b8e59367bb6db9462cb755f0df2661ee823144830a22547937960e8fb76f4c68c08a25f19ba20bd4622d840b53aeedef92a2fa0d604561f01b9e9acbff719c1b04f293fd258da96cbead783674f512d9317fcc0e3fc6bd631a92daa334fc50e37c7f700aabe1845e7f8b5f81159ba056f9ed14d4aaae584a930d7738d04ae199"], 0x44}}, 0x0)
write(r8, &(0x7f0000000040)="240000001a005f0314f9f407000904000600000000000000000000000800040001000000", 0x24)

1.884513267s ago: executing program 2 (id=294):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x9, 0x1, {0xa, @pix_mp={0x9, 0x85, 0x0, 0x8, 0x2, [{0xc, 0xffffffff}, {0x3, 0x8001}, {0xa64a80ed, 0x7fffffff}, {0xf, 0x2}, {0x2, 0x1}, {0x4ce, 0x8}, {0x7fb, 0x9}, {0x6, 0x1}], 0x4, 0xff, 0x4, 0x2, 0x5}}, 0x1})
ioprio_set$uid(0x3, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getpid()
mount$bind(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2088, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e030000"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0)

1.826390378s ago: executing program 3 (id=295):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xffbffffffffffffd}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.148636649s ago: executing program 4 (id=296):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2)

1.085144438s ago: executing program 2 (id=297):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sigaltstack(&(0x7f0000000000)={&(0x7f0000000580)=""/4096, 0x1, 0x1000}, &(0x7f0000000040)={&(0x7f0000001580)=""/4096, 0x0, 0x1000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000180)={0x1fff, 0x1000, 0x4000}, 0x10)
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "7bc8964989db8c82903ea0a2ce379c04524405e19de6997fae9f4e7954f9444fbe40de4b27a01119e2c16a53507395b25fa17c205e59b5dfcf232914ea0fc03e", 0x2b}, 0x48, r2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

318.275527ms ago: executing program 0 (id=298):
r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4200, 0x40, 0x20}, 0x18)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={<r1=>0x0, 0x93, "478385946d41d89658fe4a2b759eeca3e1f40b863db89abb3b640b82c13dcf99f518fb25cd2ad9da626f9d799ec4466148e486bd60cdc9ab55b1bfd8c950c20b88a43607c63c517adb8105c96de320a2b1a5522c8709a362a39c156f029bd72554bc5da96ec59e651fb4a2743a69c9909c48aaf567a640e1b158d50380392aeefbed0b1ea2eed7a2c54b042d34c842f8cd1d20"}, &(0x7f0000000140)=0x9b)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @multicast1}}, 0xffff, 0x2, 0x7ff, 0x6, 0x4}, &(0x7f0000000240)=0x98)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000340)={0x6, 'geneve1\x00', {0x6}, 0x9})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000380)={0x3, 0x30314142, 0x2, @discrete={0x400, 0xb10}})
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000003c0))
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'veth0_vlan\x00', {0x1}, 0xffff})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x1411, 0x100, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004004)
r5 = open$dir(&(0x7f0000000700)='./file0\x00', 0x80a00, 0x2)
getdents64(r5, &(0x7f0000000740)=""/128, 0x80)
ioctl(r5, 0x7, &(0x7f00000007c0)="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")
r6 = socket$inet6(0xa, 0x800, 0x7)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001800)={0x1, &(0x7f00000017c0)=[{0x6b4, 0xc, 0x1, 0x6}]})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001840)="4a522d5e6a6f01b2e0dbd170d19d3dee", 0x10)
rt_sigprocmask(0x1, &(0x7f0000001880)={[0x1]}, 0x0, 0x8)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000001980)={0xfffffffffffffffc, <r7=>r0})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000019c0), &(0x7f0000001a00)=0xc)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000001a40)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @default, 0x3, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000001ac0)=0x9, 0xfffffffffffffff8, 0x6)
syz_io_uring_setup(0x658, &(0x7f0000001b00)={0x0, 0x5198, 0x0, 0x2, 0x268, 0x0, r7}, &(0x7f0000001b80), &(0x7f0000001bc0))
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000001c00)={0x5, 0x6c, 0x3, 0x7, 0x3})

280.539317ms ago: executing program 3 (id=299):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_io_uring_setup(0x90, &(0x7f0000000340)={0x0, 0xf1bd, 0x400, 0x4, 0x400132a}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, 0x0)
io_uring_enter(r1, 0x47ba, 0x233a, 0x0, 0x0, 0x41)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"})

0s ago: executing program 1 (id=300):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000007000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac1414bb0500040005"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts.
[  209.723352][ T5772] cgroup: Unknown subsys name 'net'
[  209.856518][ T5772] cgroup: Unknown subsys name 'cpuset'
[  209.876087][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  234.696941][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  234.703706][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  266.241851][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  270.556795][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  270.589021][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  270.598762][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  270.615884][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  270.626265][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  270.637825][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  270.646051][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  270.655769][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  270.666332][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  270.676069][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  270.685900][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  270.696472][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  270.714839][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  270.728428][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  270.733170][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  270.742786][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  270.752246][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  270.758096][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  270.762313][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  270.768974][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  270.775688][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  270.811718][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  270.826855][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  270.836073][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  270.848951][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  270.857557][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  270.876613][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  270.940400][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  271.048750][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  271.068371][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  272.055757][ T5791] chnl_net:caif_netlink_parms(): no params data found
[  272.815325][ T5788] chnl_net:caif_netlink_parms(): no params data found
[  272.843992][ T5796] Bluetooth: hci1: command tx timeout
[  272.864884][ T5793] Bluetooth: hci0: command tx timeout
[  272.917215][ T5796] Bluetooth: hci2: command tx timeout
[  272.994798][ T5796] Bluetooth: hci4: command tx timeout
[  273.001569][ T5792] chnl_net:caif_netlink_parms(): no params data found
[  273.234874][ T5796] Bluetooth: hci3: command tx timeout
[  273.348441][ T5797] chnl_net:caif_netlink_parms(): no params data found
[  273.370609][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.380859][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.388877][ T5791] bridge_slave_0: entered allmulticast mode
[  273.398953][ T5791] bridge_slave_0: entered promiscuous mode
[  273.429375][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.440746][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.448749][ T5791] bridge_slave_1: entered allmulticast mode
[  273.458305][ T5791] bridge_slave_1: entered promiscuous mode
[  273.492703][ T5801] chnl_net:caif_netlink_parms(): no params data found
[  273.796205][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.964053][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.149446][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.157534][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.166251][ T5788] bridge_slave_0: entered allmulticast mode
[  274.175997][ T5788] bridge_slave_0: entered promiscuous mode
[  274.267937][ T5791] team0: Port device team_slave_0 added
[  274.359543][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.371267][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.379508][ T5788] bridge_slave_1: entered allmulticast mode
[  274.389225][ T5788] bridge_slave_1: entered promiscuous mode
[  274.463705][ T5791] team0: Port device team_slave_1 added
[  274.576845][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.584949][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.592761][ T5792] bridge_slave_0: entered allmulticast mode
[  274.602769][ T5792] bridge_slave_0: entered promiscuous mode
[  274.747721][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.759230][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.767278][ T5792] bridge_slave_1: entered allmulticast mode
[  274.777067][ T5792] bridge_slave_1: entered promiscuous mode
[  274.886789][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.899455][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.907169][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.933956][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.973376][ T5796] Bluetooth: hci1: command tx timeout
[  274.981417][ T5796] Bluetooth: hci0: command tx timeout
[  274.995002][ T5796] Bluetooth: hci2: command tx timeout
[  275.037387][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.076630][ T5796] Bluetooth: hci4: command tx timeout
[  275.091678][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.099046][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.126555][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.214715][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.222739][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.230896][ T5797] bridge_slave_0: entered allmulticast mode
[  275.243155][ T5797] bridge_slave_0: entered promiscuous mode
[  275.320245][ T5788] team0: Port device team_slave_0 added
[  275.328747][ T5796] Bluetooth: hci3: command tx timeout
[  275.389842][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.413213][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.423917][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.432353][ T5797] bridge_slave_1: entered allmulticast mode
[  275.441100][ T5797] bridge_slave_1: entered promiscuous mode
[  275.498165][ T5788] team0: Port device team_slave_1 added
[  275.506888][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.514942][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.522798][ T5801] bridge_slave_0: entered allmulticast mode
[  275.532724][ T5801] bridge_slave_0: entered promiscuous mode
[  275.553732][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.563868][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.571908][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.580052][ T5801] bridge_slave_1: entered allmulticast mode
[  275.589754][ T5801] bridge_slave_1: entered promiscuous mode
[  275.877470][ T5791] hsr_slave_0: entered promiscuous mode
[  275.887533][ T5791] hsr_slave_1: entered promiscuous mode
[  275.906487][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.913631][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.941218][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.033636][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.058408][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.071462][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.078890][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.105540][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.126103][ T5792] team0: Port device team_slave_0 added
[  276.143971][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.161283][ T5792] team0: Port device team_slave_1 added
[  276.348869][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.431075][ T5797] team0: Port device team_slave_0 added
[  276.563970][ T5801] team0: Port device team_slave_0 added
[  276.615123][ T5797] team0: Port device team_slave_1 added
[  276.625322][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.632578][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.659442][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.714254][ T5801] team0: Port device team_slave_1 added
[  276.860231][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.867603][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.894003][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.976847][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.984045][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.011076][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.013668][ T5796] Bluetooth: hci0: command tx timeout
[  277.028479][ T5793] Bluetooth: hci1: command tx timeout
[  277.075168][ T5793] Bluetooth: hci2: command tx timeout
[  277.135731][ T5788] hsr_slave_0: entered promiscuous mode
[  277.146410][ T5788] hsr_slave_1: entered promiscuous mode
[  277.155612][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.159408][ T5793] Bluetooth: hci4: command tx timeout
[  277.163330][ T5788] Cannot create hsr debugfs directory
[  277.187203][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.194601][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.221091][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.235956][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.243175][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.270155][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.405139][ T5793] Bluetooth: hci3: command tx timeout
[  277.425144][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.432372][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.458987][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.506825][ T5792] hsr_slave_0: entered promiscuous mode
[  277.516526][ T5792] hsr_slave_1: entered promiscuous mode
[  277.524398][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.532498][ T5792] Cannot create hsr debugfs directory
[  277.847375][ T5801] hsr_slave_0: entered promiscuous mode
[  277.857835][ T5801] hsr_slave_1: entered promiscuous mode
[  277.867227][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.875188][ T5801] Cannot create hsr debugfs directory
[  278.249679][ T5797] hsr_slave_0: entered promiscuous mode
[  278.258906][ T5797] hsr_slave_1: entered promiscuous mode
[  278.267976][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  278.276126][ T5797] Cannot create hsr debugfs directory
[  278.477402][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  278.637564][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  278.752187][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  278.925820][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  279.077602][ T5793] Bluetooth: hci0: command tx timeout
[  279.083352][ T5793] Bluetooth: hci1: command tx timeout
[  279.181203][ T5793] Bluetooth: hci2: command tx timeout
[  279.235491][ T5793] Bluetooth: hci4: command tx timeout
[  279.443695][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  279.492480][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  279.499112][ T5793] Bluetooth: hci3: command tx timeout
[  279.602752][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  279.691220][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  279.769215][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  279.830701][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  279.907459][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  280.077361][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  280.130794][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  280.176991][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  280.316340][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  280.352326][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  280.565375][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  280.708799][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  280.751861][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  280.784002][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  280.988783][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.367803][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[  281.406821][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.499661][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.573226][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.581100][ T1896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.657504][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[  281.754308][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.762191][ T1896] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.827167][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.835031][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.878835][ T5801] 8021q: adding VLAN 0 to HW filter on device team0
[  281.959443][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.967364][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.001004][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.073058][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.080955][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.301187][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[  282.356693][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.364672][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.512431][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.520347][ T1896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.601476][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.609385][ T1896] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.940769][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  283.000446][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.331569][ T5797] 8021q: adding VLAN 0 to HW filter on device team0
[  283.472123][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.480183][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.636845][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.644843][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.811117][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.962283][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.177887][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.481501][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.636560][ T5791] veth0_vlan: entered promiscuous mode
[  285.662714][ T5788] veth0_vlan: entered promiscuous mode
[  285.753515][ T5791] veth1_vlan: entered promiscuous mode
[  285.793455][ T5788] veth1_vlan: entered promiscuous mode
[  285.951527][ T5801] veth0_vlan: entered promiscuous mode
[  286.188212][ T5792] veth0_vlan: entered promiscuous mode
[  286.218134][ T5801] veth1_vlan: entered promiscuous mode
[  286.367585][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.387252][ T5788] veth0_macvtap: entered promiscuous mode
[  286.410499][ T5792] veth1_vlan: entered promiscuous mode
[  286.447135][ T5791] veth0_macvtap: entered promiscuous mode
[  286.469741][ T5788] veth1_macvtap: entered promiscuous mode
[  286.582409][ T5791] veth1_macvtap: entered promiscuous mode
[  286.713155][ T5801] veth0_macvtap: entered promiscuous mode
[  286.793369][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.825991][ T5801] veth1_macvtap: entered promiscuous mode
[  286.903957][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.915731][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.931257][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.946505][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.977047][ T5792] veth0_macvtap: entered promiscuous mode
[  287.016557][ T5792] veth1_macvtap: entered promiscuous mode
[  287.082017][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.091386][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.100664][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.110893][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.158216][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.169217][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.185112][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.244150][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.255892][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.266197][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.277228][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.292898][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.321913][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.335506][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.345983][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.359389][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.369802][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.380695][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.396143][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.434926][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.444060][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.454780][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.463866][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.573295][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.584236][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.594625][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.605526][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.621126][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.638318][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.649319][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.659619][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.670475][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.680744][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.691587][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.706962][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.823957][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.833524][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.842933][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.852263][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.963276][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.972672][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.982285][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.991584][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.428611][ T5797] veth0_vlan: entered promiscuous mode
[  289.617747][ T5797] veth1_vlan: entered promiscuous mode
[  289.947690][ T5797] veth0_macvtap: entered promiscuous mode
[  290.027665][ T5797] veth1_macvtap: entered promiscuous mode
[  290.259815][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.272003][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.283234][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.294200][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.304415][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.315488][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.325672][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.336518][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.352099][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.483367][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.496108][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.507798][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.518892][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.529155][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.540028][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.550234][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.561058][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.576328][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.885286][ T5797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.894894][ T5797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.903973][ T5797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.914925][ T5797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.318591][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.326933][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.391830][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.401536][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.578996][ T4024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.588067][ T4024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.728183][ T4024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.737212][ T4024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.966914][ T4024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.976309][ T4024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.152003][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  296.160158][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  296.222773][ T1804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.232784][ T1804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.518782][ T5788] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  296.719456][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.728836][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.095375][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.103572][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.735990][ T5970] bridge_slave_0: left allmulticast mode
[  297.742020][ T5970] bridge_slave_0: left promiscuous mode
[  297.753601][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.921285][ T5970] bridge_slave_1: left allmulticast mode
[  297.928253][ T5970] bridge_slave_1: left promiscuous mode
[  297.935469][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.951518][ T5976] dccp_close: ABORT with 32 bytes unread
[  298.153763][ T5970] bond0: (slave bond_slave_0): Releasing backup interface
[  298.223398][ T5970] bond0: (slave bond_slave_1): Releasing backup interface
[  298.345211][ T5970] team0: Port device team_slave_0 removed
[  298.430207][ T5970] team0: Port device team_slave_1 removed
[  298.441876][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.449890][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.535519][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  298.543484][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.055410][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.063671][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.296681][ T4024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.305367][ T4024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.938947][ T6005] loop0: detected capacity change from 0 to 256
[  302.951268][ T6004] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10'.
[  303.008634][ T6005] =======================================================
[  303.008634][ T6005] WARNING: The mand mount option has been deprecated and
[  303.008634][ T6005]          and is ignored by this kernel. Remove the mand
[  303.008634][ T6005]          option from the mount to silence this warning.
[  303.008634][ T6005] =======================================================
[  303.044820][ T6005] exfat: Unknown parameter '7m�J�:F�滸��Ç+�Y���'
[  304.276863][ T6014] bridge_slave_0: left allmulticast mode
[  304.282814][ T6014] bridge_slave_0: left promiscuous mode
[  304.289912][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.581828][ T6014] bridge_slave_1: left allmulticast mode
[  304.589235][ T6014] bridge_slave_1: left promiscuous mode
[  304.600061][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.848688][ T6014] bond0: (slave bond_slave_0): Releasing backup interface
[  304.929229][ T6014] bond0: (slave bond_slave_1): Releasing backup interface
[  305.039692][ T6014] team0: Port device team_slave_0 removed
[  305.132797][ T6014] team0: Port device team_slave_1 removed
[  305.138306][ T6017] loop1: detected capacity change from 0 to 2048
[  305.145257][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.145446][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.206451][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.214213][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.233339][ T6017] ext4: Unknown parameter 'fscontext'
[  305.346573][ T6013] netlink: 'syz.2.13': attribute type 32 has an invalid length.
[  306.510753][ T6021] loop2: detected capacity change from 0 to 2048
[  306.577379][ T6021] EXT4-fs: Ignoring removed mblk_io_submit option
[  306.599868][ T6023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  306.699898][ T6024] dccp_close: ABORT with 36 bytes unread
[  306.748357][ T6021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.939425][ T6021] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.15: bg 0: block 234: padding at end of block bitmap is not set
[  307.002769][ T6021] EXT4-fs (loop2): Remounting filesystem read-only
[  307.117770][ T6021] syz.2.15 (6021) used greatest stack depth: 4888 bytes left
[  307.443271][ T6032] loop1: detected capacity change from 0 to 128
[  307.495322][ T6030] Zero length message leads to an empty skb
[  307.641641][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.834902][   T30] audit: type=1800 audit(1742968290.138:2): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="bus" dev="loop1" ino=3 res=0 errno=0
[  308.132385][ T6035] mmap: syz.3.19 (6035) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  308.245594][   T30] audit: type=1326 audit(1742968290.208:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ff8d169 code=0x7ffc0000
[  308.268365][   T30] audit: type=1326 audit(1742968290.238:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ff8d169 code=0x7ffc0000
[  308.293532][   T30] audit: type=1326 audit(1742968290.258:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333ff8d169 code=0x7ffc0000
[  308.321213][   T30] audit: type=1326 audit(1742968290.258:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ff8d169 code=0x7ffc0000
[  308.345281][   T30] audit: type=1326 audit(1742968290.258:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ff8d169 code=0x7ffc0000
[  308.368444][   T30] audit: type=1326 audit(1742968290.298:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333ff8d169 code=0x7ffc0000
[  308.391124][   T30] audit: type=1326 audit(1742968290.298:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ff8d169 code=0x7ffc0000
[  308.417936][   T30] audit: type=1326 audit(1742968290.318:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f333ff8d169 code=0x7ffc0000
[  308.441962][   T30] audit: type=1326 audit(1742968290.318:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6034 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333ff8d169 code=0x7ffc0000
[  309.588710][ T6044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.577954][ T6049] loop2: detected capacity change from 0 to 32768
[  310.590034][ T6049] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.25 (6049)
[  310.622547][ T6049] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  310.635431][ T6049] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  310.647398][ T6049] BTRFS info (device loop2): using free-space-tree
[  311.912822][ T5791] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  312.177782][ T6075] loop4: detected capacity change from 0 to 32768
[  312.200977][ T6075] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.26 (6075)
[  312.319698][ T6075] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  312.330659][ T6075] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  312.340567][ T6075] BTRFS info (device loop4): disk space caching is enabled
[  312.348314][ T6075] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  312.687901][ T6075] BTRFS info (device loop4): rebuilding free space tree
[  312.770401][ T6075] BTRFS info (device loop4): disabling free space tree
[  312.778072][ T6075] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  312.788244][ T6075] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  313.295117][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  313.485403][ T5869] usb 5-1: Using ep0 maxpacket: 32
[  313.543798][ T5869] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  313.552653][ T5869] usb 5-1: config 0 has no interface number 0
[  313.559393][ T5869] usb 5-1: config 0 interface 184 has no altsetting 0
[  313.660288][ T5869] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  313.670419][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.679130][ T5869] usb 5-1: Product: syz
[  313.683567][ T5869] usb 5-1: Manufacturer: syz
[  313.688594][ T5869] usb 5-1: SerialNumber: syz
[  313.695501][ T6104] loop1: detected capacity change from 0 to 128
[  313.870517][ T5869] usb 5-1: config 0 descriptor??
[  313.898771][ T5869] smsc75xx v1.0.0
[  313.902798][ T5869] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  313.915976][ T5869] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  314.200242][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.211007][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.218248][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  314.218342][   T30] audit: type=1800 audit(1742968296.498:34): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.33" name="bus" dev="loop1" ino=4 res=0 errno=0
[  314.308863][ T5847] usb 5-1: USB disconnect, device number 2
[  315.543264][ T5797] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  317.727012][ T6124] loop3: detected capacity change from 0 to 32768
[  317.830736][ T6124] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.40 (6124)
[  318.018917][ T6126] loop1: detected capacity change from 0 to 32768
[  318.059563][ T6124] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  318.070705][ T6124] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  318.081139][ T6124] BTRFS info (device loop3): using free-space-tree
[  318.142239][ T6126] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  318.219036][ T6126] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  318.602174][ T5792] ocfs2: Unmounting device (7,1) on (node local)
[  319.003330][ T5788] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  320.207824][ T6152] loop4: detected capacity change from 0 to 32768
[  320.223550][ T6152] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.45 (6152)
[  320.253844][ T6152] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  320.264749][ T6152] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  320.284923][ T6152] BTRFS info (device loop4): using free-space-tree
[  321.081634][ T5797] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  321.713663][ T5847] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  324.021977][ T6197] loop4: detected capacity change from 0 to 512
[  324.100380][ T6194] loop2: detected capacity change from 0 to 2048
[  324.158163][ T6194] EXT4-fs: Ignoring removed mblk_io_submit option
[  324.380025][ T6194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.582591][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  324.675765][ T6194] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.54: bg 0: block 234: padding at end of block bitmap is not set
[  324.735543][ T6194] EXT4-fs (loop2): Remounting filesystem read-only
[  325.337154][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.381267][ T6211] loop3: detected capacity change from 0 to 2048
[  325.428257][ T6211] ext4: Unknown parameter 'fscontext'
[  325.535014][ T6213] loop1: detected capacity change from 0 to 2048
[  325.892313][ T6213] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a042e019, mo2=0002]
[  326.033478][ T6213] System zones: 0-7
[  326.087816][ T6213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.241969][ T6213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.427420][ T6217] loop4: detected capacity change from 0 to 32768
[  326.442111][ T6217] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.60 (6217)
[  326.541890][ T6217] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  326.553349][ T6217] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  326.563793][ T6217] BTRFS info (device loop4): using free-space-tree
[  327.523945][ T5797] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  329.090217][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.70'.
[  329.336797][ T6264] loop1: detected capacity change from 0 to 256
[  329.424165][ T6264] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001)
[  329.470200][ T6268] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  331.109382][ T6283] loop2: detected capacity change from 0 to 2048
[  331.390968][ T6283] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a042e019, mo2=0002]
[  331.467161][ T6283] System zones: 0-7
[  331.536567][ T6283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.776060][ T6283] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.480551][ T6291] loop0: detected capacity change from 0 to 40427
[  332.528351][ T6291] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  332.536602][ T6291] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  332.572356][ T6291] F2FS-fs (loop0): invalid crc_offset: 33558524
[  332.643224][ T6291] F2FS-fs (loop0): Found nat_bits in checkpoint
[  332.943746][ T6291] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  332.951621][ T6291] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  333.464001][ T6306] loop3: detected capacity change from 0 to 256
[  333.696748][ T6306] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  333.766635][ T6299] f2fs_ckpt-7:0: attempt to access beyond end of device
[  333.766635][ T6299] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  333.781419][ T6299] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  334.066541][ T6309] loop1: detected capacity change from 0 to 128
[  334.139793][ T6309] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  334.234381][ T6309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  334.486684][ T6309] trusted_key: syz.1.86 sent an empty control message without MSG_MORE.
[  336.298287][ T6323] loop1: detected capacity change from 0 to 32768
[  336.377792][ T6323] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  336.679959][ T5792] ocfs2: Unmounting device (7,1) on (node local)
[  337.897095][ T6337] loop1: detected capacity change from 0 to 2048
[  338.071098][ T6335] loop3: detected capacity change from 0 to 40427
[  338.102480][ T6335] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  338.110815][ T6335] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  338.178061][ T6335] F2FS-fs (loop3): invalid crc_offset: 33558524
[  338.251297][ T6335] F2FS-fs (loop3): Found nat_bits in checkpoint
[  338.269934][ T6337] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a042e019, mo2=0002]
[  338.357810][ T6337] System zones: 0-7
[  338.430269][ T6337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.531837][ T6337] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.615231][ T6335] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  338.622869][ T6335] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  338.909276][ T6349] loop4: detected capacity change from 0 to 256
[  339.206700][ T6349] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[  339.292990][ T6339] f2fs_ckpt-7:3: attempt to access beyond end of device
[  339.292990][ T6339] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  339.307749][ T6339] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  342.225620][ T6366] loop2: detected capacity change from 0 to 32768
[  342.316453][ T6366] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  342.380183][ T6369] loop4: detected capacity change from 0 to 2048
[  342.616841][ T5791] ocfs2: Unmounting device (7,2) on (node local)
[  342.676555][ T6369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  343.057814][ T6376] overlay: ./file1 is not a directory
[  343.751210][ T6381] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  343.941517][ T6381] netlink: 'syz.0.113': attribute type 4 has an invalid length.
[  344.288110][ T6379] loop2: detected capacity change from 0 to 40427
[  344.298995][ T6379] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  344.307249][ T6379] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  344.326934][ T6379] F2FS-fs (loop2): invalid crc_offset: 33558524
[  344.410491][ T6379] F2FS-fs (loop2): Found nat_bits in checkpoint
[  344.580531][ T6384] loop3: detected capacity change from 0 to 2048
[  344.807234][ T6379] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  344.815376][ T6379] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  345.102505][ T6384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.356354][ T6395] loop4: detected capacity change from 0 to 256
[  345.618793][ T6385] f2fs_ckpt-7:2: attempt to access beyond end of device
[  345.618793][ T6385] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  345.633796][ T6385] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  345.801598][ T6394] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  345.829774][ T1896] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 248 with error 28
[  345.842912][ T1896] EXT4-fs (loop3): This should not happen!! Data will be lost
[  345.842912][ T1896] 
[  345.853313][ T1896] EXT4-fs (loop3): Total free blocks count 0
[  345.859762][ T1896] EXT4-fs (loop3): Free/Dirty block details
[  345.866154][ T1896] EXT4-fs (loop3): free_blocks=2415919504
[  345.872160][ T1896] EXT4-fs (loop3): dirty_blocks=256
[  345.882690][ T1896] EXT4-fs (loop3): Block reservation details
[  345.890665][ T1896] EXT4-fs (loop3): i_reserved_data_blocks=16
[  346.265504][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.293758][ T6400] loop0: detected capacity change from 0 to 2048
[  346.895988][ T6400] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a042e019, mo2=0002]
[  346.918583][ T6400] System zones: 0-7
[  346.961349][ T6400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.008445][ T6400] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.380962][ T6414] loop4: detected capacity change from 0 to 32768
[  348.667906][ T6414] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  348.966689][ T5797] ocfs2: Unmounting device (7,4) on (node local)
[  349.984802][ T6427] vlan2: entered allmulticast mode
[  349.990251][ T6427] batadv0: entered allmulticast mode
[  350.007766][ T6427] batadv0: left allmulticast mode
[  350.413089][ T6437] loop0: detected capacity change from 0 to 256
[  351.463339][ T6436] loop4: detected capacity change from 0 to 40427
[  351.575626][ T6436] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  351.583696][ T6436] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  351.642979][ T6436] F2FS-fs (loop4): invalid crc_offset: 33558524
[  351.739104][ T6436] F2FS-fs (loop4): Found nat_bits in checkpoint
[  352.135403][ T6436] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  352.143038][ T6436] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  352.291387][ T6439] loop2: detected capacity change from 0 to 32768
[  352.317230][ T6439] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.120 (6439)
[  352.518494][ T6439] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  352.529464][ T6439] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  352.545339][ T6439] BTRFS info (device loop2): using free-space-tree
[  352.952269][ T6440] f2fs_ckpt-7:4: attempt to access beyond end of device
[  352.952269][ T6440] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  352.967546][ T6440] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  354.033599][ T5791] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  354.328148][ T6470] loop3: detected capacity change from 0 to 2048
[  354.369293][ T5849] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  354.619842][ T6470] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a042e019, mo2=0002]
[  354.630980][ T5849] usb 1-1: Using ep0 maxpacket: 32
[  354.664884][ T6470] System zones: 0-7
[  354.677782][ T5849] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  354.691186][ T5849] usb 1-1: config 0 has no interface number 0
[  354.725985][ T6470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.842369][ T6470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.869933][ T5849] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  354.879693][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.893172][ T5849] usb 1-1: Product: syz
[  354.899306][ T5849] usb 1-1: Manufacturer: syz
[  354.904187][ T5849] usb 1-1: SerialNumber: syz
[  355.085860][ T5849] usb 1-1: config 0 descriptor??
[  355.208323][ T5849] smsc95xx v2.0.0
[  355.668775][ T6473] capability: warning: `syz.0.137' uses deprecated v2 capabilities in a way that may be insecure
[  356.411912][ T5849] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  356.430005][ T5849] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  356.509548][ T5849] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  356.522098][ T5849] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  356.746779][ T5849] usb 1-1: USB disconnect, device number 2
[  357.474814][ T6491] loop1: detected capacity change from 0 to 32768
[  357.589754][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  357.599847][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  357.748451][ T6491] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  358.219452][ T5792] ocfs2: Unmounting device (7,1) on (node local)
[  358.970278][ T6498] loop2: detected capacity change from 0 to 40427
[  359.560359][ T6503] loop0: detected capacity change from 0 to 32768
[  359.626965][ T6498] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  359.635234][ T6498] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  359.657556][ T6498] F2FS-fs (loop2): invalid crc_offset: 33558524
[  359.727541][ T6498] F2FS-fs (loop2): Found nat_bits in checkpoint
[  359.938033][ T6503] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  360.151217][ T6498] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  360.158880][ T6498] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  360.160137][ T5801] ocfs2: Unmounting device (7,0) on (node local)
[  361.156208][ T6513] f2fs_ckpt-7:2: attempt to access beyond end of device
[  361.156208][ T6513] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  361.171027][ T6513] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  362.218129][ T6526] loop4: detected capacity change from 0 to 2048
[  362.683287][ T6526] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a042e019, mo2=0002]
[  362.722229][ T6526] System zones: 0-7
[  362.758639][ T6526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.915281][ T6526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.367142][ T6545] netlink: 48 bytes leftover after parsing attributes in process `syz.3.158'.
[  364.368226][ T6541] loop1: detected capacity change from 0 to 32768
[  364.481825][ T6541] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  365.007544][ T5792] ocfs2: Unmounting device (7,1) on (node local)
[  366.750429][ T6561] loop0: detected capacity change from 0 to 512
[  367.333129][ T6561] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  367.347194][ T6561] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  367.403367][ T6559] loop3: detected capacity change from 0 to 40427
[  367.416267][ T6559] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  367.424339][ T6559] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  367.446349][ T6559] F2FS-fs (loop3): invalid crc_offset: 33558524
[  367.533024][ T6559] F2FS-fs (loop3): Found nat_bits in checkpoint
[  367.602077][ T6561] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  367.698534][ T6561] System zones: 1-12
[  367.704033][ T6561] EXT4-fs (loop0): orphan cleanup on readonly fs
[  367.777498][ T6561] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  367.809305][ T6563] loop4: detected capacity change from 0 to 2048
[  367.908683][ T6559] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  367.916423][ T6559] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  368.033449][ T6561] EXT4-fs (loop0): 1 truncate cleaned up
[  368.041834][ T6561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  368.266145][ T6563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  368.411606][ T5849] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  368.641368][ T5849] usb 2-1: device descriptor read/64, error -71
[  368.669262][ T6564] f2fs_ckpt-7:3: attempt to access beyond end of device
[  368.669262][ T6564] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  368.685140][ T6564] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  368.735428][ T6575] overlay: ./file1 is not a directory
[  368.905605][ T5849] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  369.077013][ T5849] usb 2-1: device descriptor read/64, error -71
[  369.205202][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.220361][ T5849] usb usb2-port1: attempt power cycle
[  369.695936][ T5849] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  369.757771][ T5849] usb 2-1: device descriptor read/8, error -71
[  370.000658][ T6585] netlink: 48 bytes leftover after parsing attributes in process `syz.4.172'.
[  370.022042][ T5849] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  370.125355][ T5849] usb 2-1: device descriptor read/8, error -71
[  370.239579][ T5849] usb usb2-port1: unable to enumerate USB device
[  371.677810][ T6596] loop3: detected capacity change from 0 to 64
[  372.353056][    C1] hrtimer: interrupt took 770198 ns
[  373.259135][ T6604] loop4: detected capacity change from 0 to 40427
[  373.275855][ T6604] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  373.284063][ T6604] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  373.297209][ T6604] F2FS-fs (loop4): invalid crc_offset: 33558524
[  373.342048][ T6604] F2FS-fs (loop4): Found nat_bits in checkpoint
[  373.644838][ T6604] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  373.652211][ T6604] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  373.723670][ T6615] netlink: 48 bytes leftover after parsing attributes in process `syz.1.183'.
[  373.892093][ T6606] loop3: detected capacity change from 0 to 512
[  374.016042][ T6606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  374.201219][ T6606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  374.264043][ T6606] System zones: 1-12
[  374.339175][ T6606] EXT4-fs (loop3): orphan cleanup on readonly fs
[  374.504369][ T6606] EXT4-fs (loop3): 1 truncate cleaned up
[  374.512867][ T6606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  374.581162][ T6607] f2fs_ckpt-7:4: attempt to access beyond end of device
[  374.581162][ T6607] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  374.596618][ T6607] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  374.908948][ T6618] loop0: detected capacity change from 0 to 2048
[  375.147834][ T6618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  375.286422][ T6623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.184'.
[  375.312737][ T6623] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  375.322171][ T6623] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  375.331439][ T6623] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  375.340883][ T6623] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  375.570775][ T6626] overlay: ./file1 is not a directory
[  375.649449][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.761771][ T6625] loop2: detected capacity change from 0 to 2048
[  375.821796][ T6625] ext4: Unknown parameter 'fscontext'
[  376.483920][ T6632] 9pnet_fd: Insufficient options for proto=fd
[  377.208656][ T6637] can0: slcan on pts0.
[  377.775631][ T6634] can0 (unregistered): slcan off pts0.
[  378.473751][ T6647] netlink: 48 bytes leftover after parsing attributes in process `syz.0.194'.
[  379.802568][ T6651] loop4: detected capacity change from 0 to 32768
[  380.012470][ T6654] loop1: detected capacity change from 0 to 40427
[  380.023964][ T6654] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  380.032543][ T6654] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  380.045642][ T6654] F2FS-fs (loop1): invalid crc_offset: 33558524
[  380.104013][ T6654] F2FS-fs (loop1): Found nat_bits in checkpoint
[  380.172236][ T6656] dvmrp1: entered allmulticast mode
[  380.328788][ T6651] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  380.466554][ T6654] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  380.475308][ T6654] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  381.135913][ T5871] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  381.342811][ T6651] XFS (loop4): Ending clean mount
[  381.398960][ T6651] XFS (loop4): Quotacheck needed: Please wait.
[  381.431088][ T5871] usb 4-1: config 0 has an invalid interface number: 112 but max is 0
[  381.440066][ T5871] usb 4-1: config 0 has no interface number 0
[  381.451684][ T6675] loop0: detected capacity change from 0 to 512
[  381.489315][ T6659] f2fs_ckpt-7:1: attempt to access beyond end of device
[  381.489315][ T6659] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  381.504248][ T6659] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  381.559674][ T5871] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  381.570207][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.578887][ T5871] usb 4-1: Product: syz
[  381.583334][ T5871] usb 4-1: Manufacturer: syz
[  381.588463][ T5871] usb 4-1: SerialNumber: syz
[  381.610470][ T5871] usb 4-1: config 0 descriptor??
[  381.634357][ T6675] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  381.668737][ T5871] mvusb_mdio 4-1:0.112: probe with driver mvusb_mdio failed with error -5
[  381.785567][ T6675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  381.838333][ T6651] XFS (loop4): Quotacheck: Done.
[  381.867348][ T6675] System zones: 1-12
[  381.904313][ T6675] EXT4-fs (loop0): orphan cleanup on readonly fs
[  381.950192][ T5871] usb 4-1: USB disconnect, device number 2
[  381.982900][ T6675] EXT4-fs (loop0): 1 truncate cleaned up
[  381.991184][ T6675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  382.014227][ T5797] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  382.731897][ T6680] loop2: detected capacity change from 0 to 2048
[  382.858794][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.878034][ T6680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  383.142603][ T6682] overlay: ./file1 is not a directory
[  383.450561][ T6686] loop0: detected capacity change from 0 to 512
[  383.675996][ T6686] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  383.685231][ T6686] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  383.687268][ T6687] loop3: detected capacity change from 0 to 2048
[  383.706132][ T6687] ext4: Unknown parameter 'fscontext'
[  383.749224][ T6686] EXT4-fs (loop0): 1 truncate cleaned up
[  383.766910][ T6686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.904334][ T6686] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.976276][ T5841] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  385.156638][ T6699] netlink: 48 bytes leftover after parsing attributes in process `syz.2.207'.
[  385.257219][ T5841] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  385.266936][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.328257][ T5841] usb 1-1: config 0 descriptor??
[  385.368991][ T5841] cp210x 1-1:0.0: cp210x converter detected
[  385.698026][ T6695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.708265][ T6695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.769854][ T6705] 9pnet_fd: Insufficient options for proto=fd
[  386.095182][ T5841] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71
[  386.126156][ T5841] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71
[  386.134086][ T5841] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  386.193654][ T5841] usb 1-1: cp210x converter now attached to ttyUSB0
[  386.265795][ T5841] usb 1-1: USB disconnect, device number 3
[  386.299196][ T6707] loop2: detected capacity change from 0 to 2048
[  386.348094][ T5841] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  386.359589][ T5841] cp210x 1-1:0.0: device disconnected
[  386.630766][ T6707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.516391][ T6711] loop1: detected capacity change from 0 to 40427
[  387.570933][ T6711] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  387.581292][ T6711] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  387.611121][ T6711] F2FS-fs (loop1): invalid crc_offset: 33558524
[  387.645548][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.696859][ T6711] F2FS-fs (loop1): Found nat_bits in checkpoint
[  387.996108][ T6711] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  388.003634][ T6711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  388.055129][ T5871] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  388.339054][ T5871] usb 1-1: config 0 has an invalid interface number: 112 but max is 0
[  388.347770][ T5871] usb 1-1: config 0 has no interface number 0
[  388.558926][ T5871] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  388.568822][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.581879][ T5871] usb 1-1: Product: syz
[  388.587955][ T5871] usb 1-1: Manufacturer: syz
[  388.592852][ T5871] usb 1-1: SerialNumber: syz
[  388.668289][ T5871] usb 1-1: config 0 descriptor??
[  388.708130][ T5871] mvusb_mdio 1-1:0.112: probe with driver mvusb_mdio failed with error -5
[  388.912110][ T5871] usb 1-1: USB disconnect, device number 4
[  388.959275][ T6717] f2fs_ckpt-7:1: attempt to access beyond end of device
[  388.959275][ T6717] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  388.973952][ T6717] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  389.532706][ T6728] loop2: detected capacity change from 0 to 2048
[  389.552510][ T6730] loop4: detected capacity change from 0 to 2048
[  389.777940][ T6730] ext4: Unknown parameter 'fscontext'
[  389.962691][ T6728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  390.174327][ T6734] overlay: ./file1 is not a directory
[  390.807072][ T6738] netlink: 48 bytes leftover after parsing attributes in process `syz.3.219'.
[  391.420675][ T6742] 9pnet_fd: Insufficient options for proto=fd
[  392.443304][ T6746] loop2: detected capacity change from 0 to 2048
[  392.637091][ T6746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.219428][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.754765][ T5841] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  394.031270][ T5841] usb 4-1: config 0 has an invalid interface number: 112 but max is 0
[  394.040977][ T5841] usb 4-1: config 0 has no interface number 0
[  394.238782][ T5841] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  394.248543][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.257096][ T5841] usb 4-1: Product: syz
[  394.261544][ T5841] usb 4-1: Manufacturer: syz
[  394.266579][ T5841] usb 4-1: SerialNumber: syz
[  394.448714][ T5841] usb 4-1: config 0 descriptor??
[  394.474756][ T6760] loop1: detected capacity change from 0 to 40427
[  394.486638][ T6760] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  394.494897][ T6760] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  394.535210][ T6760] F2FS-fs (loop1): invalid crc_offset: 33558524
[  394.590978][ T5841] mvusb_mdio 4-1:0.112: probe with driver mvusb_mdio failed with error -5
[  394.617944][ T6760] F2FS-fs (loop1): Found nat_bits in checkpoint
[  394.774084][ T5841] usb 4-1: USB disconnect, device number 3
[  394.923841][ T6760] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  394.936483][ T6760] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  395.113771][ T6770] loop4: detected capacity change from 0 to 2048
[  395.455149][ T6770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  395.635453][ T5795] Bluetooth: hci2: command 0x0406 tx timeout
[  395.646595][ T5793] Bluetooth: hci4: command 0x0406 tx timeout
[  395.654045][ T5789] Bluetooth: hci1: command 0x0406 tx timeout
[  395.662324][ T5796] Bluetooth: hci0: command 0x0406 tx timeout
[  395.668843][ T5804] Bluetooth: hci3: command 0x0406 tx timeout
[  395.719104][ T6767] f2fs_ckpt-7:1: attempt to access beyond end of device
[  395.719104][ T6767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  395.734032][ T6767] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  396.126321][ T6773] overlay: ./file1 is not a directory
[  396.619071][ T6778] 9pnet_fd: Insufficient options for proto=fd
[  396.731122][ T6776] loop0: detected capacity change from 0 to 2048
[  396.767620][ T6776] ext4: Unknown parameter 'fscontext'
[  397.749929][ T6782] loop4: detected capacity change from 0 to 2048
[  398.017844][ T6782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.096600][ T6785] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  398.155139][   T30] audit: type=1800 audit(1742968380.458:35): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.235" name="file1" dev="loop4" ino=15 res=0 errno=0
[  398.366705][ T6782] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 158 with error 28
[  398.379807][ T6782] EXT4-fs (loop4): This should not happen!! Data will be lost
[  398.379807][ T6782] 
[  398.390365][ T6782] EXT4-fs (loop4): Total free blocks count 0
[  398.396816][ T6782] EXT4-fs (loop4): Free/Dirty block details
[  398.403087][ T6782] EXT4-fs (loop4): free_blocks=2415919104
[  398.414906][ T6782] EXT4-fs (loop4): dirty_blocks=160
[  398.420392][ T6782] EXT4-fs (loop4): Block reservation details
[  398.428526][ T6782] EXT4-fs (loop4): i_reserved_data_blocks=10
[  398.835211][ T5869] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  398.975785][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.050269][ T5869] usb 1-1: Using ep0 maxpacket: 8
[  399.057557][ T6793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.233'.
[  399.094196][ T5869] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  399.103135][ T5869] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  399.111964][ T5869] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  399.121461][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  399.288211][ T6791] loop3: detected capacity change from 0 to 2048
[  399.319307][ T5869] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  399.334123][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.344114][ T5869] usb 1-1: Product: syz
[  399.348711][ T5869] usb 1-1: Manufacturer: syz
[  399.353601][ T5869] usb 1-1: SerialNumber: syz
[  399.448110][ T5869] usb 1-1: config 0 descriptor??
[  399.487711][ T6791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  399.504090][ T5869] hub 1-1:0.0: bad descriptor, ignoring hub
[  399.510705][ T5869] hub 1-1:0.0: probe with driver hub failed with error -5
[  400.204862][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.276488][ T6805] netlink: 312 bytes leftover after parsing attributes in process `syz.0.238'.
[  400.500290][ T6807] veth0_to_bridge: entered promiscuous mode
[  401.044347][ T6806] loop2: detected capacity change from 0 to 40427
[  401.108262][ T6806] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  401.116673][ T6806] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  401.149715][ T6806] F2FS-fs (loop2): invalid crc_offset: 33558524
[  401.195263][ T6806] F2FS-fs (loop2): Found nat_bits in checkpoint
[  401.452744][ T6809] loop4: detected capacity change from 0 to 2048
[  401.527824][ T6806] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  401.535492][ T6806] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  401.806656][ T6809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  402.318267][ T6811] f2fs_ckpt-7:2: attempt to access beyond end of device
[  402.318267][ T6811] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  402.333226][ T6811] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  402.541906][ T6819] 9pnet_fd: Insufficient options for proto=fd
[  403.319292][ T6805] veth0_to_bridge: left promiscuous mode
[  403.525963][ T5869] usb 1-1: USB disconnect, device number 5
[  404.123802][ T6826] loop0: detected capacity change from 0 to 2048
[  404.171635][ T6825] loop4: detected capacity change from 0 to 2048
[  404.197759][ T6825] ext4: Unknown parameter 'fscontext'
[  404.207840][ T6826] EXT4-fs: Ignoring removed mblk_io_submit option
[  404.466669][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.735044][ T6833] netlink: 48 bytes leftover after parsing attributes in process `syz.3.252'.
[  405.230002][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.364157][ T6845] loop0: detected capacity change from 0 to 2048
[  406.426438][ T6851] 9pnet_fd: Insufficient options for proto=fd
[  406.558198][ T6845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  406.696646][ T6848] loop3: detected capacity change from 0 to 2048
[  406.841393][ T6848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  407.322492][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.178805][ T6868] netlink: 72 bytes leftover after parsing attributes in process `syz.0.264'.
[  408.891039][ T6870] loop3: detected capacity change from 0 to 2048
[  408.970240][ T6870] ext4: Unknown parameter 'fscontext'
[  409.848578][ T6884] 9pnet_fd: Insufficient options for proto=fd
[  410.095350][ T6886] warning: `syz.4.273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  410.549885][ T6892] FAULT_INJECTION: forcing a failure.
[  410.549885][ T6892] name failslab, interval 1, probability 0, space 0, times 1
[  410.563356][ T6892] CPU: 0 UID: 0 PID: 6892 Comm: syz.1.275 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(undef) 
[  410.563518][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  410.563617][ T6892] Call Trace:
[  410.563680][ T6892]  <TASK>
[  410.563735][ T6892]  dump_stack_lvl+0x216/0x2d0
[  410.563963][ T6892]  dump_stack+0x1e/0x24
[  410.564135][ T6892]  should_fail_ex+0x77b/0x840
[  410.564353][ T6892]  should_failslab+0x17f/0x210
[  410.564566][ T6892]  __kmalloc_cache_noprof+0xc5/0xe00
[  410.564743][ T6892]  ? percpu_ref_init+0x131/0x610
[  410.564914][ T6892]  ? kmsan_get_metadata+0x13e/0x1c0
[  410.565110][ T6892]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  410.565337][ T6892]  percpu_ref_init+0x131/0x610
[  410.565496][ T6892]  ? __pfx_nfsd_net_free+0x10/0x10
[  410.565699][ T6892]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  410.565920][ T6892]  nfsd_create_serv+0x186/0xe90
[  410.566120][ T6892]  ? stack_depot_save_flags+0x6db/0x750
[  410.566315][ T6892]  ? kmsan_get_metadata+0x13e/0x1c0
[  410.566516][ T6892]  ? kmsan_internal_set_shadow_origin+0x6c/0x100
[  410.566720][ T6892]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  410.566927][ T6892]  nfsd_nl_listener_set_doit+0xd5/0x36a0
[  410.567081][ T6892]  ? kmsan_internal_set_shadow_origin+0x6c/0x100
[  410.567284][ T6892]  ? kmsan_get_metadata+0x13e/0x1c0
[  410.567504][ T6892]  ? __kmalloc_noprof+0x9b1/0x1260
[  410.567682][ T6892]  ? __nla_parse+0x5f/0x80
[  410.567882][ T6892]  ? kmsan_get_metadata+0x13e/0x1c0
[  410.568083][ T6892]  ? kmsan_internal_set_shadow_origin+0x6c/0x100
[  410.568279][ T6892]  ? kmsan_get_metadata+0x13e/0x1c0
[  410.568478][ T6892]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  410.568688][ T6892]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  410.568852][ T6892]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  410.569012][ T6892]  genl_rcv_msg+0x1214/0x12c0
[  410.569171][ T6892]  ? netlink_rcv_skb+0x44/0x650
[  410.569362][ T6892]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  410.569586][ T6892]  netlink_rcv_skb+0x375/0x650
[  410.569801][ T6892]  ? __pfx_genl_rcv_msg+0x10/0x10
[  410.569971][ T6892]  ? __pfx_genl_rcv+0x10/0x10
[  410.570112][ T6892]  genl_rcv+0x40/0x60
[  410.570255][ T6892]  netlink_unicast+0xf52/0x1260
[  410.570466][ T6892]  netlink_sendmsg+0x10da/0x11e0
[  410.570693][ T6892]  ? __pfx_netlink_sendmsg+0x10/0x10
[  410.570888][ T6892]  ? __pfx_netlink_sendmsg+0x10/0x10
[  410.571084][ T6892]  __sock_sendmsg+0x30f/0x380
[  410.571282][ T6892]  ____sys_sendmsg+0x890/0xda0
[  410.571477][ T6892]  ___sys_sendmsg+0x28d/0x3c0
[  410.571654][ T6892]  ? __rcu_read_unlock+0x7b/0xe0
[  410.571804][ T6892]  ? __fget_files+0x443/0x520
[  410.571963][ T6892]  ? kmsan_get_metadata+0x13e/0x1c0
[  410.572173][ T6892]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  410.572397][ T6892]  __x64_sys_sendmsg+0x212/0x3c0
[  410.572571][ T6892]  ? kmsan_get_metadata+0x13e/0x1c0
[  410.572791][ T6892]  x64_sys_call+0x2e0f/0x3c80
[  410.572995][ T6892]  do_syscall_64+0xcd/0x1e0
[  410.573169][ T6892]  ? clear_bhb_loop+0x25/0x80
[  410.573325][ T6892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.573486][ T6892] RIP: 0033:0x7fb3b0d8d169
[  410.573618][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  410.573739][ T6892] RSP: 002b:00007fb3b1b3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.573876][ T6892] RAX: ffffffffffffffda RBX: 00007fb3b0fa5fa0 RCX: 00007fb3b0d8d169
[  410.573986][ T6892] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  410.574075][ T6892] RBP: 00007fb3b1b3c090 R08: 0000000000000000 R09: 0000000000000000
[  410.574172][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.574255][ T6892] R13: 0000000000000000 R14: 00007fb3b0fa5fa0 R15: 00007ffec3fa1768
[  410.574385][ T6892]  </TASK>
[  410.979390][ T6889] loop3: detected capacity change from 0 to 2048
[  411.303537][ T6896] netlink: 72 bytes leftover after parsing attributes in process `syz.4.278'.
[  411.344165][ T6889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  411.375084][ T6893] loop2: detected capacity change from 0 to 2048
[  411.452471][ T6893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  411.717141][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.925380][ T6925] 9pnet_fd: Insufficient options for proto=fd
[  414.165557][ T6922] loop3: detected capacity change from 0 to 2048
[  414.220937][ T6922] ext4: Unknown parameter 'fscontext'
[  414.824138][ T6934] netlink: 72 bytes leftover after parsing attributes in process `syz.2.290'.
[  415.235785][ T6935] loop4: detected capacity change from 0 to 2048
[  415.358958][ T6935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.364236][ T6939] loop1: detected capacity change from 0 to 1024
[  415.578232][ T6937] loop0: detected capacity change from 0 to 2048
[  415.744804][ T6937] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  415.873561][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.014360][ T5792] =====================================================
[  417.022384][ T5792] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x10f4/0x1340
[  417.030693][ T5792]  hfsplus_delete_cat+0x10f4/0x1340
[  417.036426][ T5792]  hfsplus_rmdir+0x140/0x2e0
[  417.041284][ T5792]  vfs_rmdir+0x5bf/0x800
[  417.050869][ T5792]  do_rmdir+0x5c4/0x850
[  417.057110][ T5792]  __x64_sys_unlinkat+0x1ba/0x220
[  417.062418][ T5792]  x64_sys_call+0x29b1/0x3c80
[  417.067545][ T5792]  do_syscall_64+0xcd/0x1e0
[  417.072316][ T5792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.078897][ T5792] 
[  417.081360][ T5792] Uninit was created at:
[  417.086165][ T5792]  __alloc_frozen_pages_noprof+0x9a7/0xe00
[  417.092226][ T5792]  alloc_pages_mpol+0x4cd/0x890
[  417.097547][ T5792]  alloc_frozen_pages_noprof+0x1bf/0x1e0
[  417.103471][ T5792]  allocate_slab+0x23a/0x1110
[  417.108677][ T5792]  ___slab_alloc+0x128a/0x3550
[  417.113715][ T5792]  kmem_cache_alloc_lru_noprof+0x866/0xe30
[  417.120008][ T5792]  hfsplus_alloc_inode+0x5a/0xd0
[  417.125378][ T5792]  alloc_inode+0x8a/0x470
[  417.129985][ T5792]  iget_locked+0x254/0x1240
[  417.135033][ T5792]  hfsplus_iget+0x59/0xae0
[  417.139678][ T5792]  hfsplus_btree_open+0x13e/0x1ed0
[  417.145364][ T5792]  hfsplus_fill_super+0x1113/0x26e0
[  417.155773][ T5792]  get_tree_bdev_flags+0x6ec/0x910
[  417.161185][ T5792]  get_tree_bdev+0x37/0x50
[  417.167589][ T5792]  hfsplus_get_tree+0x34/0x40
[  417.172498][ T5792]  vfs_get_tree+0xb1/0x5a0
[  417.177352][ T5792]  do_new_mount+0x71f/0x15e0
[  417.182254][ T5792]  path_mount+0x742/0x1f10
[  417.187150][ T5792]  __se_sys_mount+0x71f/0x800
[  417.192062][ T5792]  __x64_sys_mount+0xe4/0x150
[  417.197276][ T5792]  x64_sys_call+0xed5/0x3c80
[  417.202157][ T5792]  do_syscall_64+0xcd/0x1e0
[  417.207156][ T5792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.213328][ T5792] 
[  417.216049][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz-executor Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(undef) 
[  417.228450][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  417.238891][ T5792] =====================================================
[  417.246214][ T5792] Disabling lock debugging due to kernel taint
[  417.257316][ T5792] Kernel panic - not syncing: kmsan.panic set ...
[  417.263954][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz-executor Tainted: G    B              6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(undef) 
[  417.277663][ T5792] Tainted: [B]=BAD_PAGE
[  417.281988][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  417.292271][ T5792] Call Trace:
[  417.295752][ T5792]  <TASK>
[  417.298843][ T5792]  dump_stack_lvl+0x216/0x2d0
[  417.303801][ T5792]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  417.309908][ T5792]  dump_stack+0x1e/0x24
[  417.314321][ T5792]  panic+0x4e5/0xcf0
[  417.318489][ T5792]  ? kmsan_save_stack_with_flags+0x50/0x60
[  417.324639][ T5792]  kmsan_report+0x2ca/0x2d0
[  417.329451][ T5792]  ? __msan_warning+0x95/0x120
[  417.334490][ T5792]  ? hfsplus_delete_cat+0x10f4/0x1340
[  417.340160][ T5792]  ? hfsplus_rmdir+0x140/0x2e0
[  417.345196][ T5792]  ? vfs_rmdir+0x5bf/0x800
[  417.349887][ T5792]  ? do_rmdir+0x5c4/0x850
[  417.354494][ T5792]  ? __x64_sys_unlinkat+0x1ba/0x220
[  417.360420][ T5792]  ? x64_sys_call+0x29b1/0x3c80
[  417.365563][ T5792]  ? do_syscall_64+0xcd/0x1e0
[  417.370503][ T5792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.376823][ T5792]  ? hfsplus_bnode_read+0x342/0x360
[  417.382296][ T5792]  ? kmsan_get_metadata+0x13e/0x1c0
[  417.387772][ T5792]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  417.393855][ T5792]  ? hfsplus_bnode_dump+0x4f7/0x540
[  417.399310][ T5792]  ? kmsan_get_metadata+0x13e/0x1c0
[  417.404767][ T5792]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  417.410867][ T5792]  ? hfsplus_brec_remove+0x91d/0x9d0
[  417.416439][ T5792]  ? kmsan_get_metadata+0x13e/0x1c0
[  417.421994][ T5792]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  417.428068][ T5792]  __msan_warning+0x95/0x120
[  417.432916][ T5792]  hfsplus_delete_cat+0x10f4/0x1340
[  417.438360][ T5792]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  417.444438][ T5792]  ? kmsan_get_metadata+0x13e/0x1c0
[  417.450218][ T5792]  hfsplus_rmdir+0x140/0x2e0
[  417.455055][ T5792]  ? __pfx_hfsplus_rmdir+0x10/0x10
[  417.460427][ T5792]  vfs_rmdir+0x5bf/0x800
[  417.464938][ T5792]  do_rmdir+0x5c4/0x850
[  417.469368][ T5792]  __x64_sys_unlinkat+0x1ba/0x220
[  417.474664][ T5792]  x64_sys_call+0x29b1/0x3c80
[  417.479593][ T5792]  do_syscall_64+0xcd/0x1e0
[  417.484416][ T5792]  ? clear_bhb_loop+0x25/0x80
[  417.489315][ T5792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.495421][ T5792] RIP: 0033:0x7fb3b0d8c747
[  417.500009][ T5792] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.519851][ T5792] RSP: 002b:00007ffec3f9e818 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  417.528490][ T5792] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fb3b0d8c747
[  417.536654][ T5792] RDX: 0000000000000200 RSI: 00007ffec3f9f9c0 RDI: 00000000ffffff9c
[  417.544804][ T5792] RBP: 00007fb3b0e0e08c R08: 0000000000000000 R09: 0000000000000000
[  417.552948][ T5792] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffec3f9f9c0
[  417.561091][ T5792] R13: 00007fb3b0e0e08c R14: 0000000000065ad2 R15: 00007ffec3fa1b80
[  417.569293][ T5792]  </TASK>
[  417.572808][ T5792] Kernel Offset: disabled
[  417.577246][ T5792] Rebooting in 86400 seconds..