last executing test programs:

40.061967365s ago: executing program 0 (id=1):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x80, &(0x7f0000000000)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@utf8}, {@uni_xlate}, {@shortname_mixed}]}, 0x1, 0x239, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0xe2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000020240), 0x10010)
io_setup(0x3fe, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f00000020c0)='./bus\x00', 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000b40)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f6368617273ff000000000000002c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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")
ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140))
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

39.137081738s ago: executing program 0 (id=9):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0xe0, &(0x7f0000000300), &(0x7f0000000680)=""/224, 0x8, 0x0, 0x0, 0x4, &(0x7f0000000080), &(0x7f0000000540)="31929804", 0x1, 0x0, 0x2}, 0x50)
syz_emit_ethernet(0x42, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb0100bbbb8100008000000000000022d1"], 0x0)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='data_checksum=xxhash,direct_io,journal_flush_disabled,fsck,journal_flush_atelimit_errors,compression=zstd,reconstruct_alloc,no_data_io,hash,\x00'], 0x1, 0x5903, &(0x7f0000010b40)="$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")
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2e7b0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x90)
truncate(&(0x7f0000000040)='./file1\x00', 0x7fff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x183042, 0x0)
write$tun(r1, &(0x7f0000000600)=ANY=[], 0x1001)
read$FUSE(r1, &(0x7f0000000dc0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ENTRY(r1, &(0x7f0000000140)={0x90, 0x0, r2, {0x6, 0x3, 0x48, 0x7c1, 0x3, 0x5, {0x4, 0x4, 0x4, 0x0, 0x4, 0x5, 0x401, 0x221a, 0x699, 0x1000, 0xffff0001, 0xffffffffffffffff, r3, 0x9, 0xd92e}}}, 0x90)

37.425414458s ago: executing program 0 (id=12):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

36.856953073s ago: executing program 32 (id=12):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

36.820649031s ago: executing program 5 (id=15):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='ALTPCM\nPHONEIR \'Mic Capture\' 00000000000000000000\nPHONEIN \'Master0Playback Volume\' 00000000000000000000\nDIGITAL3 \'CD\'00000000000\nSPEAKER \'CD\' 00'], 0xe6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
open(0x0, 0x60840, 0x1d2)
prlimit64(r2, 0xa, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000300))
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000100)={0x2, 0x6, 0x401})
r6 = socket$inet(0xa, 0x801, 0x84)
sendto$inet(r6, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x84, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}]}]}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x84}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)

34.834619237s ago: executing program 5 (id=20):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104)
ioctl$NBD_SET_SOCK(r3, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
close_range(r0, 0xffffffffffffffff, 0x0)

34.060550065s ago: executing program 5 (id=24):
syz_open_dev$cec(0x0, 0x0, 0x210380)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$RTC_AIE_ON(r3, 0x7001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

31.55198904s ago: executing program 5 (id=33):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$eJzs3U9vG2kZAPBnJna2abM4CxyWldhdsUVJBHWahrYRhwISglOlQrmXkLhRFCeuEqdtogpS8QGQEAIkLnDigsQHQEL9CAipEtwRIFAFLRw4FAbZHoc0tdNEdWw2/v2kt/PXfp6n7oznnZl6Ahha70fEVERkWZZNR0Qpn5/mLXZbrbHes6cPFhstiSy7+bckknxe+73eyIfn8pediYivfzXiW8nLcTe3d1YXqtXKRj49U19LnmfZzoWVtYXlynJlfW5u9sr81fnL8xd7UudERFz78p9/+L2ff+Xarz977w+3/jr17VaBLfvr6KVW6cXm30VbISI2TiLYgBSaFbZcHnAuAAAcrnG8/9GI+FRETEcpRppHc03Tg80MAAAA6JXsC+PxPGld/wMAAABOpzQixuPGaDm/33c80rRcbt3D+/E4m1Zrm/XPZKW98wUTUUxvr1QrF/N7ByaimDSmZ/N7bNvTlw5Mz0XEWxHxg9JYc7q8WKsuDfTMBwAAAAyPc80+f5K2+///LLX6/wAAAMApMzHoBAAAAIATp/8PAAAAp5/+PwAAAJxqN65fb7Ss/fzrpbvbW6u1uxeWKpur5bWtxfJibeNOeblWW35SiKitver9qrXanc/F+tb9mXplsz6zub1za622tV6/tfLCI7ABAACAPnrrvUe/TyJi9/NjaURkyb5lxYhsZP/Khf7nB5yc9Dgr/+nk8gD6b2TQCQAD45Aehldx0AkAA/eq/UDXm3d+0/tcAACAkzH5ib3r/83WMJovSwaaGXDS8uv/iW0dho/r/zC8XP+D4VU87AhApwBOvfQIm/rrX//PsmMlBQAA9Nx4syVpOe8HjEealssRbzYfC/C//x30kYj4Xan4xu2VamW2OSdxegAAAAAAAAAAAAAAAAAAAAAAAAAAjijLksi6aD0NMEa7LQcAAAA+HCLSvyT5878mS+fHD54fGE3+VWoOI+LeT27+6P5Cvb4x25j/97359R/n8y/1/fQFAAAA0EG7n97uxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABALz17+mCx3foZ98mXImKiU/xCnGkOz0QxIs7+I4nCvtclETHSg/i7DyPi7U7xk0ZaMZFncTB+GhFjA45/rgfxYZg9aux/vthp+0vj/eaw8/ZXyNvrau3/RjrGb+//Rrrs/97s9Ibpy7PeefzLma7xH0a8U+i8/2nHTw7ET/L2wRFr/OY3dna6Lct+FjHZ8fsneaHWmaRwZ2Zze+fCytrCcmW5sj43N3tl/ur85fmLM7dXqpX8z44xvv/JX/3nsPrPdok/0aX+dk7nj1j/vx/ff/qx1mjxwKJi/DTLpj7o/O/v7S7x2999n84/7sb0ZHt8tzW+37u/+O277x1S/1KX+rt9/u0cpo5Y//TXvvvHI64KAPTB5vbO6kK1Wtk43kgSsfsaLzcyXCNj0cegC3HYOu2D2D7k85081P/FR3DskcHtkwAAgJOR7B30DzoTAAAAAAAAAAAAAAAAAAAAGF6v+hmw6MHPiR2MuTuYUgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvXfAAAA///ST8Yo")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x210000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df87", 0x23}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03bb", 0x5}], 0x1, &(0x7f0000002080)=ANY=[], 0x2f0}}, {{0x0, 0x0, &(0x7f0000001f40), 0x0, &(0x7f0000004a40)=ANY=[], 0x1450}}], 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040), 0x4)
shutdown(r3, 0x1)
recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0)

30.186775908s ago: executing program 5 (id=38):
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)

28.452509843s ago: executing program 5 (id=43):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$dsp1(0xffffff9c, 0x0, 0x30002, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fanotify_init(0x4c, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
shutdown(r3, 0x1)
fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
socket$nl_rdma(0x10, 0x3, 0x14)

17.452442034s ago: executing program 1 (id=74):
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5000003, 0x11, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280))
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r2 = syz_open_pts(r1, 0x101)
dup3(r2, r1, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0)

13.247022933s ago: executing program 33 (id=43):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$dsp1(0xffffff9c, 0x0, 0x30002, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fanotify_init(0x4c, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
shutdown(r3, 0x1)
fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
socket$nl_rdma(0x10, 0x3, 0x14)

12.412675727s ago: executing program 1 (id=90):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xffffffff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x66f9, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r5, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB, @ANYRES32=r5], 0x44}}, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r8, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @val=@iter={&(0x7f0000001740)=@task={r0, 0x0, r8}, 0x10}}, 0x18)

9.648459557s ago: executing program 1 (id=95):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

9.387515779s ago: executing program 3 (id=97):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xc9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010)

9.018666491s ago: executing program 1 (id=99):
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = gettid()
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000440)=""/106, 0x6a}], 0x1, 0x40000100, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1, 0x0, 0x0)

7.734130048s ago: executing program 4 (id=100):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)

7.238831271s ago: executing program 3 (id=102):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38)
socket$igmp6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x693, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)

5.425211471s ago: executing program 3 (id=104):
unshare(0x20000400)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xeb46, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0)
r4 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480))
request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r4)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x8, 0x2, 0x40000000, 0x23, 0x7})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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")

4.961042329s ago: executing program 2 (id=105):
syz_open_dev$cec(0x0, 0x0, 0x210380)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$RTC_AIE_ON(r3, 0x7001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

4.959923073s ago: executing program 4 (id=106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0c, 0xfac0a]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4000815}, 0x850)

4.561982319s ago: executing program 3 (id=107):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94)

4.454573259s ago: executing program 1 (id=108):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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")
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0xd931d3864d39dcce)
rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xd8, 0x0)

3.434680027s ago: executing program 4 (id=109):
preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)=""/186, 0xba}], 0x1, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

3.032916624s ago: executing program 2 (id=110):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103000)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040))

2.990661961s ago: executing program 4 (id=111):
syz_open_dev$cec(0x0, 0x0, 0x210380)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$RTC_AIE_ON(r3, 0x7001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

2.664810642s ago: executing program 3 (id=112):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@debug}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=")
creat(&(0x7f0000000340)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x2]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x3000, 0x9, 0x1, 0x10000, 0x1ff}}, 0x118)

2.637602733s ago: executing program 1 (id=113):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
pipe(&(0x7f0000000140))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.764024448s ago: executing program 2 (id=114):
mq_open(&(0x7f0000000280)='\x00', 0x40, 0x44, &(0x7f00000002c0)={0x7fffffffffffffff, 0xfffffffffffff43a, 0x9, 0x4})

1.521091577s ago: executing program 4 (id=115):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x200}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x3, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
r3 = fsopen(0x0, 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32=r1], 0xe6)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
prlimit64(r0, 0xa, 0x0, &(0x7f0000000300))
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000100)={0x2, 0x6, 0x401})
r5 = socket$inet(0xa, 0x801, 0x84)
sendto$inet(r5, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r6, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000000), 0x0)

1.466770101s ago: executing program 2 (id=116):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
close_range(r1, 0xffffffffffffffff, 0x0)

270.025863ms ago: executing program 2 (id=117):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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")

108.917304ms ago: executing program 3 (id=118):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x80, &(0x7f0000000000)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@utf8}, {@uni_xlate}, {@shortname_mixed}]}, 0x1, 0x239, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0xe2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000020240), 0x10010)
io_setup(0x3fe, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f00000020c0)='./bus\x00', 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000b40)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f6368617273ff000000000000002c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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")
ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140))

82.904204ms ago: executing program 4 (id=119):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"])

0s ago: executing program 2 (id=120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0c, 0xfac0a]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4000815}, 0x850)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts.
[   85.016969][ T5822] cgroup: Unknown subsys name 'net'
[   85.125808][ T5822] cgroup: Unknown subsys name 'cpuset'
[   85.135263][ T5822] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   86.682937][ T5822] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   89.342902][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.351941][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.360721][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.372017][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.381966][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.390800][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.398612][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.406949][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.415438][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.424887][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   89.426576][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.440049][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.449390][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.456940][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   89.459596][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.472901][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.481980][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.494851][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   89.503144][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.520760][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.528923][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.543443][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.551564][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   89.563722][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.582359][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.592889][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.602747][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.611307][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   89.622175][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.631489][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   89.639064][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   89.649803][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.658673][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   89.671604][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   89.684537][ T5142] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   89.693833][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   90.126822][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   90.178562][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   90.312924][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   90.323678][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   90.474125][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   90.506720][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.520011][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.528253][ T5838] bridge_slave_0: entered allmulticast mode
[   90.540366][ T5838] bridge_slave_0: entered promiscuous mode
[   90.580479][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.588425][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.596055][ T5838] bridge_slave_1: entered allmulticast mode
[   90.603202][ T5838] bridge_slave_1: entered promiscuous mode
[   90.615998][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.623233][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.630382][ T5833] bridge_slave_0: entered allmulticast mode
[   90.637725][ T5833] bridge_slave_0: entered promiscuous mode
[   90.645755][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.652953][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.660113][ T5833] bridge_slave_1: entered allmulticast mode
[   90.667130][ T5833] bridge_slave_1: entered promiscuous mode
[   90.700546][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.707763][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.715153][ T5844] bridge_slave_0: entered allmulticast mode
[   90.722277][ T5844] bridge_slave_0: entered promiscuous mode
[   90.776814][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   90.787550][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.795571][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.802914][ T5844] bridge_slave_1: entered allmulticast mode
[   90.809709][ T5844] bridge_slave_1: entered promiscuous mode
[   90.843767][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.863302][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.870374][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.877970][ T5850] bridge_slave_0: entered allmulticast mode
[   90.885665][ T5850] bridge_slave_0: entered promiscuous mode
[   90.899166][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.906785][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.914076][ T5850] bridge_slave_1: entered allmulticast mode
[   90.920877][ T5850] bridge_slave_1: entered promiscuous mode
[   90.940488][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.951525][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.976769][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.012683][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.048741][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.107639][ T5838] team0: Port device team_slave_0 added
[   91.116031][ T5838] team0: Port device team_slave_1 added
[   91.167529][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.179140][ T5844] team0: Port device team_slave_0 added
[   91.189798][ T5844] team0: Port device team_slave_1 added
[   91.213513][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.220654][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.228323][ T5842] bridge_slave_0: entered allmulticast mode
[   91.236102][ T5842] bridge_slave_0: entered promiscuous mode
[   91.246408][ T5833] team0: Port device team_slave_0 added
[   91.255123][ T5833] team0: Port device team_slave_1 added
[   91.278129][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.316485][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.323833][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.350634][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.363633][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.370848][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.378689][ T5842] bridge_slave_1: entered allmulticast mode
[   91.386048][ T5842] bridge_slave_1: entered promiscuous mode
[   91.442491][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.449450][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.476142][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.488699][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.492615][ T5841] Bluetooth: hci1: command tx timeout
[   91.501124][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.527623][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.555898][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.567164][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.593790][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.604424][ T5841] Bluetooth: hci2: command tx timeout
[   91.610341][ T5841] Bluetooth: hci0: command tx timeout
[   91.618226][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.625338][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.651383][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.651836][ T5841] Bluetooth: hci3: command tx timeout
[   91.669032][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.676689][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.684012][ T5852] bridge_slave_0: entered allmulticast mode
[   91.690854][ T5852] bridge_slave_0: entered promiscuous mode
[   91.699015][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.706200][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.713516][ T5852] bridge_slave_1: entered allmulticast mode
[   91.720654][ T5852] bridge_slave_1: entered promiscuous mode
[   91.730923][ T5850] team0: Port device team_slave_0 added
[   91.737669][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.742721][ T5841] Bluetooth: hci5: command tx timeout
[   91.744843][ T5142] Bluetooth: hci4: command tx timeout
[   91.756693][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.782699][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.838133][ T5850] team0: Port device team_slave_1 added
[   91.870812][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.885105][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.921563][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.940302][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.947744][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.974313][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.991436][ T5838] hsr_slave_0: entered promiscuous mode
[   91.998011][ T5838] hsr_slave_1: entered promiscuous mode
[   92.020018][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.040416][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.047478][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.074317][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.107873][ T5842] team0: Port device team_slave_0 added
[   92.154637][ T5833] hsr_slave_0: entered promiscuous mode
[   92.163124][ T5833] hsr_slave_1: entered promiscuous mode
[   92.169139][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.177402][ T5833] Cannot create hsr debugfs directory
[   92.187755][ T5842] team0: Port device team_slave_1 added
[   92.235986][ T5852] team0: Port device team_slave_0 added
[   92.255324][ T5844] hsr_slave_0: entered promiscuous mode
[   92.268650][ T5844] hsr_slave_1: entered promiscuous mode
[   92.275069][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.283140][ T5844] Cannot create hsr debugfs directory
[   92.363161][ T5852] team0: Port device team_slave_1 added
[   92.370282][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.378478][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.405012][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.460133][ T5850] hsr_slave_0: entered promiscuous mode
[   92.467030][ T5850] hsr_slave_1: entered promiscuous mode
[   92.473266][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.480843][ T5850] Cannot create hsr debugfs directory
[   92.509673][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.516870][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.543782][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.652170][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.659182][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.686544][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.742595][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.749598][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.777403][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.910286][ T5842] hsr_slave_0: entered promiscuous mode
[   92.919381][ T5842] hsr_slave_1: entered promiscuous mode
[   92.925891][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.934994][ T5842] Cannot create hsr debugfs directory
[   92.999234][ T5852] hsr_slave_0: entered promiscuous mode
[   93.006054][ T5852] hsr_slave_1: entered promiscuous mode
[   93.012497][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.020728][ T5852] Cannot create hsr debugfs directory
[   93.320612][ T5844] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   93.350503][ T5844] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   93.377805][ T5844] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   93.400299][ T5844] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   93.445430][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.457549][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.467301][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.477645][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.572560][ T5142] Bluetooth: hci1: command tx timeout
[   93.578082][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.589262][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.607579][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.632705][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.652323][ T5142] Bluetooth: hci0: command tx timeout
[   93.653030][ T5841] Bluetooth: hci2: command tx timeout
[   93.692611][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.732245][ T5841] Bluetooth: hci3: command tx timeout
[   93.739762][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.754974][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.775766][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.812280][ T5841] Bluetooth: hci4: command tx timeout
[   93.813140][ T5142] Bluetooth: hci5: command tx timeout
[   93.831199][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.854832][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.869769][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.880208][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.915932][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.936921][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   93.960451][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.007906][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.015130][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.027351][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.034496][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.047990][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   94.088436][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.107690][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.114809][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.139851][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.172589][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.179707][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.202496][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.244973][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.258082][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.367506][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.387698][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.429366][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   94.463459][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.470591][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.486947][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   94.514847][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.522041][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.558004][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.668285][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.675450][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.707768][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.715236][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.774314][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.785497][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   94.798665][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.836921][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.860327][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.888381][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.909609][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.916794][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.969371][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.048635][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   95.069809][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.076950][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.120301][ T5850] veth0_vlan: entered promiscuous mode
[   95.157836][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.164997][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.179257][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.186392][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.217341][ T5850] veth1_vlan: entered promiscuous mode
[   95.305173][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.397631][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.436008][ T5850] veth0_macvtap: entered promiscuous mode
[   95.513602][ T5850] veth1_macvtap: entered promiscuous mode
[   95.605985][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.628765][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.646226][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.655001][ T5142] Bluetooth: hci1: command tx timeout
[   95.698091][ T5838] veth0_vlan: entered promiscuous mode
[   95.708221][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.718338][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.728200][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.734454][ T5142] Bluetooth: hci0: command tx timeout
[   95.737755][ T5841] Bluetooth: hci2: command tx timeout
[   95.747902][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.777660][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.789917][ T5838] veth1_vlan: entered promiscuous mode
[   95.822685][ T5841] Bluetooth: hci3: command tx timeout
[   95.894474][ T5841] Bluetooth: hci4: command tx timeout
[   95.894493][ T5142] Bluetooth: hci5: command tx timeout
[   95.906823][ T5844] veth0_vlan: entered promiscuous mode
[   95.919852][ T5844] veth1_vlan: entered promiscuous mode
[   95.943360][ T5833] veth0_vlan: entered promiscuous mode
[   96.020412][ T5833] veth1_vlan: entered promiscuous mode
[   96.120873][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.135755][ T5838] veth0_macvtap: entered promiscuous mode
[   96.154901][ T5844] veth0_macvtap: entered promiscuous mode
[   96.162298][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.170267][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.176993][ T5833] veth0_macvtap: entered promiscuous mode
[   96.197114][ T5833] veth1_macvtap: entered promiscuous mode
[   96.227623][ T5838] veth1_macvtap: entered promiscuous mode
[   96.255827][ T5844] veth1_macvtap: entered promiscuous mode
[   96.327553][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.338445][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.349976][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.376856][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.386464][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.397139][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.404107][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.417088][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.426662][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.437383][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.447738][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.458603][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.473180][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.500760][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.511878][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.522501][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.534915][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.544885][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.555417][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.566397][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.577971][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.589380][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.600252][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.610920][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.628413][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.638037][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.648716][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.658690][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.669194][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.679201][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.689738][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.703324][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.740902][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.758374][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.767578][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.777444][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.800041][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.810176][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.816134][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   96.821393][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.849376][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.877453][ T5844] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.886779][ T5844] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.896126][ T5844] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.905885][ T5844] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.934817][ T5852] veth0_vlan: entered promiscuous mode
[   96.973454][ T5842] veth0_vlan: entered promiscuous mode
[   96.998766][ T5852] veth1_vlan: entered promiscuous mode
[   97.069103][ T5842] veth1_vlan: entered promiscuous mode
[   97.201517][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.224329][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.254277][ T5852] veth0_macvtap: entered promiscuous mode
[   97.316198][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.328256][ T5842] veth0_macvtap: entered promiscuous mode
[   97.336396][  T970] cfg80211: failed to load regulatory.db
[   97.344148][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.364978][ T5842] veth1_macvtap: entered promiscuous mode
[   97.366454][ T5944] loop3: detected capacity change from 0 to 256
[   97.378196][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.389693][ T5852] veth1_macvtap: entered promiscuous mode
[   97.396745][ T5944] msdos: Bad value for 'gid'
[   97.400306][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.401352][ T5944] msdos: Bad value for 'gid'
[   97.515311][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.537854][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.546481][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.565805][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.571695][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.585244][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.595152][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.605704][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.616730][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.646332][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.675091][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.732067][ T5841] Bluetooth: hci1: command tx timeout
[   97.735091][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.755272][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.765415][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.776362][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.786513][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.797511][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.807617][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.820415][ T5841] Bluetooth: hci0: command tx timeout
[   97.820437][ T5142] Bluetooth: hci2: command tx timeout
[   97.825903][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.825928][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.851812][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.864034][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.897629][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.902318][ T5142] Bluetooth: hci3: command tx timeout
[   97.929605][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.947773][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.960033][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.970144][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.981352][ T5142] Bluetooth: hci5: command tx timeout
[   97.982134][ T5841] Bluetooth: hci4: command tx timeout
[   97.986977][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.012651][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.024123][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.035456][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.055722][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.068725][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.083428][ T5950] loop0: detected capacity change from 0 to 128
[   98.091870][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.142050][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.162713][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.187401][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.209339][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.222227][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.253980][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.280613][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.305482][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.353677][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.366886][ T5951] loop0: detected capacity change from 128 to 0
[   98.369617][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.395311][ T5952] syz.0.1: attempt to access beyond end of device
[   98.395311][ T5952] loop0: rw=2049, sector=3, nr_sectors = 1 limit=0
[   98.395803][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.432072][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.452369][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.461265][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.462047][ T5952] Buffer I/O error on dev loop0, logical block 3, lost sync page write
[   98.470930][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.493992][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.508783][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.517753][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.573878][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.601985][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.844162][ T5838] syz-executor: attempt to access beyond end of device
[   98.844162][ T5838] loop0: rw=0, sector=3, nr_sectors = 1 limit=0
[   98.869472][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.905105][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.912489][ T5838] FAT-fs (loop0): Directory bread(block 3) failed
[   98.997897][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.058428][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.089514][ T3462] kworker/u8:7: attempt to access beyond end of device
[   99.089514][ T3462] loop0: rw=1, sector=40, nr_sectors = 1 limit=0
[   99.117265][ T3462] Buffer I/O error on dev loop0, logical block 40, lost async page write
[   99.161941][ T3462] kworker/u8:7: attempt to access beyond end of device
[   99.161941][ T3462] loop0: rw=1, sector=41, nr_sectors = 1 limit=0
[   99.175698][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.175724][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.224410][ T5959] loop5: detected capacity change from 0 to 2048
[   99.241342][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.246293][ T5959] EXT4-fs: Ignoring removed bh option
[   99.258623][ T3462] Buffer I/O error on dev loop0, logical block 41, lost async page write
[   99.286984][ T3462] kworker/u8:7: attempt to access beyond end of device
[   99.286984][ T3462] loop0: rw=1, sector=42, nr_sectors = 1 limit=0
[   99.300536][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.333422][ T3462] Buffer I/O error on dev loop0, logical block 42, lost async page write
[   99.351027][ T5959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.391786][ T3462] kworker/u8:7: attempt to access beyond end of device
[   99.391786][ T3462] loop0: rw=1, sector=43, nr_sectors = 1 limit=0
[   99.446314][ T3462] Buffer I/O error on dev loop0, logical block 43, lost async page write
[   99.473378][ T3462] kworker/u8:7: attempt to access beyond end of device
[   99.473378][ T3462] loop0: rw=1, sector=44, nr_sectors = 1 limit=0
[   99.521233][   T30] audit: type=1800 audit(1742857658.014:2): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6" name="file1" dev="loop5" ino=15 res=0 errno=0
[   99.545543][ T3462] Buffer I/O error on dev loop0, logical block 44, lost async page write
[   99.583755][ T3462] kworker/u8:7: attempt to access beyond end of device
[   99.583755][ T3462] loop0: rw=1, sector=45, nr_sectors = 1 limit=0
[   99.641791][ T3462] Buffer I/O error on dev loop0, logical block 45, lost async page write
[   99.675851][ T3462] kworker/u8:7: attempt to access beyond end of device
[   99.675851][ T3462] loop0: rw=1, sector=46, nr_sectors = 1 limit=0
[   99.691177][ T3462] Buffer I/O error on dev loop0, logical block 46, lost async page write
[   99.701217][ T3462] kworker/u8:7: attempt to access beyond end of device
[   99.701217][ T3462] loop0: rw=1, sector=48, nr_sectors = 1 limit=0
[   99.764760][ T3462] Buffer I/O error on dev loop0, logical block 48, lost async page write
[   99.784178][ T3462] Buffer I/O error on dev loop0, logical block 57, lost async page write
[   99.798859][ T3462] FAT-fs (loop0): unable to read inode block for updating (i_pos 61)
[   99.802102][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.840487][ T5969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10'.
[   99.862252][ T5838] FAT-fs (loop0): unable to read inode block for updating (i_pos 61)
[   99.912259][ T5838] FAT-fs (loop0): unable to read inode block for updating (i_pos 61)
[   99.932327][ T5838] FAT-fs (loop0): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck
[   99.956128][ T5969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10'.
[  100.168239][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.372848][ T5979] loop5: detected capacity change from 0 to 512
[  100.380455][ T5979] =======================================================
[  100.380455][ T5979] WARNING: The mand mount option has been deprecated and
[  100.380455][ T5979]          and is ignored by this kernel. Remove the mand
[  100.380455][ T5979]          option from the mount to silence this warning.
[  100.380455][ T5979] =======================================================
[  100.421247][ T5979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  100.441084][ T5979] EXT4-fs (loop5): orphan cleanup on readonly fs
[  100.451404][ T5979] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5
[  100.461386][ T5979] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  100.470918][ T5979] EXT4-fs error (device loop5): ext4_acquire_dquot:6925: comm syz.5.11: Failed to acquire dquot type 1
[  100.483557][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  100.496466][ T5979] EXT4-fs (loop5): 1 truncate cleaned up
[  100.547377][ T5979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  100.744310][    T9] usb 5-1: Using ep0 maxpacket: 32
[  100.756681][ T3462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.782319][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  100.817457][    T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  100.838758][    T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  100.867365][    T9] usb 5-1: Product: syz
[  100.884478][    T9] usb 5-1: Manufacturer: syz
[  100.910008][    T9] usb 5-1: SerialNumber: syz
[  100.930829][ T3462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.938684][    T9] usb 5-1: config 0 descriptor??
[  100.964255][ T5976] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  101.043074][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.283647][ T5971] loop1: detected capacity change from 0 to 32768
[  101.290888][ T3462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.488967][ T5897] usb 5-1: USB disconnect, device number 2
[  101.547429][ T5990] loop3: detected capacity change from 0 to 256
[  101.562816][ T5990] msdos: Bad value for 'gid'
[  101.574569][ T5990] msdos: Bad value for 'gid'
[  102.432729][ T5985] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.441773][ T5985] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.450556][ T5985] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.459970][ T5985] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.556447][ T5985] Zero length message leads to an empty skb
[  102.669450][ T5995] bridge0: port 3(vlan2) entered blocking state
[  102.677448][ T5995] bridge0: port 3(vlan2) entered disabled state
[  102.684181][ T5995] vlan2: entered allmulticast mode
[  102.696395][ T5995] vlan2: left allmulticast mode
[  102.757691][ T5971] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,journal_flush_disabled,fsck,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  102.800160][ T5971] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  102.847953][ T3462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.854179][ T5971] bcachefs (loop1): Version upgrade required:
[  102.854179][ T5971] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  102.854179][ T5971] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  102.854179][ T5971]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  102.986046][ T5971] bcachefs (loop1): dropping and reconstructing all alloc info
[  102.994336][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  103.025500][ T6009] loop2: detected capacity change from 0 to 128
[  103.036402][ T5971] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  103.049505][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  103.057364][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  103.066384][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  103.074392][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  103.082651][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  103.156529][ T5971] bcachefs (loop1): bch2_fs_recovery(): error EINTR
[  103.219411][ T5971] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR
[  103.261987][ T5971] bcachefs (loop1): shutting down
[  103.402197][ T5971] bcachefs (loop1): shutdown complete
[  103.419684][ T6016] netlink: 'syz.3.19': attribute type 10 has an invalid length.
[  103.470038][ T6016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19'.
[  103.492417][ T6019] block nbd5: Device being setup by another task
[  103.535166][ T6016] batman_adv: batadv0: Adding interface: virt_wifi0
[  103.579998][ T5142] block nbd5: Receive control failed (result -32)
[  103.602532][ T6016] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.668235][ T6014] block nbd5: shutting down sockets
[  103.689522][ T6016] batman_adv: batadv0: Interface activated: virt_wifi0
[  103.763895][ T6012] dccp_close: ABORT with 100 bytes unread
[  103.782953][ T3462] bridge_slave_1: left allmulticast mode
[  103.802010][ T3462] bridge_slave_1: left promiscuous mode
[  103.808740][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.948252][ T3462] bridge_slave_0: left allmulticast mode
[  104.002494][ T3462] bridge_slave_0: left promiscuous mode
[  104.008329][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.151181][ T6032] loop2: detected capacity change from 0 to 2048
[  104.182969][ T6032] EXT4-fs: Ignoring removed bh option
[  104.237220][ T6032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.172741][ T6037] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  105.196654][ T5142] Bluetooth: hci1: command tx timeout
[  105.665466][ T5997] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  105.698261][ T5997] EXT4-fs (loop2): This should not happen!! Data will be lost
[  105.698261][ T5997] 
[  105.709220][ T5997] EXT4-fs (loop2): Total free blocks count 0
[  105.715402][ T5997] EXT4-fs (loop2): Free/Dirty block details
[  105.721624][ T5997] EXT4-fs (loop2): free_blocks=2415919104
[  105.731334][ T5997] EXT4-fs (loop2): dirty_blocks=2528
[  105.737096][ T5997] EXT4-fs (loop2): Block reservation details
[  105.743389][ T5997] EXT4-fs (loop2): i_reserved_data_blocks=158
[  105.763705][ T6052] loop4: detected capacity change from 0 to 512
[  105.775223][ T5997] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  105.863309][ T6052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.891122][ T6052] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  106.076312][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.192576][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.238953][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.248014][ T3071] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  106.265179][ T3462] bond0 (unregistering): Released all slaves
[  106.347607][ T6058] 8021q: VLANs not supported on vcan0
[  106.491874][ T3071] usb 3-1: device descriptor read/64, error -71
[  106.670815][   T30] audit: type=1326 audit(1742857665.164:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5602f8d169 code=0x7ffc0000
[  106.733504][ T6068] loop5: detected capacity change from 0 to 512
[  106.778015][ T3071] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  106.794129][ T6068] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  106.814080][ T6068] EXT4-fs (loop5): orphan cleanup on readonly fs
[  106.827329][   T30] audit: type=1326 audit(1742857665.234:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5602f8d169 code=0x7ffc0000
[  106.851289][ T6068] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  106.915804][ T6068] EXT4-fs warning (device loop5): ext4_enable_quotas:7141: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  106.915919][ T6074] loop4: detected capacity change from 0 to 128
[  106.950967][   T30] audit: type=1326 audit(1742857665.234:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5602f8d169 code=0x7ffc0000
[  106.982600][ T3071] usb 3-1: device descriptor read/64, error -71
[  106.986887][ T5971] bcachefs: bch2_fs_get_tree() error: EINTR
[  107.035215][   T30] audit: type=1326 audit(1742857665.234:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5602f8d169 code=0x7ffc0000
[  107.036375][ T6068] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  107.093267][ T3071] usb usb3-port1: attempt power cycle
[  107.163181][ T6068] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.33: bg 0: block 40: padding at end of block bitmap is not set
[  107.228214][ T6068] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  107.254698][ T5142] Bluetooth: hci1: command tx timeout
[  107.298067][ T6068] EXT4-fs (loop5): 1 truncate cleaned up
[  107.346134][ T6068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  107.470463][   T30] audit: type=1326 audit(1742857665.964:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f5602f8d169 code=0x7ffc0000
[  107.512630][ T3071] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  107.564996][ T3071] usb 3-1: device descriptor read/8, error -71
[  107.581453][   T30] audit: type=1326 audit(1742857665.964:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5602f8d169 code=0x7ffc0000
[  107.688464][   T30] audit: type=1326 audit(1742857665.964:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5602f8d169 code=0x7ffc0000
[  107.712994][   T30] audit: type=1326 audit(1742857665.994:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5602f8d169 code=0x7ffc0000
[  107.744809][ T6006] chnl_net:caif_netlink_parms(): no params data found
[  107.761569][   T30] audit: type=1326 audit(1742857665.994:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.5.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5602f8d169 code=0x7ffc0000
[  107.793439][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.109163][ T3071] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  108.132809][ T3071] usb 3-1: device descriptor read/8, error -71
[  108.160044][ T6086] netlink: 132 bytes leftover after parsing attributes in process `syz.1.36'.
[  108.328807][ T3071] usb usb3-port1: unable to enumerate USB device
[  109.209754][ T6096] ax25_connect(): syz.5.38 uses autobind, please contact jreuter@yaina.de
[  109.230462][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.279877][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.322011][ T6006] bridge_slave_0: entered allmulticast mode
[  109.333221][ T5142] Bluetooth: hci1: command tx timeout
[  109.352975][ T6006] bridge_slave_0: entered promiscuous mode
[  109.377574][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.399744][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.420149][ T6006] bridge_slave_1: entered allmulticast mode
[  109.436454][ T6006] bridge_slave_1: entered promiscuous mode
[  109.951173][ T6107] loop1: detected capacity change from 0 to 8
[  110.017591][ T3462] hsr_slave_0: left promiscuous mode
[  110.768562][ T3462] hsr_slave_1: left promiscuous mode
[  110.847452][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.430041][ T5142] Bluetooth: hci1: command tx timeout
[  111.441889][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.473587][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.481027][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.505147][ T6107] SQUASHFS error: xz decompression failed, data probably corrupt
[  111.524586][ T6107] SQUASHFS error: Failed to read block 0x60: -5
[  111.544862][ T3462] veth1_macvtap: left promiscuous mode
[  111.567109][ T3462] veth0_macvtap: left promiscuous mode
[  111.602595][ T6107] SQUASHFS error: xz decompression failed, data probably corrupt
[  111.610378][ T6107] SQUASHFS error: Failed to read block 0x60: -5
[  111.616955][ T3462] veth1_vlan: left promiscuous mode
[  111.631997][ T3462] veth0_vlan: left promiscuous mode
[  112.139779][ T6130] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET)
[  112.184185][ T6130] netlink: 'syz.2.50': attribute type 11 has an invalid length.
[  112.241917][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'.
[  112.457768][ T6135] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.186547][ T6143] ax25_connect(): syz.1.55 uses autobind, please contact jreuter@yaina.de
[  114.263606][ T3462] team0 (unregistering): Port device team_slave_1 removed
[  114.316967][ T3462] team0 (unregistering): Port device team_slave_0 removed
[  114.873929][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.024538][ T6120] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.058113][ T6123] lo speed is unknown, defaulting to 1000
[  115.179464][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.198798][ T6151] loop3: detected capacity change from 0 to 2048
[  115.397690][ T6151] Alternate GPT is invalid, using primary GPT.
[  115.412725][ T6151]  loop3: p1 p2 p3
[  115.583577][ T6123] lo speed is unknown, defaulting to 1000
[  116.668783][ T6120] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.677624][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  116.677647][   T30] audit: type=1326 audit(1742857675.174:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20318d169 code=0x7ffc0000
[  116.746893][ T6172] loop3: detected capacity change from 0 to 8
[  116.836859][ T6176] 9pnet_fd: Insufficient options for proto=fd
[  116.911985][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  116.913045][ T6123] lo speed is unknown, defaulting to 1000
[  116.965378][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  117.042397][   T30] audit: type=1326 audit(1742857675.174:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20318d169 code=0x7ffc0000
[  117.465839][ T6120] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.476597][   T30] audit: type=1326 audit(1742857675.214:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff20318d169 code=0x7ffc0000
[  117.514434][ T6172] SQUASHFS error: xz decompression failed, data probably corrupt
[  117.530527][ T6006] team0: Port device team_slave_0 added
[  117.582450][   T30] audit: type=1326 audit(1742857675.214:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20318d169 code=0x7ffc0000
[  117.615105][ T6172] SQUASHFS error: Failed to read block 0x60: -5
[  117.650708][ T6172] SQUASHFS error: xz decompression failed, data probably corrupt
[  117.658655][   T30] audit: type=1326 audit(1742857675.214:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20318d169 code=0x7ffc0000
[  117.731936][ T6172] SQUASHFS error: Failed to read block 0x60: -5
[  117.770812][ T6120] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.793652][   T30] audit: type=1326 audit(1742857675.214:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff20318d169 code=0x7ffc0000
[  117.897118][ T6006] team0: Port device team_slave_1 added
[  117.919725][ T6123] infiniband s
z1: set active
[  117.943676][   T30] audit: type=1326 audit(1742857675.214:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20318d169 code=0x7ffc0000
[  117.998798][ T6123] infiniband s
z1: added lo
[  118.015051][ T6123] s
z1: rxe_create_cq: returned err = -12
[  118.021097][ T6123] infiniband s
z1: Couldn't create ib_mad CQ
[  118.048751][   T30] audit: type=1326 audit(1742857675.214:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20318d169 code=0x7ffc0000
[  118.078275][    T9] lo speed is unknown, defaulting to 1000
[  118.102412][ T6123] infiniband s
z1: Couldn't open port 1
[  118.134007][   T30] audit: type=1326 audit(1742857675.224:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff20318d169 code=0x7ffc0000
[  118.180870][ T6123] RDS/IB: s
z1: added
[  118.193192][ T6123] smc: adding ib device s
z1 with port count 1
[  118.201257][ T6123] smc:    ib device s
z1 port 1 has pnetid 
[  118.210409][ T6185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.220920][   T30] audit: type=1326 audit(1742857675.224:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20318d169 code=0x7ffc0000
[  118.248424][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.248719][ T6186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.273781][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.370140][ T6188] netlink: 'syz.1.69': attribute type 11 has an invalid length.
[  118.379878][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.404201][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.411302][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.445864][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.519462][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'.
[  118.708416][ T3071] lo speed is unknown, defaulting to 1000
[  118.722666][ T6123] lo speed is unknown, defaulting to 1000
[  119.903853][ T6006] hsr_slave_0: entered promiscuous mode
[  119.910601][ T6006] hsr_slave_1: entered promiscuous mode
[  119.933860][ T6120] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.961224][ T6120] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.993012][ T6123] lo speed is unknown, defaulting to 1000
[  120.005761][ T6120] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.287217][ T6120] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.316060][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.324827][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.481167][ T6123] lo speed is unknown, defaulting to 1000
[  120.856582][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  120.970621][ T6223] 9pnet_fd: Insufficient options for proto=fd
[  121.592758][ T6006] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  121.713935][ T6006] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  121.761855][ T6123] lo speed is unknown, defaulting to 1000
[  121.770501][ T6006] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  121.924837][ T6006] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  121.985208][ T6229] fuse: Bad value for 'fd'
[  122.317464][ T6232] bridge0: port 3(vlan2) entered blocking state
[  122.324240][ T6232] bridge0: port 3(vlan2) entered disabled state
[  122.331715][ T6232] vlan2: entered allmulticast mode
[  122.939990][ T6232] vlan2: left allmulticast mode
[  123.101923][ T6123] lo speed is unknown, defaulting to 1000
[  123.256632][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.284547][ T6006] 8021q: adding VLAN 0 to HW filter on device team0
[  123.325160][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.332334][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.385364][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.392538][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.478160][ T6123] lo speed is unknown, defaulting to 1000
[  124.738416][ T6252] loop3: detected capacity change from 0 to 512
[  124.877332][ T6252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.955607][ T6252] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.032125][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  125.397213][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.413759][ T5850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.468089][ T6123] lo speed is unknown, defaulting to 1000
[  125.525374][ T6273] loop2: detected capacity change from 0 to 512
[  125.672911][ T6273] EXT4-fs (loop2): too many log groups per flexible block group
[  125.680811][ T6273] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  125.688941][ T6278] loop4: detected capacity change from 0 to 512
[  125.733007][ T6273] EXT4-fs (loop2): mount failed
[  125.825335][ T6278] EXT4-fs (loop4): orphan cleanup on readonly fs
[  125.872064][ T6278] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  125.928037][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  125.938697][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  125.947225][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  125.955578][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  125.963663][ T5841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  125.971008][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  126.153064][ T6278] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  126.288681][ T6293] 9pnet_fd: Insufficient options for proto=fd
[  127.013365][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  127.022393][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  127.034106][ T6278] EXT4-fs error (device loop4): ext4_clear_blocks:874: inode #13: comm syz.4.88: attempt to clear invalid blocks 2 len 1
[  127.047118][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  127.056485][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  127.113500][ T6278] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.88: invalid indirect mapped block 1819239214 (level 0)
[  127.199061][ T6278] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.88: invalid indirect mapped block 1819239214 (level 1)
[  127.210709][ T6290] lo speed is unknown, defaulting to 1000
[  127.293104][ T6302] fuse: Bad value for 'fd'
[  127.416519][ T6278] EXT4-fs (loop4): 1 truncate cleaned up
[  127.450528][ T6278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  127.623014][ T6308] loop2: detected capacity change from 0 to 512
[  127.661856][ T6308] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  127.727930][ T6308] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  127.789665][ T6006] veth0_vlan: entered promiscuous mode
[  127.816496][ T6308] EXT4-fs (loop2): 1 truncate cleaned up
[  127.880235][ T6308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.926856][ T6298] wg1 speed is unknown, defaulting to 1000
[  127.933448][ T6298] wg1 speed is unknown, defaulting to 1000
[  127.940969][ T6298] wg1 speed is unknown, defaulting to 1000
[  127.951612][ T6298] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  127.965137][ T6298] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  127.991972][ T6298] wg1 speed is unknown, defaulting to 1000
[  128.000216][ T6298] wg1 speed is unknown, defaulting to 1000
[  128.007619][ T6298] wg1 speed is unknown, defaulting to 1000
[  128.014951][ T6298] wg1 speed is unknown, defaulting to 1000
[  128.022261][ T6298] wg1 speed is unknown, defaulting to 1000
[  128.028746][ T6006] veth1_vlan: entered promiscuous mode
[  128.055508][ T5142] Bluetooth: hci6: command tx timeout
[  128.076337][ T6298] wg1 speed is unknown, defaulting to 1000
[  128.154621][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  128.154646][   T30] audit: type=1800 audit(1742857686.654:70): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.92" name="file1" dev="loop2" ino=15 res=0 errno=0
[  128.160561][ T6298] wg1 speed is unknown, defaulting to 1000
[  128.321151][ T6278] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  128.393666][ T6278] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.88: Abort forced by user
[  128.415845][ T6278] EXT4-fs (loop4): Remounting filesystem read-only
[  128.429055][ T6278] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  128.510074][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.902127][ T6331] netlink: 'syz.3.97': attribute type 10 has an invalid length.
[  128.969720][ T6331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.97'.
[  129.089996][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.137923][ T6331] batadv0: entered promiscuous mode
[  129.144734][ T6331] batadv0: entered allmulticast mode
[  129.268980][ T6331] bridge0: port 3(batadv0) entered blocking state
[  129.943470][ T6331] bridge0: port 3(batadv0) entered disabled state
[  129.983635][ T3542] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  129.993339][ T3542] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  130.018389][ T6331] bridge0: port 3(batadv0) entered blocking state
[  130.025640][ T6331] bridge0: port 3(batadv0) entered forwarding state
[  130.082318][ T6333] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.108468][ T6333] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.131551][ T6333] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.141781][ T5142] Bluetooth: hci6: command tx timeout
[  130.154745][ T6333] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.162390][   T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  130.190156][ T6333] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  130.201767][ T6333] batman_adv: batadv0: Removing interface: virt_wifi0
[  130.282874][ T6333] bridge0: port 3(batadv0) entered disabled state
[  130.317411][ T6333] bridge0: port 3(batadv0) entered disabled state
[  130.330704][ T6006] veth0_macvtap: entered promiscuous mode
[  130.345572][   T26] usb 2-1: Using ep0 maxpacket: 32
[  130.364187][ T6006] veth1_macvtap: entered promiscuous mode
[  130.402804][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.424080][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.434656][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.445983][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.456549][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.472866][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.485564][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.496942][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.511452][   T26] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  130.525850][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.530551][   T26] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  130.551712][   T26] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  130.570414][   T26] usb 2-1: Product: syz
[  130.591819][   T26] usb 2-1: Manufacturer: syz
[  130.596485][   T26] usb 2-1: SerialNumber: syz
[  130.617191][ T6290] chnl_net:caif_netlink_parms(): no params data found
[  130.626118][   T26] usb 2-1: config 0 descriptor??
[  130.632114][ T6340] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  130.664594][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.699606][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.713519][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.729433][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.758078][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.797296][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.811767][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.831695][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.853123][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.874705][ T6006] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.884347][ T6006] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.894987][ T6006] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.918079][ T6006] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.212379][ T5142] Bluetooth: hci6: command tx timeout
[  132.310959][ T6360] 9pnet_fd: Insufficient options for proto=fd
[  132.991261][ T6364] loop3: detected capacity change from 0 to 512
[  133.026435][ T6364] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  133.036481][ T5897] usb 2-1: USB disconnect, device number 2
[  133.113686][ T6364] block device autoloading is deprecated and will be removed.
[  133.140081][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.153303][ T6364] bio_check_eod: 92 callbacks suppressed
[  133.153328][ T6364] syz.3.104: attempt to access beyond end of device
[  133.153328][ T6364] md185: rw=0, sector=2, nr_sectors = 2 limit=0
[  133.196505][ T6364] EXT4-fs (loop3): couldn't read superblock of external journal
[  133.307146][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.339346][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.366638][ T6290] bridge_slave_0: entered allmulticast mode
[  133.388897][ T6290] bridge_slave_0: entered promiscuous mode
[  133.583021][ T6371] loop1: detected capacity change from 0 to 256
[  134.379776][ T5142] Bluetooth: hci6: command tx timeout
[  134.422119][ T6371] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  134.461465][ T6371] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  134.477794][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.535067][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.609103][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.626884][ T6290] bridge_slave_1: entered allmulticast mode
[  134.653997][ T6290] bridge_slave_1: entered promiscuous mode
[  135.328037][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.155623][ T6395] loop3: detected capacity change from 0 to 512
[  136.182739][ T6395] EXT4-fs: Ignoring removed oldalloc option
[  136.222306][ T6395] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  136.269886][ T6395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[  136.282080][ T6290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.292113][ T6395] System zones: 1-12
[  136.346556][ T6395] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  136.392653][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.401586][ T6395] EXT4-fs (loop3): 1 truncate cleaned up
[  136.419177][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.445481][ T6395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.556930][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.576963][ T6395] loop3: detected capacity change from 512 to 64
[  136.615199][ T6290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.647025][ T6395] syz.3.112: attempt to access beyond end of device
[  136.647025][ T6395] loop3: rw=2049, sector=70, nr_sectors = 2 limit=64
[  136.661098][ T6395] EXT4-fs warning (device loop3): ext4_end_bio:342: I/O error 10 writing to inode 15 starting block 35)
[  136.687706][ T6395] Buffer I/O error on device loop3, logical block 35
[  136.703829][ T6395] syz.3.112: attempt to access beyond end of device
[  136.703829][ T6395] loop3: rw=2049, sector=510, nr_sectors = 2 limit=64
[  136.726321][ T6395] EXT4-fs warning (device loop3): ext4_end_bio:342: I/O error 10 writing to inode 15 starting block 255)
[  136.765620][ T6395] Buffer I/O error on device loop3, logical block 255
[  136.779973][ T6405] syz.3.112: attempt to access beyond end of device
[  136.779973][ T6405] loop3: rw=2049, sector=70, nr_sectors = 2 limit=64
[  136.803093][ T6395] syz.3.112: attempt to access beyond end of device
[  136.803093][ T6395] loop3: rw=2049, sector=506, nr_sectors = 4 limit=64
[  136.824995][ T6405] EXT4-fs warning (device loop3): ext4_end_bio:342: I/O error 10 writing to inode 15 starting block 35)
[  136.848255][ T6395] EXT4-fs warning (device loop3): ext4_end_bio:342: I/O error 10 writing to inode 15 starting block 253)
[  136.873027][ T6405] Buffer I/O error on device loop3, logical block 35
[  136.880415][ T6395] Buffer I/O error on device loop3, logical block 253
[  136.887222][ T6395] Buffer I/O error on device loop3, logical block 254
[  136.915194][ T6395] syz.3.112: attempt to access beyond end of device
[  136.915194][ T6395] loop3: rw=2049, sector=74, nr_sectors = 8 limit=64
[  136.932097][ T6395] EXT4-fs warning (device loop3): ext4_end_bio:342: I/O error 10 writing to inode 15 starting block 37)
[  136.947120][ T6395] Buffer I/O error on device loop3, logical block 37
[  136.953847][ T6395] Buffer I/O error on device loop3, logical block 38
[  136.963200][ T6395] Buffer I/O error on device loop3, logical block 39
[  136.969920][ T6395] Buffer I/O error on device loop3, logical block 40
[  137.125986][ T6411] mmap: syz.4.115 (6411) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  137.692711][ T6395] syz.3.112: attempt to access beyond end of device
[  137.692711][ T6395] loop3: rw=2049, sector=498, nr_sectors = 4 limit=64
[  137.726807][ T6395] EXT4-fs warning (device loop3): ext4_end_bio:342: I/O error 10 writing to inode 15 starting block 249)
[  137.751775][ T6395] Buffer I/O error on device loop3, logical block 249
[  137.846183][ T6413] loop2: detected capacity change from 0 to 256
[  137.868667][ T6413] msdos: Bad value for 'gid'
[  137.882551][ T6413] msdos: Bad value for 'gid'
[  137.990928][ T5850] ------------[ cut here ]------------
[  137.997058][ T5850] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29)
[  138.024620][ T5850] WARNING: CPU: 0 PID: 5850 at ./include/linux/fs.h:802 __ext4_iget+0x3aa2/0x4310
[  138.026414][ T6290] team0: Port device team_slave_0 added
[  138.034374][ T5850] Modules linked in:
[  138.053568][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.14.0-syzkaller #0
[  138.062764][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  138.073331][ T5850] RIP: 0010:__ext4_iget+0x3aa2/0x4310
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  138.078942][ T5850] Code: e8 63 07 49 ff c6 05 38 27 da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 40 5b 85 8b 48 8b b5 f8 fe ff ff e8 3f 38 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 d0 45 ab ff e9 f6 e6 ff ff e8 a6 44
[  138.098722][ T5850] RSP: 0018:ffffc90003737810 EFLAGS: 00010286
[  138.105244][ T5850] RAX: 0000000000000000 RBX: ffff88806b716fb4 RCX: ffffffff817a2269
[  138.113388][ T5850] RDX: ffff888064c33c00 RSI: ffffffff817a2276 RDI: 0000000000000001
[  138.121391][ T5850] RBP: ffffc90003737960 R08: 0000000000000001 R09: 0000000000000000
[  138.129481][ T5850] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001d
[  138.137618][ T5850] R13: 0000000000000000 R14: 0000000000002000 R15: ffff88806b716fa8
[  138.145971][ T5850] FS:  0000555560bee500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  138.155065][ T5850] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.161721][ T5850] CR2: 00002000000000c0 CR3: 000000005d2b6000 CR4: 0000000000350ef0
[  138.170063][ T5850] Call Trace:
[  138.173838][ T5850]  <TASK>
[  138.176792][ T5850]  ? __warn+0xea/0x3c0
[  138.180913][ T5850]  ? __ext4_iget+0x3aa2/0x4310
[  138.185865][ T5850]  ? report_bug+0x3c0/0x580
[  138.190436][ T5850]  ? handle_bug+0x54/0xa0
[  138.194867][ T5850]  ? exc_invalid_op+0x17/0x50
[  138.199594][ T5850]  ? asm_exc_invalid_op+0x1a/0x20
[  138.204791][ T5850]  ? __warn_printk+0x199/0x350
[  138.209605][ T5850]  ? __warn_printk+0x1a6/0x350
[  138.215101][ T5850]  ? __ext4_iget+0x3aa2/0x4310
[  138.219920][ T5850]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  138.225431][ T5850]  ? __pfx___ext4_iget+0x10/0x10
[  138.230429][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.237067][ T5850]  ? kfree+0x260/0x4d0
[  138.241212][ T5850]  ext4_lookup+0x37e/0x730
[  138.245735][ T5850]  ? __pfx_ext4_lookup+0x10/0x10
[  138.250742][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.256520][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.262260][ T5850]  __lookup_slow+0x252/0x470
[  138.267206][ T5850]  ? __pfx___lookup_slow+0x10/0x10
[  138.272841][ T5850]  ? walk_component+0x342/0x5b0
[  138.277764][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.283641][ T5850]  ? lookup_fast+0x153/0x5f0
[  138.288339][ T5850]  walk_component+0x350/0x5b0
[  138.296792][ T5850]  path_lookupat+0x17f/0x770
[  138.301444][ T5850]  filename_lookup+0x221/0x5f0
[  138.307312][ T5850]  ? __pfx_filename_lookup+0x10/0x10
[  138.312736][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.318469][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.324254][ T5850]  ? getname_flags.part.0+0x1c5/0x550
[  138.329685][ T5850]  user_path_at+0x3a/0x60
[  138.334154][ T5850]  __x64_sys_umount+0x10b/0x1a0
[  138.339070][ T5850]  ? __pfx___x64_sys_umount+0x10/0x10
[  138.344572][ T5850]  do_syscall_64+0xcd/0x250
[  138.349148][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.352450][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  138.355136][ T5850] RIP: 0033:0x7f4537d8e497
[  138.361865][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  138.366114][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  138.392785][ T5850] RSP: 002b:00007ffe6bae3448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  138.401239][ T5850] RAX: ffffffffffffffda RBX: 00007f4537e0e08c RCX: 00007f4537d8e497
[  138.409281][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6bae3500
[  138.417339][ T5850] RBP: 00007ffe6bae3500 R08: 0000000000000000 R09: 0000000000000000
[  138.425408][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6bae45f0
[  138.433491][ T5850] R13: 00007f4537e0e08c R14: 00000000000219de R15: 00007ffe6bae67b0
[  138.441542][ T5850]  </TASK>
[  138.444671][ T5850] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  138.451976][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.14.0-syzkaller #0
[  138.460775][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  138.470860][ T5850] Call Trace:
[  138.474160][ T5850]  <TASK>
[  138.477112][ T5850]  dump_stack_lvl+0x3d/0x1f0
[  138.481770][ T5850]  panic+0x71d/0x800
[  138.485712][ T5850]  ? __pfx_panic+0x10/0x10
[  138.490161][ T5850]  ? show_trace_log_lvl+0x29d/0x3d0
[  138.495415][ T5850]  ? check_panic_on_warn+0x1f/0xb0
[  138.500565][ T5850]  ? __ext4_iget+0x3aa2/0x4310
[  138.505368][ T5850]  check_panic_on_warn+0xab/0xb0
[  138.510339][ T5850]  __warn+0xf6/0x3c0
[  138.514261][ T5850]  ? __ext4_iget+0x3aa2/0x4310
[  138.519060][ T5850]  report_bug+0x3c0/0x580
[  138.523433][ T5850]  handle_bug+0x54/0xa0
[  138.527609][ T5850]  exc_invalid_op+0x17/0x50
[  138.532141][ T5850]  asm_exc_invalid_op+0x1a/0x20
[  138.537035][ T5850] RIP: 0010:__ext4_iget+0x3aa2/0x4310
[  138.542444][ T5850] Code: e8 63 07 49 ff c6 05 38 27 da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 40 5b 85 8b 48 8b b5 f8 fe ff ff e8 3f 38 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 d0 45 ab ff e9 f6 e6 ff ff e8 a6 44
[  138.562077][ T5850] RSP: 0018:ffffc90003737810 EFLAGS: 00010286
[  138.568170][ T5850] RAX: 0000000000000000 RBX: ffff88806b716fb4 RCX: ffffffff817a2269
[  138.576158][ T5850] RDX: ffff888064c33c00 RSI: ffffffff817a2276 RDI: 0000000000000001
[  138.584145][ T5850] RBP: ffffc90003737960 R08: 0000000000000001 R09: 0000000000000000
[  138.592128][ T5850] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001d
[  138.600108][ T5850] R13: 0000000000000000 R14: 0000000000002000 R15: ffff88806b716fa8
[  138.608102][ T5850]  ? __warn_printk+0x199/0x350
[  138.612895][ T5850]  ? __warn_printk+0x1a6/0x350
[  138.617690][ T5850]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  138.623098][ T5850]  ? __pfx___ext4_iget+0x10/0x10
[  138.628072][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.633755][ T5850]  ? kfree+0x260/0x4d0
[  138.637874][ T5850]  ext4_lookup+0x37e/0x730
[  138.642334][ T5850]  ? __pfx_ext4_lookup+0x10/0x10
[  138.647324][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.653040][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.658725][ T5850]  __lookup_slow+0x252/0x470
[  138.663349][ T5850]  ? __pfx___lookup_slow+0x10/0x10
[  138.668498][ T5850]  ? walk_component+0x342/0x5b0
[  138.673403][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.679086][ T5850]  ? lookup_fast+0x153/0x5f0
[  138.683719][ T5850]  walk_component+0x350/0x5b0
[  138.688435][ T5850]  path_lookupat+0x17f/0x770
[  138.693065][ T5850]  filename_lookup+0x221/0x5f0
[  138.697870][ T5850]  ? __pfx_filename_lookup+0x10/0x10
[  138.703190][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.708901][ T5850]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.714578][ T5850]  ? getname_flags.part.0+0x1c5/0x550
[  138.719984][ T5850]  user_path_at+0x3a/0x60
[  138.724352][ T5850]  __x64_sys_umount+0x10b/0x1a0
[  138.729244][ T5850]  ? __pfx___x64_sys_umount+0x10/0x10
[  138.734665][ T5850]  do_syscall_64+0xcd/0x250
[  138.739213][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.745143][ T5850] RIP: 0033:0x7f4537d8e497
[  138.749572][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  138.769199][ T5850] RSP: 002b:00007ffe6bae3448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  138.777643][ T5850] RAX: ffffffffffffffda RBX: 00007f4537e0e08c RCX: 00007f4537d8e497
[  138.785635][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6bae3500
[  138.793620][ T5850] RBP: 00007ffe6bae3500 R08: 0000000000000000 R09: 0000000000000000
[  138.801601][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6bae45f0
[  138.809588][ T5850] R13: 00007f4537e0e08c R14: 00000000000219de R15: 00007ffe6bae67b0
[  138.817600][ T5850]  </TASK>
[  138.820980][ T5850] Kernel Offset: disabled
[  138.825400][ T5850] Rebooting in 86400 seconds..