last executing test programs:

31m29.478153875s ago: executing program 1 (id=168):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
unshare(0x22020400)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='befs\x00', 0x4015, 0x0)
sendto$inet6(r1, &(0x7f0000000280)=':', 0x1, 0x20008800, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x35)

31m27.540225412s ago: executing program 1 (id=172):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000001940)={0x1, 0xffffffffffffed75})

31m24.116941468s ago: executing program 1 (id=177):
r0 = socket(0x1, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7, 0x3, 0x13, @dev={0xfe, 0x80, '\x00', 0x30}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x80, 0x6, 0x3}})

31m22.831054573s ago: executing program 1 (id=179):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c75737271756f74612c696f636861727365743d61736369692c6572726f72733d72656d6f756e742d726f2c6e6f696e746567726974792c6e6f71756f74612c6e6f64697363617264006e6f71756f74612c6e6f696e746567726573697a652c646973636172643d3078303030303030303030303030303433612c696f6368617273657423ad8ccfb725cd9fcaeb67a029573d6d6163726f6d616e69616e2c6e6f696e7465677269646973636172642c646f6e745f61707072616973652c646566636f6e746578743d73797361646d5f752c7375626a5f747970653d7b5b2c736d61636b66736465663d6e6f696e746565726974792c66756e633d43524544535f434c45434b2c61756469", @ANYRES8, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61e2, &(0x7f000000d7c0)="$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")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

31m20.858922392s ago: executing program 1 (id=190):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8ffff)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x100000})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

31m19.822773762s ago: executing program 1 (id=193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, &(0x7f0000000900)=[{&(0x7f00000001c0)}, {&(0x7f0000000980)=""/258, 0x102}, {0x0}, {0x0}], 0x4, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
write(r6, 0x0, 0x0)
timer_create(0x9, 0x0, &(0x7f0000bbdffc))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x3f8, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180), 0xff, 0x23f, &(0x7f0000000540)="$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")
creat(0x0, 0x0)
symlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000840)=0xe8)

31m19.262900013s ago: executing program 32 (id=193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, &(0x7f0000000900)=[{&(0x7f00000001c0)}, {&(0x7f0000000980)=""/258, 0x102}, {0x0}, {0x0}], 0x4, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
write(r6, 0x0, 0x0)
timer_create(0x9, 0x0, &(0x7f0000bbdffc))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x3f8, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=")
creat(0x0, 0x0)
symlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000840)=0xe8)

20m44.318741607s ago: executing program 0 (id=1430):
r0 = socket(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2$watch_queue(0x0, 0x80)
mkdir(0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000140)={0x2, @win={{0x7, 0x3, 0x0, 0x200}, 0x1, 0x800, 0x0, 0x6, 0x0, 0x4}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, 0x0, 0x4000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x60}}, 0x0)
r8 = msgget(0x0, 0x400)
msgctl$IPC_SET(r8, 0x1, &(0x7f0000000480)={{0x3, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x11, 0x2}, 0x0, 0x0, 0x7, 0x2, 0x80, 0x640, 0x7d4, 0x654f, 0x2, 0x7, r2, r2})
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000001c0)='./file0\x00')

20m41.677266418s ago: executing program 0 (id=1435):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

20m40.399073713s ago: executing program 0 (id=1436):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

20m38.727844575s ago: executing program 0 (id=1438):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x0, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x4000081, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00442dbd7000fddbdf25254de903"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001)
writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000300)="54db55318e", 0x5}], 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

20m37.121642796s ago: executing program 0 (id=1445):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet(0x2b, 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000740)={0x1, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x880, &(0x7f0000000800))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0xc000000, 0x0, 0x0, 0x12})
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc)
write$binfmt_misc(r8, &(0x7f0000000040)="60ff24", 0x3)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0xc, 0x40, 0xe0fd}, 0x9, 0x1, 0x0, 0xc, 0x0, 0x6}})
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x80440, &(0x7f0000000bc0)=ANY=[], 0x1, 0x601, &(0x7f0000000c00)="$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")
lremovexattr(&(0x7f0000000bc0)='./file1\x00', &(0x7f00000000c0)=@random={'security.', '{&^#\xdd\x00'})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'veth1_vlan\x00'}, 0x18)

20m31.522465864s ago: executing program 0 (id=1451):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='iocharset=macinuit,umask=00000000000000000000011,namecase=1,discard,allow_utime=00000000000000000051165,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$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")
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f00000001c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x6}, "ffb00afe4e70"}}}}}}}, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x8001, 0x4)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000340)=0xe)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0xff)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r8 = syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000000480)={[{@gid}, {@uid}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x4, 0x339, &(0x7f0000000140)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a6e43c, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES8=r8, @ANYBLOB="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", @ANYRESHEX, @ANYRESHEX=r8, @ANYRES64=r8, @ANYRESOCT=r8, @ANYRES64, @ANYRES8], 0x5, 0x0, &(0x7f0000000000))

20m16.118966401s ago: executing program 33 (id=1451):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='iocharset=macinuit,umask=00000000000000000000011,namecase=1,discard,allow_utime=00000000000000000051165,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$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")
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f00000001c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x6}, "ffb00afe4e70"}}}}}}}, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)=0x8001, 0x4)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000340)=0xe)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0xff)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r8 = syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000000480)={[{@gid}, {@uid}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x4, 0x339, &(0x7f0000000140)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a6e43c, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES8=r8, @ANYBLOB="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", @ANYRESHEX, @ANYRESHEX=r8, @ANYRES64=r8, @ANYRESOCT=r8, @ANYRES64, @ANYRES8], 0x5, 0x0, &(0x7f0000000000))

18m55.227628474s ago: executing program 6 (id=1597):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x21, 0x5586, &(0x7f00000079c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, 0x0, 0x13)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145442, 0x184)
ftruncate(r4, 0x2007ffc)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x24e5c3, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0xd})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)

18m51.385205589s ago: executing program 6 (id=1604):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

18m48.519309684s ago: executing program 6 (id=1610):
r0 = socket(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$eJzsmL9uE0EQxr/dO59tAgiaFDQURCIIYsfnJk0EQUKiQkgJ/yqwyBEFOzFyDolYQiiioYGOAomGghegiEQqCjpeIBIUgIQEEi4oaNIcmt31ee3D+HJJx/yK1bc7s7sz470pDIZh/lu+fvn9+en5mYUzAA5iAnmz/t0BhNBaWv6fXtw//Xz2wss3H1+/Xz38cGvwPNoSRf0LhX/c7wJ4N+fgUXxTvHuHxISZLECS/kH6CiROmfVrECgZfQsSV40OIHDD6LuWbpJ/qXRnuRGUbjcbiySmaajQ4NNQHYyvsyGwaOZR5EBY9rX1dr3WaAQtS7jG9hdTJhFfVh9P1C8HD505mUMcXxRRFa8/ebxB825tpnX9FBVIVEwSVQjMm/UZ5Lu10SWx8j/m9s53Evkns915q3zJMCrJghazv/alWCQ8aHF0Kts5k5TOuaTpCLLEg/5dOfRMVMn9SXno01HCHf0Wz5ofdHdXjNEDuJQ2i2dFAHvKK58qwt1m0SfGO1sfkqZvo7ZHYvQVIv37KaSNufshZq9qEe263EvFhgW2van7R/RK4KTVn1yrf5TDlXvltfX21PJKbSlYClZ9v5of0zbViMpqTPS9Xn8uqv50wDo/N8TXkx4e1MKwVdGjJzwUEYYtX81967OZ32z+vGm2hbgI4ISeUNv04hOdxB3C0z5S+ZKaTDoxDMMwDMMwDMMwDMMwDMNk4jiE+heU2D6EWA/gX1befwIAAP//gpVaLg==")
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2$watch_queue(0x0, 0x80)
mkdir(0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c1}, 0x800)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, 0x0, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x60}}, 0x0)
r7 = msgget(0x0, 0x400)
msgctl$IPC_SET(r7, 0x1, &(0x7f0000000480)={{0x3, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x11, 0x2}, 0x0, 0x0, 0x7, 0x2, 0x80, 0x640, 0x7d4, 0x654f, 0x2, 0x7, r1, r1})
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000001c0)='./file0\x00')

18m47.317328987s ago: executing program 6 (id=1613):
r0 = socket(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2$watch_queue(0x0, 0x80)
mkdir(0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, 0x0, 0x4000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x60}}, 0x0)
r8 = msgget(0x0, 0x400)
msgctl$IPC_SET(r8, 0x1, &(0x7f0000000480)={{0x3, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x11, 0x2}, 0x0, 0x0, 0x7, 0x2, 0x80, 0x640, 0x7d4, 0x654f, 0x2, 0x7, r2, r2})
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000001c0)='./file0\x00')

18m45.480210473s ago: executing program 6 (id=1618):
r0 = socket(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2$watch_queue(0x0, 0x80)
mkdir(0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000140)={0x2, @win={{0x7, 0x3, 0x0, 0x200}, 0x1, 0x800, 0x0, 0x6, 0x0, 0x4}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, 0x0, 0x4000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x60}}, 0x0)
r9 = msgget(0x0, 0x400)
msgctl$IPC_SET(r9, 0x1, &(0x7f0000000480)={{0x3, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x11, 0x2}, 0x0, 0x0, 0x7, 0x2, 0x80, 0x640, 0x7d4, 0x654f, 0x2, 0x7, r2, r2})
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000001c0)='./file0\x00')

18m43.738982076s ago: executing program 6 (id=1621):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000001dc0)='\n', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000500), &(0x7f00000003c0)=""/155}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d)

18m28.406138112s ago: executing program 34 (id=1621):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000001dc0)='\n', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000500), &(0x7f00000003c0)=""/155}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d)

18m1.541762442s ago: executing program 4 (id=1692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000f5ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=r1], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040))
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r3})

17m59.718482657s ago: executing program 4 (id=1694):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

17m57.354964283s ago: executing program 4 (id=1698):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000006c0), &(0x7f0000000100)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

17m56.213920425s ago: executing program 4 (id=1700):
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$dri(0x0, 0x3cdbfffffffff, 0x24000)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000080)={0x2, 0x0, 0xb0, 0xffffffff, 0x4, 0x6, 0x1, 0x7, 0x6})
r4 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x4)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x2, 0x0, 0x63)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x240400c0)
r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x8000002000000, 0x0)
read$msr(r5, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x200002)

17m53.062712955s ago: executing program 4 (id=1705):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

17m50.968261696s ago: executing program 4 (id=1708):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"})
unshare(0x4000280)
r6 = socket$kcm(0x10, 0x5, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}})
sendmsg$kcm(r6, 0x0, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

17m35.176747041s ago: executing program 35 (id=1708):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"})
unshare(0x4000280)
r6 = socket$kcm(0x10, 0x5, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}})
sendmsg$kcm(r6, 0x0, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

8m32.478835816s ago: executing program 5 (id=2649):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000001dc0)='\n', 0x1}], 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000500), &(0x7f00000003c0)=""/155}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, &(0x7f0000000480)=""/146}, 0x20)

8m29.439207055s ago: executing program 5 (id=2654):
r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
dup2(r0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")

39.254247203s ago: executing program 2 (id=3213):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x50)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x4000040)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

36.057141384s ago: executing program 2 (id=3218):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x8000002, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20, 0x4)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280)={0x80900, 0x84, 0x10}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r6, 0x0, r2}, 0x10)
fsopen(0x0, 0x0)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'veth1_to_hsr\x00', {0xf}})
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="63726561746f723df12db87f2c747970653ddeb4a1982c71756965742c71756965742c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c00db9f4170aa85ed4a81ea"], 0x0, 0x2b6, &(0x7f0000000580)="$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")

34.15712703s ago: executing program 2 (id=3220):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x48c, &(0x7f0000000a80)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x100, <r3=>0x0}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xbc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='xprt_ping\x00', r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
setpgid(r5, r0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_CREATE(r8, 0x5501)
ioctl$UI_DEV_DESTROY(r8, 0x5502)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)

23.275416141s ago: executing program 2 (id=3230):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x50)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x4000040)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

20.490188104s ago: executing program 2 (id=3233):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x50)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
socket$key(0xf, 0x3, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

20.395325406s ago: executing program 7 (id=3235):
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00', @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @pic={0x6, 0x6, 0x3, 0xa, 0x9, 0x81, 0x6, 0x9, 0xf, 0xa, 0x6a, 0x80, 0x0, 0x7, 0x9, 0xc}})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0xfff, 0x0, 0x180, 0x1e4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

17.857338585s ago: executing program 2 (id=3238):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6c)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000020c0)={&(0x7f0000002080)='rseq_ip_fixup\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002180)={0xffffffffffffffff, r2, 0x0, 0xc, &(0x7f0000002140)='/dev/uinput\x00'}, 0x30)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53})
munlockall()
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0)

17.5989616s ago: executing program 7 (id=3239):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x50)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

16.462952462s ago: executing program 8 (id=3240):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)

16.031985041s ago: executing program 3 (id=3241):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x8000002, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20, 0x4)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280)={0x80900, 0x84, 0x10}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r6, 0x0, r2}, 0x10)
fsopen(0x0, 0x0)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'veth1_to_hsr\x00', {0xf}})
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="63726561746f723df12db87f2c747970653ddeb4a1982c71756965742c71756965742c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c00db9f4170aa85ed4a81ea"], 0x0, 0x2b6, &(0x7f0000000580)="$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")

13.667503406s ago: executing program 7 (id=3242):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6c)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000020c0)={&(0x7f0000002080)='rseq_ip_fixup\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002180)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f0000002140)='/dev/uinput\x00'}, 0x30)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

13.405040491s ago: executing program 3 (id=3243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe1e, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0xffff, 0xe2}, 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
r4 = socket(0x2, 0x80805, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x2c)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$evdev(0x0, 0x40800400, 0x2b6a41)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}})
ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000))

13.391214061s ago: executing program 8 (id=3244):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x8000002, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20, 0x4)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280)={0x80900, 0x84, 0x10}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18)
mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r6, 0x0, r2}, 0x10)
fsopen(0x0, 0x0)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'veth1_to_hsr\x00', {0xf}})
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="63726561746f723df12db87f2c747970653ddeb4a1982c71756965742c71756965742c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c00db9f4170aa85ed4a81ea"], 0x0, 0x2b6, &(0x7f0000000580)="$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")

13.077470968s ago: executing program 7 (id=3245):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x50)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x4000040)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

11.754811223s ago: executing program 5 (id=2671):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x21, 0x5586, &(0x7f00000079c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, 0x0, 0x13)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145442, 0x184)
ftruncate(r4, 0x2007ffc)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0xd})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)

11.650791785s ago: executing program 8 (id=3246):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x50)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x4000040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

9.514969886s ago: executing program 3 (id=3247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe1e, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0xffff, 0xe2}, 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
r4 = socket(0x2, 0x80805, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x2c)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}})
ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000))

8.204892181s ago: executing program 7 (id=3248):
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x40142, 0x1)
r1 = socket(0x2c, 0x3, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x0, 0xd5, &(0x7f0000000340), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl2\x00', <r4=>0x0, 0x2f, 0x81, 0x8, 0x1, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x700, 0x3, 0x80000000}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000800)={0x150, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x64aaa1676c13893a}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x81)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', 0x0, 0x0, 0x0, 0x40000000}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38)
r7 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x27, 0x1, 0x1, "3a8e07000034b52ba75088c27891ca55e21f0000000000b2b679d200", 0x41414770})
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0)

8.164490533s ago: executing program 8 (id=3249):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

8.099013434s ago: executing program 5 (id=3250):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x8000002, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20, 0x4)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280)={0x80900, 0x84, 0x10}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18)
mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r6, 0x0, r2}, 0x10)
fsopen(0x0, 0x0)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'veth1_to_hsr\x00', {0xf}})
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="63726561746f723df12db87f2c747970653ddeb4a1982c71756965742c71756965742c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c00db9f4170aa85ed4a81ea"], 0x0, 0x2b6, &(0x7f0000000580)="$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")

6.981251715s ago: executing program 5 (id=3251):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000001c0)=0x2001)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000000))
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c76657273696f6e3d3970323030302e752c6e6f6465766d61702c63616f5d8e1d7c6368653d667363616368652c6d61736b3d5e4d41591f524541442c00"])
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b0400000000000000000200000008000b40000000020900010073797a30000000000900020073797a320000000038000000090a010100000000000000000500000821000d401a7a71d36aea029e020a593ce576b7c83c1a647de4e19d3d74112b1b6900000020000000180a05000000000000000000070000050900020073797a300000000020000000030a03000000000000000000050000040c0002400000000000000003b8000000020a010100000000000000000400000808000240000000030900010073797a31000000008d0006003106770ee0b2fb5fbd2965e7056b21cad937f47ec179a81970421e5e9bdf678f5d6c99bd8c9a2ffd75916fe0f6a8139136e3ec2ec1dfee226fad2653f72b56583c2b324d6838216a8c6e21684ec3bdaa48df5498467cb3979a1d5fd678999bb6a2c13c6b310e3ef5d0fe2473428442802c1dc24a0af0cd97c7f4e58cf7f6fdfbe1cfe88e8b3cb9ffb800000080000000140a01010000000000000000030000060900010073797a30000000000900010073797a310000000008000340000000083f000800385602b9e183447f6752a976402f98b8c0378c817049f220cb34a39476a4556513e069a9db41c7e3cab9a19633ef06368c31ddecac4dab220f9a47000c0006400000000000000004d4010000020a01080000000000000000070000039e000600479e8a1111c7a5cded9b12ef1cc7ca6b8bb137009cef5bdb8c1310aa3871c2420b272cb7ee87b17a31578a3890163377a7b50aff53925cf0a31dc181fe4bae51c1decd5553dd58eb6606653c69fe541928f533ffbba1a7203065a070391103606df09530cc22cca56300462880219c5f98f15f5e64c0b8d187fc7075ab66195fd46914934d445ead987a0276128ede56475d154bb9476e7f015a00000900010073797a30000000000900010073797a31000000008b000600f13245e8a474d520ca186b30fcfdb653d13dac14433a31f4a5ae434aac64579db01541d1ebb680817d55cf7db363579e4d589479713c946099213f478b6e1b8604518bb6865a3529520dc47653472b827cee77fc14a599923851f15438c2d7816911065a89589d8b292086794f52848958f62353c38bd0634cce5742dc472b70c44cd6e6712d33007a0006009b6160d9b9b733d2c65d7d26c1fd6f21aa94d062b1460d0fea43b45abfff22c49dfae4fee3a76e8a6a14929b9a08367e9cff5efcd44000d6ff5f752674365edb47ed75ea600fbecf4617b3569016110db22fbddde38883ec438b7ce2110109f678cf9abc8f4275f065bcebc453e22522c297aa998a6b00002c0000000e0a030000000000000000000a0000000900020073797a30000000000900020073797a320000000040000000140a05000000000000000000010000010900020073797a32000000000900010073797a310000000008000340000000000900020073797a3100000000a4000000090a05000000000000000000000000050900020073797a3000000000100011800b0001006c6f6f6b7570000074000d40abb0ee6c7ef5d2fcc841331d3d2bef2a125afa180141397aa5edfe56c5b738c536f49aed2b819311886f4ada05aaf4d32ba15a57ea5921e70a0421ca0590fff74d8eac99fc557bff8cecbed68c17abc84f321fc16bb081f775954a8e4737cfbf164c2803b64efcd7ef67b5667f7e8b1e5c010000000a05000000000000000000020000060c00044000000000000000030800024000000001b5000600bc9debd9df552ed7827820bd67cea66f8a9882aa71cbc71f6c79e0f0284f424a4876d93a7d10b99057375313365f7afb44bc0a6a625d8cd2ae86f4f1e33bc516285de9fc7b5ce47d443df27cf7c703f94bdca4bc5f525ca4983bec46712780bbd70772e106c10b7f62046e9f9df63e2166d073623070e9d3c54fb02c98d16a95bf689b4fee5ab1238081061409845b1743ef4c902ac33f39460a65d09bcc57f322f0e7d03aed8f3b4b751fccdca23417970000006d000600dcf54edf70482f833aff8cda02820e3908c3d3bcc0ba53930eb631447ff81948d9c606cc0217c658374252a97dd1576b2c4222a265c3a096df509a4434a56df39d595dc1050a40b41b3f7f33d57fb6001295a2f1af8a212fa5fc9ec1d83fcb554bb8d6fc04554391d0000000090001"], 0x734}}, 0x0)

6.871165927s ago: executing program 3 (id=3252):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

6.226670919s ago: executing program 8 (id=3253):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x50)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x4000040)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

2.530040081s ago: executing program 36 (id=3238):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6c)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000020c0)={&(0x7f0000002080)='rseq_ip_fixup\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002180)={0xffffffffffffffff, r2, 0x0, 0xc, &(0x7f0000002140)='/dev/uinput\x00'}, 0x30)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53})
munlockall()
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0)

2.513546842s ago: executing program 3 (id=3255):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x8000002, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20, 0x4)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280)={0x80900, 0x84, 0x10}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18)
mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
bind$xdp(r0, 0x0, 0x0)
fsopen(0x0, 0x0)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'veth1_to_hsr\x00', {0xf}})
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="63726561746f723df12db87f2c747970653ddeb4a1982c71756965742c71756965742c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c00db9f4170aa85ed4a81ea"], 0x0, 0x2b6, &(0x7f0000000580)="$eJzs3b1u014Yx/HfcdJ/0xf1776gSoyFSkyIlgWxgFAvggEhShOkqlaRoEjAhJgRYkNiZ2NG3AALE+IGYGJiZKjEYHSO7dRxbccNaZzA9yM1cm0/x8+J384TKbEA/LNubH19e/m7/TNSQw1JVyVPUktqSjqj1daj/YPdg6DTdhGzU7kNNVyE/TOKIs3P7Do7+5280Fbmf9/GNzXvWsGpCsMw/FZ3EqidO/tzeNJ0fD675b3n6n8jym74ntWdQM3MoQ71WAt15wEAqFd8//fi+/x8NEueJ63Ht/2c+//kOqw7gZql7v+uygqN3b8zbtFRvWcPAbfcS6rEkhYLl7hRopcZYJreqvK4/13UzL3doHNx537Q9vRc12Kp1Vbcazs6dBN9sl0rSTZH/74XmXN9mLJ92CzIf3mQLb4+eSpd5pP5bG4bX2/U7o7/mqGxu8ntKd/tKb8bEOV/qbjFKCpaq6CXi24jZ5OK4cO7Cr1s5Vck3S0uqvcDAj/J81VBWeJmL2Wiot5t9Ondcm7UZp+olWzU0dFcHDm4atWYeWlumjX90Httpcb/nn2311XlzLTruDXjI6O0P023pl8hMa9S+qgq/3O6xAvd1RUtPHzydG87CDoPxnYiGXHYOY0xyKdkwqZ5Ki03NYpeJAfMeLyZYzCRXLyH37L+uJ2GpuUmfoWRoWVor9V720HZxWNmCJcnjIOjva/VW3UngzrYcZeJ6r9UvXLdLbN1ku/G6VPKG6eH/RpPtbhRUBssudfZE1Vwc8UVXNWa69wF6XzJFj/2NuvHef4lzJa+6A6f/wMAAAAAAAAAAAAAAAAAAEyaal8MmI7XHux7BTV3EQAAAAAAAAAAAAAAAAAAAACAiXfy5/8e0/0N6ezzf6O5qV/1Lnv+b/SsBfcr3Tz/FxiN3wEAAP//pQR2PQ==")

2.305310756s ago: executing program 8 (id=3256):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x48c, &(0x7f0000000a80)="$eJzs3M9vFFUcAPDv7Lblt62IvxAFRSPR2NKCysEDGE08aGKiBzzWbSHIQg2tRgjR6gGPhsS78WjCX+BJL0Y9mXjVuyEhhgvoaczszrSz221py5YF9/NJlr43b7bvfTvvdd+bxzSAvrUv+yeJ2B4Rf0TEcDPbesK+5peb1y/W/rl+sZZEmr7zd9I478b1i7Xi1OJ924rMfOvxstnzF05P1uvT5/L82NyZD8dmz1944dSZyZPTJ6fPThw5cvjQ+MsvTbzYlTizNt3Y/enMnkffeO/yW7Xjl9//5UpSxN8Sx8ddqa/0rcuqReKZbtVyl9hRSicDPWwIa5J1yOxyDTbG/3BUY/HiDcfrX/S0ccCGStM03bR88XwK/I8l0esWAL2Rf84nEfO1bA1cXs/3g2vHmgugLO6b+atZMhCV/JzBtvVtN2WrrePz/36TvaLtfgoAwEb44VjzazH3W5x/VFru4h/N94ZGIuL+iNgZEQ9ExK6IeDAiHoqIhyPikdJ7Ou37tGvfJFk6/6lcXVdgq5TN/17J97Za53/F7C9GqnluRyP+weTEqfr0wYi4LyIOxOCmLD++Qh0/vvb7V8uV7SvN/7JXVn8xF8zbcXWg7Qbd1OTc5O3EXHbt84jdA53iTxZ2ApL8tXvv+uo49dx3e5Yru3X8K+jCPlP6bcSzzes/H23xF5KV9yfHNkd9+uBY0SuW+vW3S2+XsrXyuLit+FczwG4hu/5bO/b/hW8+kpT3a2fXXselP79cdk2zyv4/VH5P1v+Hkncb6aLgk8m5uXPjEUPJm/nxo/nx1voa500snp/Ff2B/5/G/MxZ/Eo9FRNaJH4+IJyJib972JyPiqYjYv0L8P7/69Afrj39jZfFPren6L5so9raXFFVP//R9o6S4WCMrxJ9Eh+t/uJE6kB/p9PtvuLWLROeWJkuOdOenCAAAAHe3SkRsj6QyupCuVEZHm/9ffldsrdRnZueePzHz0dmp5jMCIzFYKe50DS/cD4358XxZf6UakZVP5Pnifumh/L7x19UtjfxobaY+1evgoc9tW2b8Z/6q9rp1wIbzvBb0r/WO/zRNP+tyU4A7zOc/9K9i/G/ucTuAO6/D5/+WtvwKfyMAuJd1mv9b2EN/sP6H/mX8Q/8y/qF/Gf/Ql/In4QdW84D/hiWy3z+9q33tiTTtUe1DvY99IRGVO1DXYN5NJ+v1IlmfPhe9jn1tiST/WxrpXdKe1SUaTbYLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3PP+CwAA//9rHtbn")
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r2 = fsmount(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x100, <r3=>0x0}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xbc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='xprt_ping\x00', r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
setpgid(r5, r0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_CREATE(r8, 0x5501)
ioctl$UI_DEV_DESTROY(r8, 0x5502)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)

966.573301ms ago: executing program 3 (id=3257):
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x40142, 0x1)
r1 = socket(0x2c, 0x3, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x0, 0xd5, &(0x7f0000000340), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4b, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl2\x00', <r4=>0x0, 0x2f, 0x81, 0x8, 0x1, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x700, 0x3, 0x80000000}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000800)={0x150, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x64aaa1676c13893a}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x81)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', 0x0, 0x0, 0x0, 0x40000000}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38)
r7 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x27, 0x1, 0x1, "3a8e07000034b52ba75088c27891ca55e21f0000000000b2b679d200", 0x41414770})
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0)

143.606777ms ago: executing program 5 (id=3258):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x50)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x4000040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

0s ago: executing program 7 (id=3259):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee2ea9a1a483d5c39f00000500000000f7ffffffffffffff000000000036930000", @ANYRES8], 0x0, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x50)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
socket$key(0xf, 0x3, 0x2)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

kernel console output (not intermixed with test programs):

18.480987][T16769] BTRFS info (device loop3): turning on flush-on-commit
[ 1618.488112][T16769] BTRFS info (device loop3): enabling disk space caching
[ 1618.495272][T16769] BTRFS info (device loop3): turning on barriers
[ 1618.501687][T16769] BTRFS info (device loop3): force clearing of disk cache
[ 1618.509115][T16769] BTRFS info (device loop3): enabling ssd optimizations
[ 1618.516356][T16769] BTRFS info (device loop3): turning off barriers
[ 1618.522993][T16769] BTRFS info (device loop3): max_inline at 8
[ 1618.529089][T16769] BTRFS error (device loop3): unrecognized mount option 'dont_measure'
[ 1618.538859][T16769] BTRFS error (device loop3): open_ctree failed: -22
[ 1619.880253][T16777] loop7: detected capacity change from 0 to 32768
[ 1619.902989][T16777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2739 (16777)
[ 1619.937520][T16777] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1619.947839][T16777] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[ 1619.956971][T16777] BTRFS info (device loop7): setting nodatacow, compression disabled
[ 1619.965353][T16777] BTRFS info (device loop7): max_inline at 0
[ 1619.971418][T16777] BTRFS info (device loop7): turning on async discard
[ 1619.978437][T16777] BTRFS info (device loop7): turning off barriers
[ 1619.984907][T16777] BTRFS info (device loop7): turning on flush-on-commit
[ 1619.991882][T16777] BTRFS info (device loop7): enabling disk space caching
[ 1619.998957][T16777] BTRFS info (device loop7): turning on barriers
[ 1620.005325][T16777] BTRFS info (device loop7): force clearing of disk cache
[ 1620.012510][T16777] BTRFS info (device loop7): enabling ssd optimizations
[ 1620.019458][T16777] BTRFS info (device loop7): turning off barriers
[ 1620.025947][T16777] BTRFS info (device loop7): max_inline at 8
[ 1620.032032][T16777] BTRFS error (device loop7): unrecognized mount option 'dont_measure'
[ 1620.049060][T16777] BTRFS error (device loop7): open_ctree failed: -22
[ 1620.436245][T14147] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (14147)
[ 1620.670304][T16796] siw: device registration error -23
[ 1622.224285][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1622.265651][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1622.331380][T16469] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1623.517650][T16834] siw: device registration error -23
[ 1623.548084][T16834] loop2: detected capacity change from 0 to 64
[ 1623.568468][T16834] hfs: invalid btree extent records
[ 1623.574061][T16834] hfs: unable to open extent tree
[ 1623.579217][T16834] hfs: can't find a HFS filesystem on dev loop2
[ 1625.108986][T16814] loop7: detected capacity change from 0 to 32768
[ 1625.840641][T16857] loop8: detected capacity change from 0 to 40427
[ 1626.218754][T16857] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 1626.226744][T16857] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 1626.251311][T16857] F2FS-fs (loop8): invalid crc value
[ 1626.368374][T16857] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1626.402411][T16857] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[ 1626.409498][T16857] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1626.836161][T16122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1626.900863][T16122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1626.938498][T16868] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1627.009248][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1627.018768][ T4354] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1627.035856][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1627.086441][T16469] device veth0_vlan entered promiscuous mode
[ 1627.104894][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1627.145573][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1627.253048][   T26] audit: type=1800 audit(1757763100.380:30): pid=16870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2751" name="file1" dev="loop8" ino=10 res=0 errno=0
[ 1627.349891][T16469] device veth1_vlan entered promiscuous mode
[ 1627.686400][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1627.712582][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1627.802987][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1627.988747][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1628.030970][T16469] device veth0_macvtap entered promiscuous mode
[ 1628.078134][ T7066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1628.096053][T16469] device veth1_macvtap entered promiscuous mode
[ 1628.309523][T16469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1628.340341][T16469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1628.356958][T16469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1628.390238][T16469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1628.428899][T16469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1628.459097][T16469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1628.490832][T16469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1628.531506][T16469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1628.589547][T16469] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1628.621147][T11551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1628.684887][T11551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1628.731792][T16469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1628.782250][T16469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1628.939757][T16469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1628.973026][T10510] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1628.980045][ T8028] Bluetooth: hci5: command 0x1003 tx timeout
[ 1629.027608][T16469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1629.037868][T16469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1629.049823][T16469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1629.062948][T16469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1629.081262][T16469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1629.215294][T16469] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1629.226808][T16469] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1629.240674][T16469] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1629.249725][T16469] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1629.259230][T16469] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1629.271759][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1629.282072][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1629.530172][ T7066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1629.607319][ T7066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1629.712998][T16897] siw: device registration error -23
[ 1630.012058][T10510] Bluetooth: hci1: command 0x0406 tx timeout
[ 1630.332191][T10510] Bluetooth: hci6: command 0x1003 tx timeout
[ 1630.332262][T16714] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1630.584964][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1630.737315][ T5065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1630.785570][ T5065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1631.219249][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1632.578779][T16916] loop8: detected capacity change from 0 to 64
[ 1632.596492][T16916] hfs: invalid btree extent records
[ 1632.602675][T16916] hfs: unable to open extent tree
[ 1632.607881][T16916] hfs: can't find a HFS filesystem on dev loop8
[ 1633.425818][T10510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1633.442424][T10510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1633.450872][T10510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1633.460757][T10510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1633.468428][T10510] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1633.477482][T10510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1633.566358][   T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1633.652130][T16922] siw: device registration error -23
[ 1633.673030][T16922] loop2: detected capacity change from 0 to 64
[ 1633.691715][T16922] hfs: invalid btree extent records
[ 1633.697589][T16922] hfs: unable to open extent tree
[ 1633.703031][T16922] hfs: can't find a HFS filesystem on dev loop2
[ 1634.577336][T16927] loop8: detected capacity change from 0 to 512
[ 1634.588373][T16926] loop7: detected capacity change from 0 to 512
[ 1634.595993][T16927] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1634.604106][T16926] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1634.621831][T16927] EXT4-fs: Ignoring removed bh option
[ 1634.627663][T16926] EXT4-fs: Ignoring removed bh option
[ 1634.643373][T16927] EXT4-fs error (device loop8): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1634.670500][   T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1634.702986][T16927] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2761: corrupted inode contents
[ 1634.720579][T16927] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #11: comm syz.8.2761: mark_inode_dirty error
[ 1634.745808][T16927] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2761: invalid indirect mapped block 1 (level 1)
[ 1634.762836][T16926] EXT4-fs error (device loop7): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1634.782394][T16927] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2761: corrupted inode contents
[ 1634.822180][T16927] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[ 1634.991289][T16926] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.2762: corrupted inode contents
[ 1635.005625][   T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1635.016365][T16927] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2761: corrupted inode contents
[ 1635.069626][T16926] EXT4-fs error (device loop7): ext4_dirty_inode:6119: inode #11: comm syz.7.2762: mark_inode_dirty error
[ 1635.110503][T16927] EXT4-fs error (device loop8): ext4_truncate:4312: inode #11: comm syz.8.2761: mark_inode_dirty error
[ 1635.138768][T16926] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2762: invalid indirect mapped block 1 (level 1)
[ 1635.180000][T16927] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[ 1635.198871][T16926] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.2762: corrupted inode contents
[ 1635.224407][T16927] EXT4-fs (loop8): 1 truncate cleaned up
[ 1635.230138][T16927] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1635.361030][   T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1635.371833][T16926] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[ 1635.487891][T16420] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1635.513976][T16926] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.2762: corrupted inode contents
[ 1635.647571][T10510] Bluetooth: hci4: command 0x0409 tx timeout
[ 1635.972704][T16926] EXT4-fs error (device loop7): ext4_truncate:4312: inode #11: comm syz.7.2762: mark_inode_dirty error
[ 1636.004260][T16926] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[ 1636.019871][T16926] EXT4-fs (loop7): 1 truncate cleaned up
[ 1636.025862][T16926] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1637.038505][T16917] chnl_net:caif_netlink_parms(): no params data found
[ 1637.246447][T15324] EXT4-fs (loop8): unmounting filesystem.
[ 1637.532580][ T8028] Bluetooth: hci5: command 0x1003 tx timeout
[ 1637.540987][T16714] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1637.692029][ T8028] Bluetooth: hci4: command 0x041b tx timeout
[ 1638.724630][T15421] EXT4-fs (loop7): unmounting filesystem.
[ 1639.021982][T16967] loop8: detected capacity change from 0 to 64
[ 1639.644542][T16967] hfs: invalid btree extent records
[ 1639.650098][T16967] hfs: unable to open extent tree
[ 1639.655446][T16967] hfs: can't find a HFS filesystem on dev loop8
[ 1639.772153][T16714] Bluetooth: hci4: command 0x040f tx timeout
[ 1640.081130][T16917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1640.110724][T16917] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1640.205370][T16917] device bridge_slave_0 entered promiscuous mode
[ 1640.423058][T16972] loop7: detected capacity change from 0 to 512
[ 1640.492713][T16972] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1640.499475][T16972] EXT4-fs: Ignoring removed bh option
[ 1640.530937][T16917] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1640.562304][T16917] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1640.597698][T16974] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1640.607915][T16917] device bridge_slave_1 entered promiscuous mode
[ 1640.656249][T16972] EXT4-fs error (device loop7): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1640.756972][T16972] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.2767: corrupted inode contents
[ 1640.826357][T16972] EXT4-fs error (device loop7): ext4_dirty_inode:6119: inode #11: comm syz.7.2767: mark_inode_dirty error
[ 1640.888623][T16972] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2767: invalid indirect mapped block 1 (level 1)
[ 1640.933866][T16972] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.2767: corrupted inode contents
[ 1640.951292][T16917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1641.024295][T16972] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[ 1641.043988][T16972] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.2767: corrupted inode contents
[ 1641.074971][T16917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1641.093172][T16972] EXT4-fs error (device loop7): ext4_truncate:4312: inode #11: comm syz.7.2767: mark_inode_dirty error
[ 1641.140739][T16972] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[ 1641.166911][T16972] EXT4-fs (loop7): 1 truncate cleaned up
[ 1641.185830][T16972] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1641.310553][T16982] siw: device registration error -23
[ 1641.331261][T16982] loop3: detected capacity change from 0 to 64
[ 1641.453438][T16982] hfs: invalid btree extent records
[ 1641.458893][T16982] hfs: unable to open extent tree
[ 1641.464245][T16982] hfs: can't find a HFS filesystem on dev loop3
[ 1641.852095][ T8028] Bluetooth: hci4: command 0x0419 tx timeout
[ 1642.248034][T16917] team0: Port device team_slave_0 added
[ 1642.652665][T16714] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1643.024334][T16987] siw: device registration error -23
[ 1643.053911][T16985] loop3: detected capacity change from 0 to 64
[ 1643.090114][T16917] team0: Port device team_slave_1 added
[ 1643.304389][T16985] hfs: invalid btree extent records
[ 1643.322261][T16985] hfs: unable to open extent tree
[ 1643.327417][T16985] hfs: can't find a HFS filesystem on dev loop3
[ 1644.445149][T17000] loop8: detected capacity change from 0 to 64
[ 1644.476127][T17000] hfs: invalid btree extent records
[ 1644.481650][T17000] hfs: unable to open extent tree
[ 1644.487094][T17000] hfs: can't find a HFS filesystem on dev loop8
[ 1645.473642][T16917] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1645.693384][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1645.724620][T15421] EXT4-fs (loop7): unmounting filesystem.
[ 1645.944844][T16917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1646.908177][T17013] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1646.966055][T16917] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1646.982154][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1647.542097][T16917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1647.879425][T17026] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1647.962396][ T7018] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1647.993829][T17028] loop2: detected capacity change from 0 to 512
[ 1648.292562][T17028] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1648.400166][T17028] EXT4-fs: Ignoring removed bh option
[ 1648.520251][T17028] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1648.542276][T17028] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.2777: corrupted inode contents
[ 1648.546827][T16917] device hsr_slave_0 entered promiscuous mode
[ 1648.568320][T16917] device hsr_slave_1 entered promiscuous mode
[ 1648.578816][   T52] device hsr_slave_0 left promiscuous mode
[ 1648.585803][   T52] device hsr_slave_1 left promiscuous mode
[ 1648.632408][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1648.640073][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1648.756078][T17028] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #11: comm syz.2.2777: mark_inode_dirty error
[ 1648.793471][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1648.800967][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1648.808930][T17028] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2777: invalid indirect mapped block 1 (level 1)
[ 1648.830160][   T52] device bridge_slave_1 left promiscuous mode
[ 1648.865822][T17028] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.2777: corrupted inode contents
[ 1648.870145][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1648.892245][ T8028] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1648.892611][T10510] Bluetooth: hci5: command 0x1003 tx timeout
[ 1648.946771][T17028] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[ 1648.957953][   T52] device bridge_slave_0 left promiscuous mode
[ 1648.964671][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1649.134735][T17028] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.2777: corrupted inode contents
[ 1649.166287][T17028] EXT4-fs error (device loop2): ext4_truncate:4312: inode #11: comm syz.2.2777: mark_inode_dirty error
[ 1649.912406][T17028] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[ 1649.932598][ T8028] Bluetooth: hci6: command 0x1003 tx timeout
[ 1649.940798][T16714] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1649.966473][T17028] EXT4-fs (loop2): 1 truncate cleaned up
[ 1650.002045][T17028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1650.148764][   T52] device veth1_macvtap left promiscuous mode
[ 1650.198452][   T52] device veth0_macvtap left promiscuous mode
[ 1650.296729][   T52] device veth1_vlan left promiscuous mode
[ 1650.339953][   T52] device veth0_vlan left promiscuous mode
[ 1650.953714][T17060] loop8: detected capacity change from 0 to 512
[ 1650.987824][T17060] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1651.315151][T17060] EXT4-fs: Ignoring removed bh option
[ 1651.369514][T17060] EXT4-fs error (device loop8): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1651.422805][T17060] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2781: corrupted inode contents
[ 1651.533188][T17060] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #11: comm syz.8.2781: mark_inode_dirty error
[ 1651.614683][T17060] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2781: invalid indirect mapped block 1 (level 1)
[ 1651.716169][T17060] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2781: corrupted inode contents
[ 1651.832372][T17060] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[ 1651.879232][T17060] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2781: corrupted inode contents
[ 1651.932894][T17060] EXT4-fs error (device loop8): ext4_truncate:4312: inode #11: comm syz.8.2781: mark_inode_dirty error
[ 1651.995472][T17065] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1652.005157][T17060] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[ 1652.048854][T17060] EXT4-fs (loop8): 1 truncate cleaned up
[ 1652.058078][T17060] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1652.189727][T17068] siw: device registration error -23
[ 1652.209126][T17068] loop7: detected capacity change from 0 to 64
[ 1652.227786][T17068] hfs: invalid btree extent records
[ 1652.233412][T17068] hfs: unable to open extent tree
[ 1652.238554][T17068] hfs: can't find a HFS filesystem on dev loop7
[ 1653.268826][ T5819] EXT4-fs (loop2): unmounting filesystem.
[ 1653.862160][ T8028] Bluetooth: hci5: command 0x1003 tx timeout
[ 1653.868641][T16714] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1654.003394][T15324] EXT4-fs (loop8): unmounting filesystem.
[ 1654.223653][T17078] loop2: detected capacity change from 0 to 512
[ 1654.270490][T17078] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1654.312073][T17078] EXT4-fs: Ignoring removed bh option
[ 1654.380212][T17078] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1654.442147][T17078] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.2787: corrupted inode contents
[ 1654.478245][T17078] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #11: comm syz.2.2787: mark_inode_dirty error
[ 1654.529907][T17078] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2787: invalid indirect mapped block 1 (level 1)
[ 1654.578044][T17078] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.2787: corrupted inode contents
[ 1654.632445][T17078] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[ 1654.653125][T17078] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.2787: corrupted inode contents
[ 1654.695716][T17078] EXT4-fs error (device loop2): ext4_truncate:4312: inode #11: comm syz.2.2787: mark_inode_dirty error
[ 1654.738601][T17078] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[ 1654.778356][T17078] EXT4-fs (loop2): 1 truncate cleaned up
[ 1654.803404][T17078] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1655.228112][T17090] siw: device registration error -23
[ 1655.247913][T17090] loop7: detected capacity change from 0 to 64
[ 1655.657313][T17090] hfs: invalid btree extent records
[ 1655.663105][T17090] hfs: unable to open extent tree
[ 1655.668427][T17090] hfs: can't find a HFS filesystem on dev loop7
[ 1656.191867][T17096] siw: device registration error -23
[ 1656.219613][T17096] loop7: detected capacity change from 0 to 64
[ 1656.233822][T17096] hfs: invalid btree extent records
[ 1656.239413][T17096] hfs: unable to open extent tree
[ 1656.244865][T17096] hfs: can't find a HFS filesystem on dev loop7
[ 1657.274976][ T5819] EXT4-fs (loop2): unmounting filesystem.
[ 1658.286685][   T52] team0 (unregistering): Port device team_slave_1 removed
[ 1658.576041][   T52] team0 (unregistering): Port device team_slave_0 removed
[ 1659.190293][T17113] syz.2.2795[17113] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1659.190625][T17113] syz.2.2795[17113] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1659.211094][T17113] siw: device registration error -23
[ 1659.759915][T17118] siw: device registration error -23
[ 1659.779070][T17118] loop3: detected capacity change from 0 to 64
[ 1660.170982][T17118] hfs: invalid btree extent records
[ 1660.176765][T17118] hfs: unable to open extent tree
[ 1660.182214][T17118] hfs: can't find a HFS filesystem on dev loop3
[ 1660.722669][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1662.033573][T17128] loop3: detected capacity change from 0 to 512
[ 1662.063278][T17128] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1662.162091][T17128] EXT4-fs: Ignoring removed bh option
[ 1663.226106][T17134] loop2: detected capacity change from 0 to 32768
[ 1663.240135][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1663.284608][T17134] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1663.293377][T17134] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1663.327681][T17134] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 0ms
[ 1663.335612][T17134] gfs2: fsid=syz:syz.0: can't find per_node directory: -2
[ 1663.448556][T17128] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1663.529823][T17128] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.2800: corrupted inode contents
[ 1663.608090][T17128] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #11: comm syz.3.2800: mark_inode_dirty error
[ 1663.665793][T17128] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2800: invalid indirect mapped block 1 (level 1)
[ 1663.702636][T17128] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.2800: corrupted inode contents
[ 1663.914027][T17128] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[ 1663.938741][T17128] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.2800: corrupted inode contents
[ 1663.959657][T17128] EXT4-fs error (device loop3): ext4_truncate:4312: inode #11: comm syz.3.2800: mark_inode_dirty error
[ 1663.972601][T17128] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[ 1663.992192][T17128] EXT4-fs (loop3): 1 truncate cleaned up
[ 1664.002348][T17128] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1664.074668][T17148] siw: device registration error -23
[ 1664.103874][T17148] loop7: detected capacity change from 0 to 64
[ 1664.118627][T17148] hfs: invalid btree extent records
[ 1664.124399][T17148] hfs: unable to open extent tree
[ 1664.129625][T17148] hfs: can't find a HFS filesystem on dev loop7
[ 1665.917008][T15924] EXT4-fs (loop3): unmounting filesystem.
[ 1667.295732][T17163] loop3: detected capacity change from 0 to 32768
[ 1667.334897][T17163] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1667.343158][T17163] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1667.368298][T17163] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 0ms
[ 1667.376801][T17163] gfs2: fsid=syz:syz.0: can't find per_node directory: -2
[ 1668.908307][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.914883][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.032568][T17173] siw: device registration error -23
[ 1669.052818][T17173] loop3: detected capacity change from 0 to 64
[ 1669.070020][T17173] hfs: invalid btree extent records
[ 1669.075635][T17173] hfs: unable to open extent tree
[ 1669.080894][T17173] hfs: can't find a HFS filesystem on dev loop3
[ 1670.642349][T17179] siw: device registration error -23
[ 1670.663344][T17179] loop3: detected capacity change from 0 to 64
[ 1672.143077][T17179] hfs: invalid btree extent records
[ 1672.148761][T17179] hfs: unable to open extent tree
[ 1672.154377][T17179] hfs: can't find a HFS filesystem on dev loop3
[ 1672.275701][   T52] bond0 (unregistering): Released all slaves
[ 1673.390382][T17189] loop3: detected capacity change from 0 to 32768
[ 1673.552500][T17184] loop8: detected capacity change from 0 to 64
[ 1673.557951][T17189] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1673.569189][T17189] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1673.577999][T17189] BTRFS info (device loop3): setting nodatacow, compression disabled
[ 1673.586161][T17189] BTRFS info (device loop3): max_inline at 0
[ 1673.592204][T17189] BTRFS info (device loop3): turning on async discard
[ 1673.599046][T17189] BTRFS info (device loop3): turning off barriers
[ 1673.605508][T17189] BTRFS info (device loop3): turning on flush-on-commit
[ 1673.612606][T17189] BTRFS info (device loop3): enabling disk space caching
[ 1673.619743][T17189] BTRFS info (device loop3): turning on barriers
[ 1673.626840][T17189] BTRFS info (device loop3): force clearing of disk cache
[ 1673.634119][T17189] BTRFS info (device loop3): enabling ssd optimizations
[ 1673.641092][T17189] BTRFS info (device loop3): turning off barriers
[ 1673.647683][T17189] BTRFS info (device loop3): max_inline at 8
[ 1673.653768][T17189] BTRFS error (device loop3): unrecognized mount option 'dont_measure'
[ 1673.670429][T17189] BTRFS error (device loop3): open_ctree failed: -22
[ 1673.736224][T17184] hfs: invalid btree extent records
[ 1673.741712][T17184] hfs: unable to open extent tree
[ 1673.747104][T17184] hfs: can't find a HFS filesystem on dev loop8
[ 1674.455304][T17194] siw: device registration error -23
[ 1674.474040][T17194] loop7: detected capacity change from 0 to 64
[ 1674.546263][T17194] hfs: invalid btree extent records
[ 1674.551812][T17194] hfs: unable to open extent tree
[ 1674.557109][T17194] hfs: can't find a HFS filesystem on dev loop7
[ 1676.147187][T17196] loop8: detected capacity change from 0 to 64
[ 1677.143813][T17196] hfs: invalid btree extent records
[ 1677.149324][T17196] hfs: unable to open extent tree
[ 1677.154602][T17196] hfs: can't find a HFS filesystem on dev loop8
[ 1677.554071][T17201] siw: device registration error -23
[ 1677.575753][T17201] loop2: detected capacity change from 0 to 64
[ 1677.589367][T17201] hfs: invalid btree extent records
[ 1677.595618][T17201] hfs: unable to open extent tree
[ 1677.601078][T17201] hfs: can't find a HFS filesystem on dev loop2
[ 1678.734405][T17207] loop8: detected capacity change from 0 to 4096
[ 1679.187396][T17215] syz.2.2823[17215] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1679.187738][T17215] syz.2.2823[17215] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1679.206475][T17215] siw: device registration error -23
[ 1679.661861][T14147] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (14147)
[ 1679.690101][T17216] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1680.105506][T17220] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1680.352046][T17225] siw: device registration error -23
[ 1681.773629][T17226] loop2: detected capacity change from 0 to 4096
[ 1681.886091][T17234] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1682.092093][ T8028] Bluetooth: hci5: command 0x1003 tx timeout
[ 1682.098691][T16714] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1682.266705][ T4385] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1683.715829][T17249] siw: device registration error -23
[ 1683.737148][T17249] loop3: detected capacity change from 0 to 64
[ 1684.252747][ T8028] Bluetooth: hci6: command 0x1003 tx timeout
[ 1684.259351][T16714] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1685.758604][T17249] hfs: invalid btree extent records
[ 1685.832152][T17249] hfs: unable to open extent tree
[ 1685.848985][T16917] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1685.872527][T17249] hfs: can't find a HFS filesystem on dev loop3
[ 1685.914611][T16917] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1685.970464][T16917] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1685.988451][T14147] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1686.093805][T16917] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1687.398666][T16917] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1687.525816][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1687.539902][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1687.573832][T16917] 8021q: adding VLAN 0 to HW filter on device team0
[ 1687.631129][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1687.666028][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1687.680230][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1687.687491][ T4638] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1687.732184][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1687.755393][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1687.780390][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1687.809095][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1687.816321][ T4638] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1687.846969][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1687.867154][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1687.913756][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1687.935359][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1687.948112][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1687.964001][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1687.973742][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1687.986351][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1688.012572][T16917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1688.035743][T16917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1688.050469][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1688.073985][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1688.108418][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1689.078304][T17303] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1689.317326][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1689.336056][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1689.386380][T16917] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1690.390743][T17319] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1690.526072][T17324] siw: device registration error -23
[ 1690.545208][T17324] loop7: detected capacity change from 0 to 64
[ 1690.571078][T17324] hfs: invalid btree extent records
[ 1690.576666][T17324] hfs: unable to open extent tree
[ 1690.582159][T17324] hfs: can't find a HFS filesystem on dev loop7
[ 1691.053530][T16714] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1691.060048][T10510] Bluetooth: hci5: command 0x1003 tx timeout
[ 1692.172167][T16714] Bluetooth: hci6: command 0x1003 tx timeout
[ 1692.178789][ T8028] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1692.657397][T17338] siw: device registration error -23
[ 1692.677028][T17338] loop7: detected capacity change from 0 to 64
[ 1694.313848][T17338] hfs: invalid btree extent records
[ 1694.319485][T17338] hfs: unable to open extent tree
[ 1694.324801][T17338] hfs: can't find a HFS filesystem on dev loop7
[ 1695.288527][T16714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1695.600283][T16714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1695.876388][T16714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1695.884743][T16714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1696.018586][T16714] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1696.026163][T16714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1696.193450][T17352] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1697.574219][ T5065] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1697.585704][T17350] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1698.102166][T10510] Bluetooth: hci4: command 0x0409 tx timeout
[ 1698.172234][T16714] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1698.340307][T17361] loop8: detected capacity change from 0 to 64
[ 1699.613049][ T8028] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1699.920383][T17361] hfs: invalid btree extent records
[ 1699.926160][T17361] hfs: unable to open extent tree
[ 1699.931342][T17361] hfs: can't find a HFS filesystem on dev loop8
[ 1700.182024][ T8028] Bluetooth: hci4: command 0x041b tx timeout
[ 1700.769854][T17372] siw: device registration error -23
[ 1700.788892][T17372] loop3: detected capacity change from 0 to 64
[ 1700.800890][T17372] hfs: invalid btree extent records
[ 1700.806493][T17372] hfs: unable to open extent tree
[ 1700.811713][T17372] hfs: can't find a HFS filesystem on dev loop3
[ 1701.695888][T17375] loop8: detected capacity change from 0 to 64
[ 1701.709146][T17375] hfs: invalid btree extent records
[ 1701.715676][T17375] hfs: unable to open extent tree
[ 1701.720941][T17375] hfs: can't find a HFS filesystem on dev loop8
[ 1703.135694][ T8028] Bluetooth: hci4: command 0x040f tx timeout
[ 1703.255060][T17348] chnl_net:caif_netlink_parms(): no params data found
[ 1705.210965][T17348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1705.218508][ T8028] Bluetooth: hci4: command 0x0419 tx timeout
[ 1705.250429][T17348] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1705.308732][T17348] device bridge_slave_0 entered promiscuous mode
[ 1705.318895][T17348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1705.327013][T17348] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1705.335526][T17348] device bridge_slave_1 entered promiscuous mode
[ 1706.206176][T17348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1706.440563][T17415] loop3: detected capacity change from 0 to 24
[ 1706.492376][T17415] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1706.553964][T17348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1706.574968][T17415] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1708.244991][T17422] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1708.395077][T17348] team0: Port device team_slave_0 added
[ 1708.638191][T17424] loop3: detected capacity change from 0 to 24
[ 1708.727246][T17348] team0: Port device team_slave_1 added
[ 1708.849604][T17424] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1708.868686][T17427] loop8: detected capacity change from 0 to 24
[ 1708.983093][T17427] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1709.096087][T17427] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1709.127407][T17348] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1709.152666][T17424] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1709.172904][T17348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1709.256005][T17430] loop7: detected capacity change from 0 to 24
[ 1709.298848][T17430] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1710.252073][ T8028] Bluetooth: hci5: command 0x1003 tx timeout
[ 1710.252208][T16714] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1710.749624][T17430] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1710.822163][T17348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1712.502710][T17348] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1712.509731][T17348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1712.603916][T17348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1712.691479][ T7066] device hsr_slave_0 left promiscuous mode
[ 1712.766327][ T7066] device hsr_slave_1 left promiscuous mode
[ 1712.815861][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1712.843804][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1712.882716][ T7066] device bridge_slave_1 left promiscuous mode
[ 1712.922456][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1712.999561][ T7066] device bridge_slave_0 left promiscuous mode
[ 1713.007170][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1714.046074][T17462] loop2: detected capacity change from 0 to 24
[ 1714.086829][T17462] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1714.108680][T17462] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1714.190158][T17466] loop8: detected capacity change from 0 to 24
[ 1714.331492][T17466] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1714.502862][T17466] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1718.124411][T17471] loop7: detected capacity change from 0 to 24
[ 1718.131522][T17471] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1718.147773][T17473] loop8: detected capacity change from 0 to 24
[ 1718.156497][T17473] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1718.192909][T17473] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1718.302687][T17471] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1718.408671][T17477] loop3: detected capacity change from 0 to 24
[ 1718.415931][T17477] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1718.429562][T17477] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1719.968666][ T7066] team0 (unregistering): Port device team_slave_1 removed
[ 1723.252779][ T7066] team0 (unregistering): Port device team_slave_0 removed
[ 1723.302398][T17490] loop8: detected capacity change from 0 to 24
[ 1723.319734][T17490] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1723.339714][T17490] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1725.206928][T17492] loop3: detected capacity change from 0 to 512
[ 1725.222820][T17492] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1725.234053][T17492] EXT4-fs: Ignoring removed bh option
[ 1725.246765][ T7066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1725.307442][T17492] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1725.346128][ T7066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1725.392478][T17492] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.2877: corrupted inode contents
[ 1725.412308][T17503] siw: device registration error -23
[ 1725.432008][T17503] loop2: detected capacity change from 0 to 64
[ 1725.457035][T17503] hfs: invalid btree extent records
[ 1725.463339][T17503] hfs: unable to open extent tree
[ 1725.468558][T17503] hfs: can't find a HFS filesystem on dev loop2
[ 1726.292278][T17492] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #11: comm syz.3.2877: mark_inode_dirty error
[ 1726.394508][T17509] loop8: detected capacity change from 0 to 24
[ 1726.414484][T17509] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1726.451465][T17509] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1726.451629][T17492] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2877: invalid indirect mapped block 1 (level 1)
[ 1726.496114][T17492] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.2877: corrupted inode contents
[ 1726.543287][T17492] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[ 1726.569604][T17492] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.2877: corrupted inode contents
[ 1726.624032][T17492] EXT4-fs error (device loop3): ext4_truncate:4312: inode #11: comm syz.3.2877: mark_inode_dirty error
[ 1727.421213][T17492] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[ 1727.449207][T17492] EXT4-fs (loop3): 1 truncate cleaned up
[ 1727.497699][T17492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1727.657142][T17519] siw: device registration error -23
[ 1727.681260][T17519] loop7: detected capacity change from 0 to 64
[ 1727.698054][T17519] hfs: invalid btree extent records
[ 1727.703775][T17519] hfs: unable to open extent tree
[ 1727.708947][T17519] hfs: can't find a HFS filesystem on dev loop7
[ 1728.555056][T17521] loop8: detected capacity change from 0 to 24
[ 1728.575428][T17521] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1728.625503][T15924] EXT4-fs (loop3): unmounting filesystem.
[ 1728.648927][T17521] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1730.346921][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.353557][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1733.405843][T17531] loop3: detected capacity change from 0 to 24
[ 1733.497956][T17531] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1733.592252][T17531] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1737.004387][T17545] loop8: detected capacity change from 0 to 64
[ 1737.018408][T17545] hfs: invalid btree extent records
[ 1737.024168][T17545] hfs: unable to open extent tree
[ 1737.029421][T17545] hfs: can't find a HFS filesystem on dev loop8
[ 1737.178487][T17547] loop7: detected capacity change from 0 to 24
[ 1737.304132][T17547] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1737.370156][T17550] loop2: detected capacity change from 0 to 24
[ 1737.382012][T17550] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1737.399187][T17547] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1737.399714][T17550] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1738.950084][T17552] siw: device registration error -23
[ 1738.968896][T17552] loop3: detected capacity change from 0 to 64
[ 1738.998001][T17552] hfs: invalid btree extent records
[ 1739.003974][T17552] hfs: unable to open extent tree
[ 1739.009239][T17552] hfs: can't find a HFS filesystem on dev loop3
[ 1740.450391][T17564] loop8: detected capacity change from 0 to 32768
[ 1742.988456][T17564] BTRFS error (device loop8): open_ctree failed: -4
[ 1744.259469][T17573] siw: device registration error -23
[ 1744.314724][T17573] loop3: detected capacity change from 0 to 64
[ 1744.326085][T17573] hfs: invalid btree extent records
[ 1744.331558][T17573] hfs: unable to open extent tree
[ 1744.336692][T17573] hfs: can't find a HFS filesystem on dev loop3
[ 1744.367145][T17582] loop2: detected capacity change from 0 to 24
[ 1744.375243][T17582] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1744.380661][T14397] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1744.393015][T17582] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1744.445849][T17584] loop7: detected capacity change from 0 to 24
[ 1744.453374][T17584] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1744.461626][T17584] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1749.446107][T17591] siw: device registration error -23
[ 1749.471069][T17591] loop3: detected capacity change from 0 to 64
[ 1749.542919][T17591] hfs: invalid btree extent records
[ 1749.548513][T17591] hfs: unable to open extent tree
[ 1749.553911][T17591] hfs: can't find a HFS filesystem on dev loop3
[ 1750.297614][T17602] siw: device registration error -23
[ 1750.324102][T17602] loop3: detected capacity change from 0 to 64
[ 1750.386084][T17602] hfs: invalid btree extent records
[ 1750.391718][T17602] hfs: unable to open extent tree
[ 1750.396965][T17602] hfs: can't find a HFS filesystem on dev loop3
[ 1751.227953][T17606] siw: device registration error -23
[ 1751.251734][T17606] loop7: detected capacity change from 0 to 64
[ 1751.268194][T17606] hfs: invalid btree extent records
[ 1751.273789][T17606] hfs: unable to open extent tree
[ 1751.279067][T17606] hfs: can't find a HFS filesystem on dev loop7
[ 1751.953700][T17605] loop2: detected capacity change from 0 to 24
[ 1751.983366][T17605] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1752.073366][T17605] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1752.220895][T17609] loop3: detected capacity change from 0 to 24
[ 1752.300623][T17609] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1752.448616][T17609] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1752.730037][T17612] loop7: detected capacity change from 0 to 24
[ 1752.737358][T17612] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1752.832070][T17612] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1755.278294][ T7066] bond0 (unregistering): Released all slaves
[ 1755.487012][T17629] loop2: detected capacity change from 0 to 24
[ 1755.513155][T17629] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1755.632967][T17629] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1755.930635][T17631] loop8: detected capacity change from 0 to 32768
[ 1756.019075][T17631] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1756.027453][T17631] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1756.047196][T17631] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 0ms
[ 1756.056191][T17631] gfs2: fsid=syz:syz.0: can't find per_node directory: -2
[ 1756.463451][T10510] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1756.475746][T10510] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1756.485768][T10510] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1756.495941][T10510] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1756.504276][T10510] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1756.511750][T10510] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1757.744805][T17645] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1758.572170][T10510] Bluetooth: hci5: command 0x0409 tx timeout
[ 1758.864361][T17655] syz.3.2921[17655] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1758.864734][T17655] syz.3.2921[17655] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1758.883436][T17655] siw: device registration error -23
[ 1758.915590][T17655] loop3: detected capacity change from 0 to 64
[ 1759.772013][T16714] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1759.772081][T10510] Bluetooth: hci6: command 0x1003 tx timeout
[ 1760.425390][T17655] hfs: invalid btree extent records
[ 1760.430896][T17655] hfs: unable to open extent tree
[ 1760.436571][T17655] hfs: can't find a HFS filesystem on dev loop3
[ 1760.652019][T10510] Bluetooth: hci5: command 0x041b tx timeout
[ 1762.183977][T17677] loop3: detected capacity change from 0 to 24
[ 1762.333148][T17677] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1763.052176][T10510] Bluetooth: hci5: command 0x040f tx timeout
[ 1763.135251][T17681] loop8: detected capacity change from 0 to 24
[ 1763.149593][T17681] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1763.160780][T17677] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1763.240194][T17681] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1764.696521][T17632] chnl_net:caif_netlink_parms(): no params data found
[ 1765.035548][T17687] siw: device registration error -23
[ 1765.057282][T17687] loop2: detected capacity change from 0 to 64
[ 1765.072149][T17687] hfs: invalid btree extent records
[ 1765.077669][T17687] hfs: unable to open extent tree
[ 1765.083049][T17687] hfs: can't find a HFS filesystem on dev loop2
[ 1765.132204][T10510] Bluetooth: hci5: command 0x0419 tx timeout
[ 1766.284770][T17691] loop7: detected capacity change from 0 to 24
[ 1766.301061][T17691] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1766.321826][T17691] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1766.524670][T17693] loop8: detected capacity change from 0 to 24
[ 1766.689673][T17693] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1766.833313][T17693] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1767.849225][T17706] loop2: detected capacity change from 0 to 24
[ 1767.881534][T17698] kvm: pic: non byte read
[ 1767.987791][T17706] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1768.064124][T17632] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1768.073208][T17632] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1768.141283][T17632] device bridge_slave_0 entered promiscuous mode
[ 1768.152549][T17706] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1768.179054][T17714] loop7: detected capacity change from 0 to 24
[ 1768.213543][T17632] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1768.238527][T17632] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1768.267854][T17632] device bridge_slave_1 entered promiscuous mode
[ 1768.460679][T17714] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1768.609305][T17714] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1768.955931][T17717] loop8: detected capacity change from 0 to 24
[ 1768.979491][T17717] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1768.987302][T17717] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1772.610740][T17632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1772.733639][T17632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1772.870490][T17726] loop3: detected capacity change from 0 to 24
[ 1772.893159][T17726] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1772.942037][T17726] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1773.069374][T17733] loop2: detected capacity change from 0 to 24
[ 1773.246351][T17733] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1773.401241][T17632] team0: Port device team_slave_0 added
[ 1773.439421][T17733] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1773.509470][T17736] loop7: detected capacity change from 0 to 24
[ 1773.627676][T17632] team0: Port device team_slave_1 added
[ 1773.688010][T17736] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1773.840857][T17736] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1775.317455][T17632] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1775.342110][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1775.376037][T17632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1775.390438][T17744] loop2: detected capacity change from 0 to 24
[ 1775.400846][T17632] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1775.441986][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1775.463219][T17744] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1775.505486][T17632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1775.513795][T17744] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1777.017461][T17751] syz.3.2931[17751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1777.017811][T17751] syz.3.2931[17751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1777.037117][T17751] siw: device registration error -23
[ 1777.080641][T17751] loop3: detected capacity change from 0 to 64
[ 1777.103522][T17751] hfs: invalid btree extent records
[ 1777.109045][T17751] hfs: unable to open extent tree
[ 1777.114465][T17751] hfs: can't find a HFS filesystem on dev loop3
[ 1777.554311][T17753] loop7: detected capacity change from 0 to 24
[ 1777.672955][T17753] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1777.727060][T17753] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1777.730944][T17632] device hsr_slave_0 entered promiscuous mode
[ 1777.804863][T17632] device hsr_slave_1 entered promiscuous mode
[ 1777.834489][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1777.864769][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1778.035452][ T7066] device bridge_slave_1 left promiscuous mode
[ 1778.042043][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1778.050690][ T7066] device bridge_slave_0 left promiscuous mode
[ 1778.057054][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1778.818590][T17762] loop3: detected capacity change from 0 to 24
[ 1778.829799][T17762] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1778.844102][T17762] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1778.874930][ T7066] team0 (unregistering): Port device team_slave_1 removed
[ 1779.577038][T17765] loop7: detected capacity change from 0 to 32768
[ 1779.605193][T17765] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1779.614162][T17765] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1779.658361][T17765] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 0ms
[ 1779.666999][T17765] gfs2: fsid=syz:syz.0: can't find per_node directory: -2
[ 1780.217519][ T7066] team0 (unregistering): Port device team_slave_0 removed
[ 1781.641774][ T7066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1781.856127][ T7066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1783.034176][ T7066] bond0 (unregistering): Released all slaves
[ 1783.648962][T17783] loop7: detected capacity change from 0 to 24
[ 1783.672962][T17783] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1784.642136][T17783] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1785.537700][T17794] syz.2.2942[17794] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1785.538013][T17794] syz.2.2942[17794] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1785.557909][T17794] siw: device registration error -23
[ 1785.590060][T17794] loop2: detected capacity change from 0 to 64
[ 1787.095223][T17794] hfs: invalid btree extent records
[ 1787.100787][T17794] hfs: unable to open extent tree
[ 1787.106312][T17794] hfs: can't find a HFS filesystem on dev loop2
[ 1788.414251][T17805] loop2: detected capacity change from 0 to 24
[ 1788.447740][T17807] loop3: detected capacity change from 0 to 24
[ 1788.454208][T17805] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1788.486910][T17807] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1788.502274][T17805] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1788.529608][T17807] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1788.547320][T17811] loop7: detected capacity change from 0 to 24
[ 1788.593165][T17811] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1788.605630][T17811] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1788.645734][T17813] loop8: detected capacity change from 0 to 24
[ 1790.863171][T17813] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1791.775935][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.782568][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.057455][T17813] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1792.278840][T17826] syz.3.2949[17826] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1792.279254][T17826] syz.3.2949[17826] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1792.305588][T17826] siw: device registration error -23
[ 1792.343013][T17826] loop3: detected capacity change from 0 to 64
[ 1792.357642][T17826] hfs: invalid btree extent records
[ 1792.363305][T17826] hfs: unable to open extent tree
[ 1792.368530][T17826] hfs: can't find a HFS filesystem on dev loop3
[ 1792.671606][T17632] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1792.889305][T17632] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1793.120111][T17632] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1793.245657][T17632] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1793.307379][T17833] loop8: detected capacity change from 0 to 24
[ 1793.337052][T17833] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1793.385719][T17832] loop3: detected capacity change from 0 to 24
[ 1793.393398][T17832] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1793.403243][T17833] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1793.421708][T17832] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1794.260644][T17845] loop2: detected capacity change from 0 to 512
[ 1794.500027][T17845] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1794.525973][T17632] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1794.569437][T17632] 8021q: adding VLAN 0 to HW filter on device team0
[ 1794.582136][T17845] EXT4-fs: Ignoring removed bh option
[ 1794.606113][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1794.985715][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1795.612512][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1795.638995][T17845] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1795.661258][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1795.690782][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1795.698001][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1795.713448][T17845] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.2952: corrupted inode contents
[ 1795.726131][T17845] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #11: comm syz.2.2952: mark_inode_dirty error
[ 1795.771562][T17845] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2952: invalid indirect mapped block 1 (level 1)
[ 1795.924364][T17853] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1795.940832][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1795.956823][T17845] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.2952: corrupted inode contents
[ 1795.991722][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1796.074866][T17845] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[ 1796.124401][T17845] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.2952: corrupted inode contents
[ 1796.155829][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1796.163092][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1797.158332][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1797.167197][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1797.176309][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1797.195148][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1797.205153][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1797.206280][T17845] EXT4-fs error (device loop2): ext4_truncate:4312: inode #11: comm syz.2.2952: mark_inode_dirty error
[ 1797.214186][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1797.234740][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1797.244168][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1797.292590][T17632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1797.316230][T17632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1797.342593][T17845] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[ 1797.408050][T17845] EXT4-fs (loop2): 1 truncate cleaned up
[ 1797.432537][T17861] loop8: detected capacity change from 0 to 512
[ 1797.542377][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1797.550643][T17845] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1797.559784][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1797.693757][T17861] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1797.785364][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1797.817348][T17861] EXT4-fs: Ignoring removed bh option
[ 1797.950210][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1798.078522][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1798.280936][T16714] Bluetooth: hci4: command 0x1003 tx timeout
[ 1798.296485][T10510] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1798.344535][ T5819] EXT4-fs (loop2): unmounting filesystem.
[ 1798.362251][T17861] EXT4-fs error (device loop8): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1798.412255][T17861] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2955: corrupted inode contents
[ 1798.494881][T17867] loop3: detected capacity change from 0 to 24
[ 1798.522426][T17861] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #11: comm syz.8.2955: mark_inode_dirty error
[ 1798.705517][T17861] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2955: invalid indirect mapped block 1 (level 1)
[ 1798.719996][T17867] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1798.792153][T17861] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2955: corrupted inode contents
[ 1798.812970][T17867] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1798.852559][T17861] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[ 1799.064263][T17870] loop2: detected capacity change from 0 to 32768
[ 1799.093622][T17870] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1799.102033][T17870] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1799.145374][T17870] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 1ms
[ 1799.153963][T17870] gfs2: fsid=syz:syz.0: can't find per_node directory: -2
[ 1800.714274][T17861] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2955: corrupted inode contents
[ 1800.804404][T17861] EXT4-fs error (device loop8): ext4_truncate:4312: inode #11: comm syz.8.2955: mark_inode_dirty error
[ 1802.172067][T17861] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[ 1802.209919][T17861] EXT4-fs (loop8): 1 truncate cleaned up
[ 1802.302714][T17861] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1802.423388][T15324] EXT4-fs (loop8): unmounting filesystem.
[ 1802.433072][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1802.440590][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1802.572244][T17632] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1802.705437][T17890] loop8: detected capacity change from 0 to 24
[ 1802.732700][T17890] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1802.768447][T17890] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1805.292796][T17900] loop2: detected capacity change from 0 to 24
[ 1805.302938][T17900] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1805.359049][T17900] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1806.772955][T17913] loop7: detected capacity change from 0 to 24
[ 1806.846631][T17913] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1806.875605][T17913] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1809.044439][T17923] loop2: detected capacity change from 0 to 24
[ 1809.102863][T17923] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1809.149694][T17925] loop8: detected capacity change from 0 to 512
[ 1809.165746][T17923] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1809.248229][T17925] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1809.322101][T17925] EXT4-fs: Ignoring removed bh option
[ 1810.752892][T17925] EXT4-fs error (device loop8): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1810.842055][T17925] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2967: corrupted inode contents
[ 1810.902188][T17925] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #11: comm syz.8.2967: mark_inode_dirty error
[ 1811.086879][T17925] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2967: invalid indirect mapped block 1 (level 1)
[ 1811.419924][T17925] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2967: corrupted inode contents
[ 1811.529775][T17925] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[ 1812.062064][T17925] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.2967: corrupted inode contents
[ 1812.077545][T17925] EXT4-fs error (device loop8): ext4_truncate:4312: inode #11: comm syz.8.2967: mark_inode_dirty error
[ 1812.090978][T17925] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[ 1812.112843][T17925] EXT4-fs (loop8): 1 truncate cleaned up
[ 1812.148104][T17925] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1812.219265][T15324] EXT4-fs (loop8): unmounting filesystem.
[ 1812.478278][T17945] loop7: detected capacity change from 0 to 24
[ 1812.586194][T17945] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1812.600956][T17948] syz.2.2969[17948] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1812.601257][T17948] syz.2.2969[17948] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1812.620156][T17948] siw: device registration error -23
[ 1812.659484][T17948] loop2: detected capacity change from 0 to 64
[ 1812.676254][T17948] hfs: invalid btree extent records
[ 1812.682841][T17948] hfs: unable to open extent tree
[ 1812.688142][T17948] hfs: can't find a HFS filesystem on dev loop2
[ 1813.528992][T17945] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1813.676302][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2970'.
[ 1816.076149][T17951] loop8: detected capacity change from 0 to 64
[ 1816.149058][T17956] syz.2.2973[17956] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1816.149507][T17956] syz.2.2973[17956] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1816.166887][T17956] siw: device registration error -23
[ 1816.201553][T17956] loop2: detected capacity change from 0 to 64
[ 1817.305195][T17956] hfs: invalid btree extent records
[ 1817.310694][T17956] hfs: unable to open extent tree
[ 1817.315973][T17956] hfs: can't find a HFS filesystem on dev loop2
[ 1818.202620][T17962] syz.3.2974[17962] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1818.202969][T17962] syz.3.2974[17962] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1818.223087][T17962] siw: device registration error -23
[ 1818.262966][T17962] loop3: detected capacity change from 0 to 64
[ 1818.278352][T17962] hfs: invalid btree extent records
[ 1818.283899][T17962] hfs: unable to open extent tree
[ 1818.289103][T17962] hfs: can't find a HFS filesystem on dev loop3
[ 1820.830715][T17971] syz.7.2985[17971] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1820.831018][T17971] syz.7.2985[17971] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1820.850901][T17971] siw: device registration error -23
[ 1820.883734][T17971] loop7: detected capacity change from 0 to 64
[ 1820.920330][T17971] hfs: invalid btree extent records
[ 1820.925968][T17971] hfs: unable to open extent tree
[ 1820.931123][T17971] hfs: can't find a HFS filesystem on dev loop7
[ 1821.747837][T17972] loop3: detected capacity change from 0 to 24
[ 1821.755049][T17972] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1821.762637][T17972] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1822.038423][T10510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1822.084374][T10510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1822.094092][T10510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1822.107265][T10510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1822.116604][T10510] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1822.129292][T10510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1822.532994][T17980] loop8: detected capacity change from 0 to 24
[ 1822.747027][T17980] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1822.886432][T17980] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1822.934394][T17986] loop7: detected capacity change from 0 to 24
[ 1822.948457][T17986] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1822.955940][T17986] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1823.414934][T17990] netlink: 'syz.2.2979': attribute type 10 has an invalid length.
[ 1823.525100][T17990] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1823.534827][T17990] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1824.252109][T16714] Bluetooth: hci4: command 0x0409 tx timeout
[ 1826.332317][T16714] Bluetooth: hci4: command 0x041b tx timeout
[ 1828.411986][T16714] Bluetooth: hci4: command 0x040f tx timeout
[ 1828.464217][T18000] loop3: detected capacity change from 0 to 24
[ 1828.471368][T18000] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1828.492974][T18000] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1828.518238][T18002] loop2: detected capacity change from 0 to 24
[ 1828.653290][T18002] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1828.672141][T18002] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1830.492095][T16714] Bluetooth: hci4: command 0x0419 tx timeout
[ 1831.068713][T18011] loop7: detected capacity change from 0 to 24
[ 1831.093711][T18011] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1831.120803][T18011] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1831.260812][T18015] syz.8.2986[18015] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1831.261180][T18015] syz.8.2986[18015] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1831.301507][T18015] loop8: detected capacity change from 0 to 64
[ 1831.329711][T18015] hfs: invalid btree extent records
[ 1831.335401][T18015] hfs: unable to open extent tree
[ 1831.340604][T18015] hfs: can't find a HFS filesystem on dev loop8
[ 1832.748922][T18021] loop2: detected capacity change from 0 to 24
[ 1832.758095][T18021] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1832.943652][T18021] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1834.330069][T18035] loop7: detected capacity change from 0 to 32768
[ 1835.049393][T18035] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2990 (18035)
[ 1835.898452][T18035] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1835.908702][T18035] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[ 1835.917509][T18035] BTRFS info (device loop7): setting nodatacow, compression disabled
[ 1835.925806][T18035] BTRFS info (device loop7): max_inline at 0
[ 1835.932088][T18035] BTRFS info (device loop7): turning on async discard
[ 1835.938911][T18035] BTRFS info (device loop7): turning off barriers
[ 1835.945466][T18035] BTRFS info (device loop7): turning on flush-on-commit
[ 1835.952486][T18035] BTRFS info (device loop7): enabling disk space caching
[ 1835.959549][T18035] BTRFS info (device loop7): turning on barriers
[ 1835.965964][T18035] BTRFS info (device loop7): force clearing of disk cache
[ 1835.973549][T18035] BTRFS info (device loop7): enabling ssd optimizations
[ 1835.980621][T18035] BTRFS info (device loop7): turning off barriers
[ 1835.987235][T18035] BTRFS info (device loop7): max_inline at 8
[ 1835.993420][T18035] BTRFS error (device loop7): unrecognized mount option 'dont_measure'
[ 1836.002284][T18035] BTRFS error (device loop7): open_ctree failed: -22
[ 1836.461443][T18044] loop2: detected capacity change from 0 to 24
[ 1836.517657][T18044] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1836.543603][   T11] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1836.614511][T18047] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1836.716263][T18048] syz.7.2992[18048] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1836.716572][T18048] syz.7.2992[18048] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1838.328902][T18048] loop7: detected capacity change from 0 to 64
[ 1838.360746][T18048] hfs: invalid btree extent records
[ 1838.367027][T18048] hfs: unable to open extent tree
[ 1838.372367][T18048] hfs: can't find a HFS filesystem on dev loop7
[ 1838.573710][T16714] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1838.580262][T10510] Bluetooth: hci5: command 0x1003 tx timeout
[ 1838.951931][T18044] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1839.066055][T17973] chnl_net:caif_netlink_parms(): no params data found
[ 1840.958462][T18055] loop7: detected capacity change from 0 to 24
[ 1840.995213][T14147] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1841.024032][T18055] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1841.068848][T18058] netlink: 'syz.3.2993': attribute type 10 has an invalid length.
[ 1841.099857][T18055] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1841.225230][T18060] loop2: detected capacity change from 0 to 24
[ 1841.252097][T18060] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1841.275008][T18060] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1842.773748][T18058] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1842.967118][T18058] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1844.764001][T18072] loop7: detected capacity change from 0 to 24
[ 1844.771116][T18072] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1844.921989][T18072] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1847.242819][T17973] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1847.258736][T17973] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1847.273817][T18091] loop8: detected capacity change from 0 to 24
[ 1847.302271][T17973] device bridge_slave_0 entered promiscuous mode
[ 1847.304062][T18091] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1847.412863][T17973] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1847.420071][T18091] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1847.430371][T17973] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1847.462661][T17973] device bridge_slave_1 entered promiscuous mode
[ 1849.695956][T18109] loop7: detected capacity change from 0 to 24
[ 1849.767474][T18109] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1849.767535][T18105] loop2: detected capacity change from 0 to 32768
[ 1849.786395][T18105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3002 (18105)
[ 1849.867500][T18105] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1849.878110][T18105] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1849.886926][T18105] BTRFS info (device loop2): setting nodatacow, compression disabled
[ 1849.895291][T18105] BTRFS info (device loop2): max_inline at 0
[ 1849.901394][T18105] BTRFS info (device loop2): turning on async discard
[ 1849.908431][T18105] BTRFS info (device loop2): turning off barriers
[ 1849.914988][T18105] BTRFS info (device loop2): turning on flush-on-commit
[ 1849.922096][T18105] BTRFS info (device loop2): enabling disk space caching
[ 1849.929288][T18105] BTRFS info (device loop2): turning on barriers
[ 1849.935844][T18105] BTRFS info (device loop2): force clearing of disk cache
[ 1849.943324][T18105] BTRFS info (device loop2): enabling ssd optimizations
[ 1849.950396][T18105] BTRFS info (device loop2): turning off barriers
[ 1849.958094][T18105] BTRFS info (device loop2): max_inline at 8
[ 1849.964550][T18105] BTRFS error (device loop2): unrecognized mount option 'dont_measure'
[ 1849.976300][T18105] BTRFS error (device loop2): open_ctree failed: -22
[ 1850.101430][T18109] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1851.563187][T18130] loop3: detected capacity change from 0 to 24
[ 1851.570255][T18130] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1851.599620][T14397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (14397)
[ 1851.645171][T18130] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1852.033949][T17973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1852.265355][T18138] loop8: detected capacity change from 0 to 24
[ 1852.578908][T17973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1852.613126][T18138] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1852.664396][T18138] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1853.216007][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.222444][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1854.543394][T18156] siw: device registration error -23
[ 1854.563480][T18156] loop3: detected capacity change from 0 to 64
[ 1855.054234][T18156] hfs: invalid btree extent records
[ 1855.059853][T18156] hfs: unable to open extent tree
[ 1855.065215][T18156] hfs: can't find a HFS filesystem on dev loop3
[ 1855.293715][T17973] team0: Port device team_slave_0 added
[ 1855.615870][T14181] device hsr_slave_0 left promiscuous mode
[ 1857.066961][T14181] device hsr_slave_1 left promiscuous mode
[ 1857.263368][T14181] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1857.271783][T14181] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1857.289761][T18169] loop8: detected capacity change from 0 to 24
[ 1857.305977][T14181] device bridge_slave_1 left promiscuous mode
[ 1857.323039][T18169] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1857.334677][T14181] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1857.366476][T18169] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1857.372470][T18173] loop3: detected capacity change from 0 to 24
[ 1857.421730][T14181] device bridge_slave_0 left promiscuous mode
[ 1857.460036][T18173] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1857.478288][T14181] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1857.509730][T18172] loop2: detected capacity change from 0 to 24
[ 1857.661535][T18172] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1857.689767][T18173] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1857.830736][T18172] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1858.338028][T18177] loop7: detected capacity change from 0 to 512
[ 1858.345435][T18177] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1858.364343][T18177] EXT4-fs: Ignoring removed bh option
[ 1858.412482][T18177] EXT4-fs error (device loop7): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1858.472651][T18177] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.3014: corrupted inode contents
[ 1859.829857][T18177] EXT4-fs error (device loop7): ext4_dirty_inode:6119: inode #11: comm syz.7.3014: mark_inode_dirty error
[ 1859.886399][T18177] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3014: invalid indirect mapped block 1 (level 1)
[ 1861.534237][T18177] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.3014: corrupted inode contents
[ 1861.701450][T18177] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[ 1861.817574][T18177] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.3014: corrupted inode contents
[ 1861.970520][T18177] EXT4-fs error (device loop7): ext4_truncate:4312: inode #11: comm syz.7.3014: mark_inode_dirty error
[ 1862.120776][T18177] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[ 1862.328327][T18177] EXT4-fs (loop7): 1 truncate cleaned up
[ 1862.403786][T18177] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1862.458605][T18193] loop2: detected capacity change from 0 to 24
[ 1862.493279][T18193] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1862.515268][T18192] loop3: detected capacity change from 0 to 24
[ 1862.540328][T18192] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1862.548930][T18193] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1862.563914][T15421] EXT4-fs (loop7): unmounting filesystem.
[ 1862.605981][T18192] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1863.384221][T18199] loop7: detected capacity change from 0 to 24
[ 1863.570374][T18199] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1863.628314][T18199] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1864.299647][T18207] syz.8.3019[18207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1864.300074][T18207] syz.8.3019[18207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1865.815571][T18207] loop8: detected capacity change from 0 to 64
[ 1865.844266][T18207] hfs: invalid btree extent records
[ 1865.849804][T18207] hfs: unable to open extent tree
[ 1865.855068][T18207] hfs: can't find a HFS filesystem on dev loop8
[ 1867.076354][T14181] team0 (unregistering): Port device team_slave_1 removed
[ 1867.204179][T18215] loop2: detected capacity change from 0 to 24
[ 1867.272219][T18215] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1867.327064][T18215] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1869.551263][T14181] team0 (unregistering): Port device team_slave_0 removed
[ 1869.878948][T18232] loop7: detected capacity change from 0 to 24
[ 1869.987431][T18232] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1870.054286][T18232] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1870.142942][T14181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1872.315659][T14181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1872.394574][T18244] loop3: detected capacity change from 0 to 24
[ 1872.422854][T18244] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1872.461931][   T33] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[ 1872.486202][T18244] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1872.548396][T18246] loop7: detected capacity change from 0 to 24
[ 1872.705984][   T33] usb 3-1: not running at top speed; connect to a high speed hub
[ 1872.726429][T18246] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1874.008771][   T33] usb 3-1: config 7 has no interfaces?
[ 1874.029060][T18246] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1874.103253][   T33] usb 3-1: New USB device found, idVendor=1199, idProduct=9055, bcdDevice=11.03
[ 1875.666507][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1875.711347][   T33] usb 3-1: Product: syz
[ 1875.715652][   T33] usb 3-1: Manufacturer: syz
[ 1875.720301][   T33] usb 3-1: SerialNumber: syz
[ 1875.728827][   T33] usb 3-1: can't set config #7, error -71
[ 1875.736672][   T33] usb 3-1: USB disconnect, device number 3
[ 1876.551348][T18257] loop3: detected capacity change from 0 to 24
[ 1876.563182][T18260] loop8: detected capacity change from 0 to 512
[ 1876.571409][T18259] loop2: detected capacity change from 0 to 24
[ 1876.591240][T18259] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1876.598686][T18260] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1876.608656][T18257] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1876.645037][T18257] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1876.656028][T18260] EXT4-fs: Ignoring removed bh option
[ 1876.691761][T18262] syz.7.3029[18262] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1876.692351][T18262] syz.7.3029[18262] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1876.728608][T18262] loop7: detected capacity change from 0 to 64
[ 1876.757909][T18262] hfs: invalid btree extent records
[ 1876.763640][T18262] hfs: unable to open extent tree
[ 1876.769168][T18262] hfs: can't find a HFS filesystem on dev loop7
[ 1876.844135][T18259] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1877.079718][T18260] EXT4-fs error (device loop8): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1877.313618][T14181] bond0 (unregistering): Released all slaves
[ 1877.425776][T18260] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.3032: corrupted inode contents
[ 1878.192700][T18260] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #11: comm syz.8.3032: mark_inode_dirty error
[ 1878.196305][T18270] loop7: detected capacity change from 0 to 24
[ 1878.233610][T18270] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1878.263557][T18260] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3032: invalid indirect mapped block 1 (level 1)
[ 1878.277558][T18260] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.3032: corrupted inode contents
[ 1878.292323][T18260] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[ 1878.301451][T18260] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.3032: corrupted inode contents
[ 1878.315712][T18260] EXT4-fs error (device loop8): ext4_truncate:4312: inode #11: comm syz.8.3032: mark_inode_dirty error
[ 1878.327734][T18260] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[ 1878.337488][T18260] EXT4-fs (loop8): 1 truncate cleaned up
[ 1878.345403][T18270] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1878.391636][T18260] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1879.409362][T17973] team0: Port device team_slave_1 added
[ 1882.926898][T15324] EXT4-fs (loop8): unmounting filesystem.
[ 1883.199076][T18289] loop7: detected capacity change from 0 to 40427
[ 1883.233014][T18289] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1883.241000][T18289] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1883.251014][T18289] F2FS-fs (loop7): invalid crc value
[ 1883.303197][T18289] F2FS-fs (loop7): Found nat_bits in checkpoint
[ 1883.344144][ T8028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1883.371691][ T8028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1883.381631][T18289] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1883.388783][T18289] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1883.390721][ T8028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1883.434759][ T8028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1883.444426][ T8028] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1883.451778][ T8028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1883.728895][   T26] audit: type=1800 audit(1757763356.850:31): pid=18304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3039" name="file1" dev="loop7" ino=10 res=0 errno=0
[ 1884.667364][T18305] syz.8.3040[18305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1884.667848][T18305] syz.8.3040[18305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1884.706592][T18305] loop8: detected capacity change from 0 to 64
[ 1884.979669][T18305] hfs: invalid btree extent records
[ 1884.985558][T18305] hfs: unable to open extent tree
[ 1884.990873][T18305] hfs: can't find a HFS filesystem on dev loop8
[ 1885.533239][ T8028] Bluetooth: hci5: command 0x0409 tx timeout
[ 1886.075187][T18317] siw: device registration error -23
[ 1886.098754][T18317] loop2: detected capacity change from 0 to 64
[ 1886.118565][T18317] hfs: invalid btree extent records
[ 1886.124214][T18317] hfs: unable to open extent tree
[ 1886.129432][T18317] hfs: can't find a HFS filesystem on dev loop2
[ 1887.312245][T18292] chnl_net:caif_netlink_parms(): no params data found
[ 1887.509108][T18326] loop2: detected capacity change from 0 to 24
[ 1887.580409][T18326] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1887.612061][ T8028] Bluetooth: hci5: command 0x041b tx timeout
[ 1887.709538][T18326] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1887.847388][T18292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1887.865407][T18292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1887.906099][T18292] device bridge_slave_0 entered promiscuous mode
[ 1888.453174][T18292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1888.460611][T18292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1888.469355][T18292] device bridge_slave_1 entered promiscuous mode
[ 1888.634980][T18292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1888.716210][T18292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1888.899276][T18292] team0: Port device team_slave_0 added
[ 1888.952943][T18292] team0: Port device team_slave_1 added
[ 1888.997234][T18340] loop3: detected capacity change from 0 to 24
[ 1889.022846][T18340] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1889.045267][T18342] loop7: detected capacity change from 0 to 24
[ 1889.058508][T18342] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1889.065709][T18342] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1889.692111][T16714] Bluetooth: hci5: command 0x040f tx timeout
[ 1890.462782][T18340] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1890.652252][T16714] Bluetooth: hci4: command 0x1003 tx timeout
[ 1890.659970][ T8028] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1890.718599][T18346] loop2: detected capacity change from 0 to 24
[ 1890.726947][T18346] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1890.742951][T18346] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1891.772193][T16714] Bluetooth: hci5: command 0x0419 tx timeout
[ 1892.206200][T18292] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1892.292471][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1892.319720][T18292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1892.334137][T14181] device bridge_slave_1 left promiscuous mode
[ 1892.340372][T14181] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1892.463451][T14181] device bridge_slave_0 left promiscuous mode
[ 1892.486006][T14181] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1892.630573][T14181] team0 (unregistering): Port device team_slave_1 removed
[ 1892.852264][T14181] team0 (unregistering): Port device team_slave_0 removed
[ 1893.172439][T14181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1893.218527][T18362] loop2: detected capacity change from 0 to 24
[ 1893.312845][T18362] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1893.343294][T18362] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1895.735253][T14181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1896.032748][T18381] siw: device registration error -23
[ 1896.045418][T18385] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1896.148853][T18384] loop2: detected capacity change from 0 to 64
[ 1896.182964][T18384] hfs: invalid btree extent records
[ 1896.188267][T18384] hfs: unable to open extent tree
[ 1896.193385][T18384] hfs: can't find a HFS filesystem on dev loop2
[ 1896.686375][T14181] bond0 (unregistering): Released all slaves
[ 1896.802763][T18292] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1896.840988][T18292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1896.948308][T18292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1897.370091][T18292] device hsr_slave_0 entered promiscuous mode
[ 1897.520604][T18292] device hsr_slave_1 entered promiscuous mode
[ 1897.559353][T18402] loop3: detected capacity change from 0 to 24
[ 1897.597015][T18402] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1897.617871][T18402] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1898.092048][T16714] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1898.098608][ T8028] Bluetooth: hci4: command 0x1003 tx timeout
[ 1899.643820][T18408] loop2: detected capacity change from 0 to 24
[ 1899.651251][T18408] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1899.720197][T18408] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1900.317645][T14361] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[ 1900.804269][T14361] usb 8-1: not running at top speed; connect to a high speed hub
[ 1900.820917][T14361] usb 8-1: config 7 has no interfaces?
[ 1900.829680][T14361] usb 8-1: New USB device found, idVendor=1199, idProduct=9055, bcdDevice=11.03
[ 1900.842228][T14361] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1900.851311][T14361] usb 8-1: Product: syz
[ 1900.855638][T14361] usb 8-1: Manufacturer: syz
[ 1900.860376][T14361] usb 8-1: SerialNumber: syz
[ 1901.129865][T14361] usb 8-1: USB disconnect, device number 2
[ 1902.233827][T18412] loop3: detected capacity change from 0 to 40427
[ 1902.246982][T18412] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1902.261584][T18412] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1902.346645][T18440] syz.7.3064[18440] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1902.346969][T18440] syz.7.3064[18440] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1902.365453][T18412] F2FS-fs (loop3): invalid crc value
[ 1902.435597][T18440] loop7: detected capacity change from 0 to 64
[ 1902.453858][T18440] hfs: invalid btree extent records
[ 1902.459421][T18440] hfs: unable to open extent tree
[ 1902.465429][T18440] hfs: can't find a HFS filesystem on dev loop7
[ 1902.826609][T18412] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4)
[ 1903.325158][T18446] syz.2.3065[18446] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1903.325521][T18446] syz.2.3065[18446] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1904.321188][T18445] loop8: detected capacity change from 0 to 24
[ 1904.370842][T18447] loop2: detected capacity change from 0 to 64
[ 1904.424685][T18447] hfs: invalid btree extent records
[ 1904.430192][T18447] hfs: unable to open extent tree
[ 1904.436227][T18447] hfs: can't find a HFS filesystem on dev loop2
[ 1905.159293][T18445] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1905.262051][T18445] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1905.274881][T18451] loop7: detected capacity change from 0 to 24
[ 1905.282202][T18451] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1905.289358][T18451] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1905.358321][T18453] loop2: detected capacity change from 0 to 512
[ 1905.380863][T18453] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1906.931231][T18292] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1907.259421][T18292] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1907.394053][T18453] EXT4-fs: Ignoring removed bh option
[ 1907.496641][T18292] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1907.755988][T18453] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1908.122231][T18453] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.3069: corrupted inode contents
[ 1908.707676][T18471] loop7: detected capacity change from 0 to 512
[ 1908.714969][T18471] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1908.721636][T18471] EXT4-fs: Ignoring removed bh option
[ 1908.732047][T18471] EXT4-fs error (device loop7): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1908.781993][T18471] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.3071: corrupted inode contents
[ 1908.826962][T18453] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #11: comm syz.2.3069: mark_inode_dirty error
[ 1908.833877][T18471] EXT4-fs error (device loop7): ext4_dirty_inode:6119: inode #11: comm syz.7.3071: mark_inode_dirty error
[ 1908.917251][T18453] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3069: invalid indirect mapped block 1 (level 1)
[ 1908.931084][T18471] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3071: invalid indirect mapped block 1 (level 1)
[ 1909.027220][T18471] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.3071: corrupted inode contents
[ 1909.043172][T18453] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.3069: corrupted inode contents
[ 1909.256977][T18453] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[ 1909.265790][T18471] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem
[ 1909.295423][T18292] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1909.343099][T18453] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.3069: corrupted inode contents
[ 1909.357286][T18475] syz.3.3073[18475] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1909.357362][T18475] syz.3.3073[18475] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1909.405575][T18475] loop3: detected capacity change from 0 to 64
[ 1909.677343][T18475] hfs: invalid btree extent records
[ 1909.683121][T18475] hfs: unable to open extent tree
[ 1909.688496][T18475] hfs: can't find a HFS filesystem on dev loop3
[ 1909.927726][T18471] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #11: comm syz.7.3071: corrupted inode contents
[ 1909.979846][T18453] EXT4-fs error (device loop2): ext4_truncate:4312: inode #11: comm syz.2.3069: mark_inode_dirty error
[ 1909.991606][T18453] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[ 1910.013254][T18453] EXT4-fs (loop2): 1 truncate cleaned up
[ 1910.022134][T18453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1910.083100][T18471] EXT4-fs error (device loop7): ext4_truncate:4312: inode #11: comm syz.7.3071: mark_inode_dirty error
[ 1910.102468][T18471] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem
[ 1910.147794][T18471] EXT4-fs (loop7): 1 truncate cleaned up
[ 1910.153742][T18471] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1910.162641][T18484] loop8: detected capacity change from 0 to 24
[ 1910.169866][T18484] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1910.205315][ T5819] EXT4-fs (loop2): unmounting filesystem.
[ 1910.308713][T18484] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1911.168353][T18292] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1911.205164][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1912.556050][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1912.625119][T18292] 8021q: adding VLAN 0 to HW filter on device team0
[ 1912.637912][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1912.647927][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1912.656763][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1912.664053][ T4772] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1912.682519][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1912.690520][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1912.699620][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1912.709367][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1912.716554][ T4772] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1912.725701][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1912.735303][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1912.993828][T18494] loop2: detected capacity change from 0 to 40427
[ 1913.016476][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1913.034430][T18494] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1913.042771][T18494] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1913.052662][T18494] F2FS-fs (loop2): invalid crc value
[ 1913.077275][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1913.131639][T18494] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1913.163585][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1913.184243][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1913.193648][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1913.202391][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1913.210189][T18494] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1913.218075][T18494] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1913.219291][T15421] EXT4-fs (loop7): unmounting filesystem.
[ 1913.228459][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1913.459174][T18292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1913.553323][   T26] audit: type=1800 audit(1757763386.670:32): pid=18509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3076" name="file1" dev="loop2" ino=10 res=0 errno=0
[ 1914.003444][T18292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1914.333828][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1914.457048][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1914.492306][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3079'.
[ 1914.655473][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.662335][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.474602][T18533] loop3: detected capacity change from 0 to 24
[ 1915.487010][T18533] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1915.561970][T18533] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1917.177788][T18537] loop7: detected capacity change from 0 to 32768
[ 1917.298787][T18537] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1917.310121][T18537] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1917.355837][T18537] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 0ms
[ 1917.363926][T18537] gfs2: fsid=syz:syz.0: can't find per_node directory: -2
[ 1917.589512][T18547] loop3: detected capacity change from 0 to 24
[ 1917.597483][T18547] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1917.614905][T18547] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1917.782424][T18549] syz.8.3085[18549] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1917.782787][T18549] syz.8.3085[18549] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1917.815620][T18549] loop8: detected capacity change from 0 to 64
[ 1917.845675][T18549] hfs: invalid btree extent records
[ 1917.851492][T18549] hfs: unable to open extent tree
[ 1917.856838][T18549] hfs: can't find a HFS filesystem on dev loop8
[ 1922.318751][T18567] loop2: detected capacity change from 0 to 32768
[ 1922.335647][T18567] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1922.343920][T18567] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1922.373540][T18567] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 0ms
[ 1922.381385][T18567] gfs2: fsid=syz:syz.0: can't find per_node directory: -2
[ 1922.916656][T18589] syz.2.3090[18589] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1922.916764][T18589] syz.2.3090[18589] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1923.210072][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1923.500409][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1923.565636][T18292] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1923.600685][T18599] loop8: detected capacity change from 0 to 24
[ 1923.676109][T18599] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1923.682400][T18602] loop3: detected capacity change from 0 to 24
[ 1923.709860][T18602] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1923.753872][T18599] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1923.769153][T18602] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1927.344120][T18610] loop2: detected capacity change from 0 to 40427
[ 1927.351969][T18610] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1927.359793][T18610] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1927.374932][T18610] F2FS-fs (loop2): invalid crc value
[ 1927.406202][T18613] loop7: detected capacity change from 0 to 24
[ 1927.426638][T18610] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1927.533304][T18610] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1927.534100][T18613] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1927.540393][T18610] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1927.753137][T18613] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1927.839577][   T26] audit: type=1800 audit(1757763400.960:33): pid=18619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3094" name="file1" dev="loop2" ino=10 res=0 errno=0
[ 1929.354269][T18627] loop3: detected capacity change from 0 to 24
[ 1929.361505][T18627] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1929.379832][T18627] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1930.059127][T18635] loop7: detected capacity change from 0 to 24
[ 1930.227819][T18635] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1930.459026][T18635] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1933.406531][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'.
[ 1934.364401][T18663] loop7: detected capacity change from 0 to 24
[ 1934.412411][T18663] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1934.459316][T18663] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1935.333166][T18672] loop2: detected capacity change from 0 to 24
[ 1935.348591][T18672] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1935.381318][T18672] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1936.445665][T18678] siw: device registration error -23
[ 1936.476350][T18678] loop7: detected capacity change from 0 to 64
[ 1937.069953][T18678] hfs: invalid btree extent records
[ 1937.075775][T18678] hfs: unable to open extent tree
[ 1937.080964][T18678] hfs: can't find a HFS filesystem on dev loop7
[ 1937.469189][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1937.503538][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1937.663505][T18684] loop8: detected capacity change from 0 to 24
[ 1937.679065][T18684] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1937.699019][T18684] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1938.677237][T18692] loop3: detected capacity change from 0 to 24
[ 1938.677720][T18693] loop2: detected capacity change from 0 to 24
[ 1938.723406][T18693] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1938.762877][T18695] loop7: detected capacity change from 0 to 24
[ 1938.808465][T18693] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1938.857293][T18692] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1938.872440][T18695] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1938.922856][T18695] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1938.937287][T18692] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1943.315836][ T8028] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1943.327679][ T8028] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1943.338820][ T8028] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1943.348019][ T8028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1943.356360][ T8028] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1943.356880][T18714] loop7: detected capacity change from 0 to 24
[ 1943.371138][T18714] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1943.374106][T10510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1943.466463][T18718] loop2: detected capacity change from 0 to 24
[ 1943.473923][T18718] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1943.542119][T18714] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1943.572159][T18718] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1945.453428][T16714] Bluetooth: hci4: command 0x0409 tx timeout
[ 1946.991069][T18732] loop8: detected capacity change from 0 to 24
[ 1947.015756][T18732] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1947.038578][T18732] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1947.161633][T18737] loop2: detected capacity change from 0 to 24
[ 1947.370320][T18737] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1947.506612][T18737] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1947.531984][T16714] Bluetooth: hci4: command 0x041b tx timeout
[ 1947.640300][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3118'.
[ 1948.800848][T18750] loop8: detected capacity change from 0 to 64
[ 1948.820419][T18750] hfs: invalid btree extent records
[ 1948.826082][T18750] hfs: unable to open extent tree
[ 1948.831356][T18750] hfs: can't find a HFS filesystem on dev loop8
[ 1949.612207][T16714] Bluetooth: hci4: command 0x040f tx timeout
[ 1949.690644][T18752] loop3: detected capacity change from 0 to 24
[ 1949.698186][T18752] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1949.714717][T18752] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1951.198793][T18710] chnl_net:caif_netlink_parms(): no params data found
[ 1951.387558][T18758] loop8: detected capacity change from 0 to 64
[ 1951.418592][T18758] hfs: invalid btree extent records
[ 1951.424605][T18758] hfs: unable to open extent tree
[ 1951.429818][T18758] hfs: can't find a HFS filesystem on dev loop8
[ 1951.691892][T16714] Bluetooth: hci4: command 0x0419 tx timeout
[ 1952.444376][T18765] syz.7.3124[18765] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1952.444643][T18765] syz.7.3124[18765] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1952.485530][T18765] loop7: detected capacity change from 0 to 64
[ 1952.524190][T18765] hfs: invalid btree extent records
[ 1952.529935][T18765] hfs: unable to open extent tree
[ 1952.535164][T18765] hfs: can't find a HFS filesystem on dev loop7
[ 1953.371333][T18768] loop3: detected capacity change from 0 to 24
[ 1953.428998][T18768] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1953.450446][T18768] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1953.610593][T18776] syz.7.3126[18776] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1953.610899][T18776] syz.7.3126[18776] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1953.642892][T18776] loop7: detected capacity change from 0 to 64
[ 1954.720598][T18776] hfs: invalid btree extent records
[ 1954.726396][T18776] hfs: unable to open extent tree
[ 1954.731699][T18776] hfs: can't find a HFS filesystem on dev loop7
[ 1955.266213][T18710] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1955.357659][T18782] loop3: detected capacity change from 0 to 24
[ 1955.399087][T18710] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1955.410222][T18782] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1955.519778][T18782] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1955.545019][T18710] device bridge_slave_0 entered promiscuous mode
[ 1955.564095][T18784] loop7: detected capacity change from 0 to 24
[ 1955.571366][T18784] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1955.578783][T18784] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1955.583099][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'.
[ 1958.288561][T18789] loop8: detected capacity change from 0 to 24
[ 1958.297288][T18793] loop7: detected capacity change from 0 to 24
[ 1958.305711][T18792] loop3: detected capacity change from 0 to 24
[ 1958.325633][T18792] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1958.333308][T18793] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1958.356577][T18793] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1958.364954][T18792] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1958.388659][T18789] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1959.267665][T18789] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1959.307984][T18710] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1959.350195][T18710] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1959.415703][T18710] device bridge_slave_1 entered promiscuous mode
[ 1960.190194][T18805] loop2: detected capacity change from 0 to 24
[ 1960.343884][T18805] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 1960.476238][T18805] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1961.358044][T18710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1962.143686][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3138'.
[ 1962.333119][T18821] loop3: detected capacity change from 0 to 24
[ 1962.383559][T18821] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1963.626416][T18821] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1966.344422][T18710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1966.514496][T18844] loop8: detected capacity change from 0 to 64
[ 1966.530062][T18844] hfs: invalid btree extent records
[ 1966.535714][T18844] hfs: unable to open extent tree
[ 1966.540891][T18844] hfs: can't find a HFS filesystem on dev loop8
[ 1967.352917][T18846] loop3: detected capacity change from 0 to 24
[ 1967.360071][T18846] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1967.378332][T18846] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1968.004655][T18854] loop7: detected capacity change from 0 to 24
[ 1968.121015][T18854] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1968.432985][T18857] loop8: detected capacity change from 0 to 24
[ 1968.453214][T18858] syz.2.3145[18858] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1968.453695][T18858] syz.2.3145[18858] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1968.481983][T18854] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1968.504990][T18857] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1968.510753][T18710] team0: Port device team_slave_0 added
[ 1968.536372][T18858] loop2: detected capacity change from 0 to 64
[ 1968.569972][T18858] hfs: invalid btree extent records
[ 1968.575713][T18858] hfs: unable to open extent tree
[ 1968.581369][T18858] hfs: can't find a HFS filesystem on dev loop2
[ 1969.532033][T18857] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1970.668842][T18710] team0: Port device team_slave_1 added
[ 1970.683019][T18870] loop3: detected capacity change from 0 to 24
[ 1970.733118][T18870] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1970.781872][T18870] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1971.734745][T18710] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1971.749049][T18877] loop7: detected capacity change from 0 to 24
[ 1971.756266][T18877] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1972.109808][T18710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1972.203610][T18877] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1972.328305][T18710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1972.545346][T16420] device hsr_slave_0 left promiscuous mode
[ 1973.058886][T16420] device hsr_slave_1 left promiscuous mode
[ 1973.074718][T18884] loop8: detected capacity change from 0 to 24
[ 1973.137392][T16420] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1973.162738][T18884] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1973.173356][T18884] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1973.194901][T16420] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1973.218181][T18890] loop3: detected capacity change from 0 to 512
[ 1973.242809][T16420] device bridge_slave_1 left promiscuous mode
[ 1973.259909][T16420] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1973.290981][T16420] device bridge_slave_0 left promiscuous mode
[ 1973.318349][T16420] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1973.373471][T18890] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1973.461713][T18890] EXT4-fs: Ignoring removed bh option
[ 1973.746863][T18890] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1973.950711][T18890] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.3151: corrupted inode contents
[ 1974.108790][T18890] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #11: comm syz.3.3151: mark_inode_dirty error
[ 1974.165250][T18890] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3151: invalid indirect mapped block 1 (level 1)
[ 1974.209601][T18890] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.3151: corrupted inode contents
[ 1974.242590][T18890] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[ 1974.251733][T18890] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #11: comm syz.3.3151: corrupted inode contents
[ 1974.272759][T18890] EXT4-fs error (device loop3): ext4_truncate:4312: inode #11: comm syz.3.3151: mark_inode_dirty error
[ 1974.292106][T18890] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[ 1974.311450][T18890] EXT4-fs (loop3): 1 truncate cleaned up
[ 1974.317391][T18890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1974.691140][T18900] loop8: detected capacity change from 0 to 24
[ 1974.719353][T18900] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1974.764622][T18900] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1976.095170][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.101530][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1977.471536][T15924] EXT4-fs (loop3): unmounting filesystem.
[ 1977.579507][T16420] team0 (unregistering): Port device team_slave_1 removed
[ 1977.688077][T16420] team0 (unregistering): Port device team_slave_0 removed
[ 1977.771978][T16420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1978.278215][T18911] loop8: detected capacity change from 0 to 24
[ 1978.461261][T18911] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1978.496503][T18911] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1978.610156][T16420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1979.774476][T18919] loop3: detected capacity change from 0 to 24
[ 1979.781910][T18919] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1979.814845][T18919] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1979.910181][T18921] loop8: detected capacity change from 0 to 24
[ 1980.001701][T18921] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1980.015377][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3159'.
[ 1980.077641][T18921] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1982.130693][T18933] loop8: detected capacity change from 0 to 24
[ 1982.144437][T18933] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1982.182864][T18933] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1983.910381][T18942] loop8: detected capacity change from 0 to 24
[ 1983.924947][T18942] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1983.936664][T18942] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1984.007018][T16420] bond0 (unregistering): Released all slaves
[ 1984.215322][T18879] netlink: 'syz.2.3149': attribute type 10 has an invalid length.
[ 1984.969396][T18710] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1984.981833][T18710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1985.336663][T18710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1986.119867][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3152'.
[ 1986.140004][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3166'.
[ 1987.842590][T18710] device hsr_slave_0 entered promiscuous mode
[ 1987.914229][T18980] siw: device registration error -23
[ 1987.935068][T18980] loop3: detected capacity change from 0 to 64
[ 1988.958155][T18980] hfs: invalid btree extent records
[ 1988.963877][T18980] hfs: unable to open extent tree
[ 1988.969242][T18980] hfs: can't find a HFS filesystem on dev loop3
[ 1989.360006][T18984] syz.7.3169[18984] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1989.360314][T18984] syz.7.3169[18984] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1989.380609][T18984] siw: device registration error -23
[ 1989.424100][T18984] loop7: detected capacity change from 0 to 64
[ 1989.437725][T18984] hfs: invalid btree extent records
[ 1989.443271][T18984] hfs: unable to open extent tree
[ 1989.448925][T18984] hfs: can't find a HFS filesystem on dev loop7
[ 1990.114802][T18710] device hsr_slave_1 entered promiscuous mode
[ 1990.127468][T14397] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1990.447715][T18987] loop8: detected capacity change from 0 to 24
[ 1990.455150][T18987] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1990.581460][T18987] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1991.791544][T19002] loop2: detected capacity change from 0 to 512
[ 1993.485177][T19010] loop3: detected capacity change from 0 to 512
[ 1994.030434][T19002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1994.040176][T19002] ext4 filesystem being mounted at /674/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1994.123561][T19010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1994.132663][T19010] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1994.214800][T19013] loop7: detected capacity change from 0 to 24
[ 1994.292982][T19013] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1994.332237][T19013] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1995.180200][T15924] EXT4-fs (loop3): unmounting filesystem.
[ 1995.447256][ T5819] EXT4-fs (loop2): unmounting filesystem.
[ 1995.673300][T19022] loop3: detected capacity change from 0 to 24
[ 1995.680392][T19022] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1995.737575][T19022] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1995.846067][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3178'.
[ 1997.268959][T19040] syz.7.3179[19040] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1997.269353][T19040] syz.7.3179[19040] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1997.300564][T19040] siw: device registration error -23
[ 1997.335225][T19040] loop7: detected capacity change from 0 to 64
[ 1997.445469][T19040] hfs: invalid btree extent records
[ 1997.450945][T19040] hfs: unable to open extent tree
[ 1997.456640][T19040] hfs: can't find a HFS filesystem on dev loop7
[ 1998.229424][T19041] loop3: detected capacity change from 0 to 24
[ 1998.290477][T19041] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1998.334671][T19041] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1998.526792][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3180'.
[ 1999.790724][T19055] loop3: detected capacity change from 0 to 24
[ 1999.877015][T19055] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1999.923203][T19059] loop8: detected capacity change from 0 to 24
[ 1999.949642][T19055] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1999.997154][T19059] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 2000.379154][T19059] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2000.949250][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3181'.
[ 2001.299019][T16420] device hsr_slave_0 left promiscuous mode
[ 2001.371409][T16420] device hsr_slave_1 left promiscuous mode
[ 2001.422321][T16420] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2001.453947][T16420] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2001.493392][T16420] device bridge_slave_1 left promiscuous mode
[ 2001.539800][T16420] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2001.726382][T16420] device bridge_slave_0 left promiscuous mode
[ 2001.739277][T16420] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2002.158976][T19069] loop3: detected capacity change from 0 to 32768
[ 2002.181026][T19069] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 2002.191191][T19069] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 2002.239075][T19069] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 0ms
[ 2002.247142][T19069] gfs2: fsid=syz:syz.0: can't find per_node directory: -2
[ 2002.252168][T19071] loop8: detected capacity change from 0 to 512
[ 2002.261462][T19071] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 2002.341996][T19071] EXT4-fs: Ignoring removed bh option
[ 2002.351364][T10510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2002.364628][T10510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2002.374167][T10510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2002.389349][T10510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2002.396904][T19075] loop2: detected capacity change from 0 to 24
[ 2002.396943][T10510] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2002.417213][T10510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2002.434997][T19058] loop7: detected capacity change from 0 to 32768
[ 2002.463789][T19075] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 2002.500032][T19058] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 2002.553824][T19075] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2002.567384][T19071] EXT4-fs error (device loop8): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 2002.581954][T19058] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 2002.612776][T19071] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.3186: corrupted inode contents
[ 2002.806132][T19071] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #11: comm syz.8.3186: mark_inode_dirty error
[ 2002.822362][T19058] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 0ms
[ 2002.842478][T19071] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3186: invalid indirect mapped block 1 (level 1)
[ 2002.852462][T19058] gfs2: fsid=syz:syz.0: can't find per_node directory: -2
[ 2003.827283][T19071] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.3186: corrupted inode contents
[ 2003.905774][T19071] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[ 2003.923931][T19071] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.3186: corrupted inode contents
[ 2003.941080][T19071] EXT4-fs error (device loop8): ext4_truncate:4312: inode #11: comm syz.8.3186: mark_inode_dirty error
[ 2003.958801][T19071] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[ 2003.970675][T19071] EXT4-fs (loop8): 1 truncate cleaned up
[ 2004.006507][T19071] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 2004.583299][T10510] Bluetooth: hci4: command 0x0409 tx timeout
[ 2006.652022][T10510] Bluetooth: hci4: command 0x041b tx timeout
[ 2006.969529][T15324] EXT4-fs (loop8): unmounting filesystem.
[ 2007.400858][T16420] team0 (unregistering): Port device team_slave_1 removed
[ 2007.416524][T19095] loop8: detected capacity change from 0 to 24
[ 2007.532624][T19095] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 2007.606429][T19096] siw: device registration error -23
[ 2007.629427][T19096] loop7: detected capacity change from 0 to 64
[ 2007.734379][T19096] hfs: invalid btree extent records
[ 2007.740011][T19096] hfs: unable to open extent tree
[ 2007.745418][T19096] hfs: can't find a HFS filesystem on dev loop7
[ 2007.773070][T19095] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2007.994288][T16420] team0 (unregistering): Port device team_slave_0 removed
[ 2008.389438][T19099] loop3: detected capacity change from 0 to 24
[ 2008.403174][T19099] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 2008.421923][T19099] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2008.731988][T10510] Bluetooth: hci4: command 0x040f tx timeout
[ 2008.861315][T16420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2009.072439][T19105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3193'.
[ 2009.587691][T16420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2011.037697][T10510] Bluetooth: hci4: command 0x0419 tx timeout
[ 2011.124565][T19116] loop7: detected capacity change from 0 to 512
[ 2012.058476][T19116] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 2012.067932][T19116] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2012.266838][T16420] bond0 (unregistering): Released all slaves
[ 2012.369870][T15421] EXT4-fs (loop7): unmounting filesystem.
[ 2012.882569][T19131] loop2: detected capacity change from 0 to 24
[ 2012.897948][T19131] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 2012.922169][T19131] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2013.465508][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3196'.
[ 2013.580412][T19136] loop7: detected capacity change from 0 to 24
[ 2013.638128][T19122] netlink: 'syz.3.3197': attribute type 10 has an invalid length.
[ 2013.758119][T19136] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 2014.471999][T19136] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2017.215352][T19148] loop2: detected capacity change from 0 to 24
[ 2017.223503][T19148] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 2017.238718][T19148] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2018.793635][T19158] loop3: detected capacity change from 0 to 24
[ 2018.867844][T19158] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 2018.897627][T19158] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2019.100256][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3203'.
[ 2019.602324][T19067] chnl_net:caif_netlink_parms(): no params data found
[ 2020.701832][ T4313] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 2021.199579][T19173] loop7: detected capacity change from 0 to 24
[ 2021.294142][ T4313] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2021.302888][T19173] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 2021.385311][T19173] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2021.708614][ T4313] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2021.717738][ T4313] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2021.979897][ T4313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2021.994469][ T4313] usb 9-1: config 0 descriptor??
[ 2023.600821][ T4313] usb 9-1: can't set config #0, error -71
[ 2023.625364][ T4313] usb 9-1: USB disconnect, device number 2
[ 2023.693278][T19067] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2023.700627][T19067] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2023.708941][T19067] device bridge_slave_0 entered promiscuous mode
[ 2023.717940][T19067] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2023.725262][T19067] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2023.734180][T19067] device bridge_slave_1 entered promiscuous mode
[ 2023.819009][T19067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2023.857699][T19067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2025.890057][T19195] loop2: detected capacity change from 0 to 512
[ 2026.311640][T19195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 2026.320795][T19195] ext4 filesystem being mounted at /681/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2026.445026][T19067] team0: Port device team_slave_0 added
[ 2026.762963][T19207] loop3: detected capacity change from 0 to 512
[ 2026.982494][T19207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 2026.992047][T19207] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2027.282684][T19067] team0: Port device team_slave_1 added
[ 2028.195960][ T5819] EXT4-fs (loop2): unmounting filesystem.
[ 2028.214564][T15924] EXT4-fs (loop3): unmounting filesystem.
[ 2028.545909][T19067] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2028.716086][T19067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2029.146757][T19067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2029.258796][T19067] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2029.266560][T19067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2029.292957][T19067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2030.167114][T19067] device hsr_slave_0 entered promiscuous mode
[ 2030.225733][T19067] device hsr_slave_1 entered promiscuous mode
[ 2030.315460][ T4696] Bluetooth: hci5: Frame reassembly failed (-84)
[ 2030.408782][T19234] syz.8.3217[19234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2030.409105][T19234] syz.8.3217[19234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2030.458983][T19234] loop8: detected capacity change from 0 to 64
[ 2030.483613][T19234] hfs: invalid btree extent records
[ 2030.489427][T19234] hfs: unable to open extent tree
[ 2030.494675][T19234] hfs: can't find a HFS filesystem on dev loop8
[ 2031.392593][T19237] syz.2.3218[19237] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2031.392943][T19237] syz.2.3218[19237] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2031.418636][T19237] siw: device registration error -23
[ 2031.456169][T19237] loop2: detected capacity change from 0 to 64
[ 2031.471111][T19237] hfs: invalid btree extent records
[ 2031.476774][T19237] hfs: unable to open extent tree
[ 2031.482021][T19237] hfs: can't find a HFS filesystem on dev loop2
[ 2032.332661][T16714] Bluetooth: hci5: command 0x1003 tx timeout
[ 2032.341796][T10510] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 2032.553774][T19242] loop2: detected capacity change from 0 to 512
[ 2032.598829][T19242] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 2032.642715][T19242] EXT4-fs: Ignoring removed bh option
[ 2032.736910][T19242] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 2032.799471][T19242] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.3220: corrupted inode contents
[ 2032.858179][T19242] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #11: comm syz.2.3220: mark_inode_dirty error
[ 2032.867891][T19255] netlink: 'syz.3.3221': attribute type 10 has an invalid length.
[ 2032.904976][T19242] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3220: invalid indirect mapped block 1 (level 1)
[ 2032.954275][T19242] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.3220: corrupted inode contents
[ 2032.982945][T19067] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2033.007779][T19242] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[ 2033.020058][T19067] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2033.052666][T19067] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2033.058016][T19242] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.3220: corrupted inode contents
[ 2033.092682][T19067] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2033.097771][T19242] EXT4-fs error (device loop2): ext4_truncate:4312: inode #11: comm syz.2.3220: mark_inode_dirty error
[ 2033.136522][T19242] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[ 2033.155652][T19242] EXT4-fs (loop2): 1 truncate cleaned up
[ 2033.161715][T19242] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 2033.490199][T19067] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2033.595781][T16420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2033.627389][T16420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2033.665005][T19067] 8021q: adding VLAN 0 to HW filter on device team0
[ 2033.710472][T16420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2033.754823][T16420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2033.808399][T16420] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2033.815617][T16420] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2033.887800][T16420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2033.974683][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2033.996773][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2034.041163][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2034.048433][ T4772] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2034.118717][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2034.143138][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2034.205790][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2034.255042][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2034.293900][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2034.364777][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2034.419368][T19067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2034.463978][T19067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2034.501888][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2034.516296][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2034.525297][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2034.540770][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2034.594744][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2034.639123][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2035.269194][T19285] loop3: detected capacity change from 0 to 24
[ 2035.303563][T19285] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 2035.351980][T19285] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2036.573891][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2036.615454][ T5065] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2036.665158][T19067] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2036.873739][T19299] loop8: detected capacity change from 0 to 24
[ 2036.880833][T19299] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 2036.946720][T19302] loop3: detected capacity change from 0 to 24
[ 2036.974261][T19303] loop7: detected capacity change from 0 to 24
[ 2036.981355][T19303] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 2037.002741][T19302] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 2037.010224][T19302] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2037.034709][T19299] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2037.056637][T19303] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2037.534701][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.541303][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 2039.670850][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3227'.
[ 2043.165400][T19320] loop8: detected capacity change from 0 to 24
[ 2043.212531][ T5819] EXT4-fs (loop2): unmounting filesystem.
[ 2043.289198][T19320] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 2043.375986][T19320] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2043.456224][T19324] loop2: detected capacity change from 0 to 24
[ 2043.681109][T19324] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 2043.863000][T19324] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2044.073290][T19332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3231'.
[ 2044.461850][T17529] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 2045.820440][T17529] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2045.875937][T17529] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2045.885067][T17529] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2045.894193][T17529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2045.904149][T17529] usb 4-1: config 0 descriptor??
[ 2045.967382][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2045.995427][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2046.147327][T11551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2046.167246][T11551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2046.190460][T19342] loop2: detected capacity change from 0 to 24
[ 2046.198424][T11551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2046.218731][T19342] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 2046.236987][T11551] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2046.256651][T19067] device veth0_vlan entered promiscuous mode
[ 2046.322329][T19067] device veth1_vlan entered promiscuous mode
[ 2046.353284][T19067] device veth0_macvtap entered promiscuous mode
[ 2046.371029][T19067] device veth1_macvtap entered promiscuous mode
[ 2046.419411][T19067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.430409][T19067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.440828][T19067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.451860][T19342] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2046.452107][T19067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.470334][T19067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.480850][T19067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.491035][T19067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2046.510716][T19067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2046.530501][T19067] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2046.798746][T19353] loop8: detected capacity change from 0 to 512
[ 2047.033247][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2047.153349][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2047.354476][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2047.469800][T19353] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 2047.479729][T19353] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2047.818412][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2048.490785][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2048.499497][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2048.508955][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2048.509440][T15324] EXT4-fs (loop8): unmounting filesystem.
[ 2048.518220][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2048.553519][T19067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2048.580067][ T4342] usb 4-1: USB disconnect, device number 9
[ 2048.627604][T19067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2048.638108][T19067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2048.649035][T19067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2048.659203][T19067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2048.670096][T19067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2048.680286][T19067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2048.691036][T19067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2048.741886][T19067] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2048.750002][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2048.773345][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2048.809188][T19363] loop3: detected capacity change from 0 to 24
[ 2048.834954][T14147] I/O error, dev loop8, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2048.848116][T19067] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2048.892885][T19363] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 2048.909888][T19363] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2049.041108][T19067] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2049.126956][T19067] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2049.355886][T19373] loop7: detected capacity change from 0 to 24
[ 2049.387583][T19373] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 2049.396100][T19067] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2049.448324][T19373] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2050.484595][T19379] loop8: detected capacity change from 0 to 24
[ 2050.532669][T19379] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 2050.539942][T19379] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2050.652462][T19383] syz.3.3241[19383] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2050.652834][T19383] syz.3.3241[19383] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2050.674776][T19383] siw: device registration error -23
[ 2050.718155][T19383] loop3: detected capacity change from 0 to 64
[ 2050.738468][T19383] hfs: invalid btree extent records
[ 2050.744212][T19383] hfs: unable to open extent tree
[ 2050.749410][T19383] hfs: can't find a HFS filesystem on dev loop3
[ 2050.871170][T18186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2050.968644][T18186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2052.829186][T16420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2053.194292][ T5133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2053.214461][ T5133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2053.340010][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2053.543568][T19391] syz.8.3244[19391] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2053.543920][T19391] syz.8.3244[19391] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2054.408186][T19391] loop8: detected capacity change from 0 to 64
[ 2054.434543][T19391] hfs: invalid btree extent records
[ 2054.440289][T19391] hfs: unable to open extent tree
[ 2054.445637][T19391] hfs: can't find a HFS filesystem on dev loop8
[ 2054.753690][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'.
[ 2054.793556][T19397] loop7: detected capacity change from 0 to 24
[ 2054.888199][T19397] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 2054.931646][T19397] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2055.505985][T19405] loop8: detected capacity change from 0 to 24
[ 2055.529999][T19405] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 2056.790636][T19405] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2057.572917][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3246'.
[ 2058.388549][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3247'.
[ 2058.495482][T19421] loop8: detected capacity change from 0 to 24
[ 2058.582196][T19422] syz.5.3250[19422] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2058.582522][T19422] syz.5.3250[19422] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2058.661421][T19422] siw: device registration error -23
[ 2058.694403][T19422] loop5: detected capacity change from 0 to 64
[ 2058.737470][T19422] hfs: invalid btree extent records
[ 2058.744035][T19422] hfs: unable to open extent tree
[ 2058.750033][T19422] hfs: can't find a HFS filesystem on dev loop5
[ 2059.421881][T19421] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 2059.549526][T19421] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2060.357097][T19435] loop3: detected capacity change from 0 to 24
[ 2060.388152][T19438] netlink: 'syz.7.3248': attribute type 10 has an invalid length.
[ 2060.401503][T19439] loop8: detected capacity change from 0 to 24
[ 2060.409541][T19439] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 2060.454238][T19435] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 2060.481614][T19439] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2060.503337][T19435] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2060.630665][T19438] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2063.695645][T19438] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 2064.300952][T19466] syz.3.3255[19466] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2064.301245][T19466] syz.3.3255[19466] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2064.330958][T19466] siw: device registration error -23
[ 2064.366419][T19466] loop3: detected capacity change from 0 to 64
[ 2064.383684][T19466] hfs: invalid btree extent records
[ 2064.389223][T19466] hfs: unable to open extent tree
[ 2064.394428][T19466] hfs: can't find a HFS filesystem on dev loop3
[ 2065.398276][T19468] loop8: detected capacity change from 0 to 512
[ 2065.422685][T19468] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 2065.438788][T19468] EXT4-fs: Ignoring removed bh option
[ 2065.595307][T19468] EXT4-fs error (device loop8): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 2065.836014][T19468] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.3256: corrupted inode contents
[ 2065.905927][T19468] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #11: comm syz.8.3256: mark_inode_dirty error
[ 2065.968873][T19468] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.3256: invalid indirect mapped block 1 (level 1)
[ 2066.021933][T19468] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.3256: corrupted inode contents
[ 2066.054403][T19468] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[ 2066.088466][T19468] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #11: comm syz.8.3256: corrupted inode contents
[ 2066.138715][T19468] EXT4-fs error (device loop8): ext4_truncate:4312: inode #11: comm syz.8.3256: mark_inode_dirty error
[ 2066.229620][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2066.282367][T19468] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[ 2066.293056][T16714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2066.305034][T16714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2066.313910][T16714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2066.322346][T16714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2066.330347][T16714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2066.337863][T16714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2066.382624][T19468] EXT4-fs (loop8): 1 truncate cleaned up
[ 2066.391920][T19468] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 2066.588547][T19479] loop7: detected capacity change from 0 to 24
[ 2066.606272][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2066.627630][T19479] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 2066.640545][T19481] loop5: detected capacity change from 0 to 24
[ 2066.698711][T19479] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2066.718733][T19472] netlink: 'syz.3.3257': attribute type 10 has an invalid length.
[ 2066.740572][T19481] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 2067.586751][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2067.591618][T19481] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2067.816621][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3258'.
[ 2068.414037][T16714] Bluetooth: hci0: command 0x0409 tx timeout
[ 2070.155023][T19486] loop7: detected capacity change from 0 to 24
[ 2070.168082][T19486] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 2070.186326][T19486] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2070.296918][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2070.387367][T19489] loop5: detected capacity change from 0 to 24
[ 2070.412103][T15324] EXT4-fs (loop8): unmounting filesystem.
[ 2070.463186][T19489] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 2070.491865][T16714] Bluetooth: hci0: command 0x041b tx timeout
[ 2070.577816][T19489] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2071.365847][T19491] loop8: detected capacity change from 0 to 24
[ 2071.443548][T19491] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 2071.498899][T19491] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2071.595462][    T9] tipc: Left network mode
[ 2072.571853][T16714] Bluetooth: hci0: command 0x040f tx timeout
[ 2073.475808][T19476] chnl_net:caif_netlink_parms(): no params data found
[ 2073.618736][T19502] loop7: detected capacity change from 0 to 24
[ 2073.626229][T19502] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 2073.633766][T19502] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2074.651920][T10510] Bluetooth: hci0: command 0x0419 tx timeout
[ 2076.101554][T19510] loop5: detected capacity change from 0 to 24
[ 2076.169339][T19510] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 2076.216685][T19513] syz.8.3265[19513] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2076.216762][T19513] syz.8.3265[19513] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 2076.235567][T19510] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2076.552874][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3266'.
[ 2077.081641][T19476] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2077.089771][T19476] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2077.094671][T19523] loop7: detected capacity change from 0 to 24
[ 2077.331443][T19523] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 2077.410223][T19523] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 2077.939426][T19476] device bridge_slave_0 entered promiscuous mode
[ 2078.107472][T19526] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3268'.
[ 2078.251629][T19476] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2078.273118][T19476] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2078.370966][T19476] device bridge_slave_1 entered promiscuous mode
[ 2078.751627][T19476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2078.905834][T19476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2078.932970][    T9] IPVS: stopping master sync thread 6495 ...
[ 2079.069175][T19476] team0: Port device team_slave_0 added
[ 2079.078725][T19476] team0: Port device team_slave_1 added
[ 2079.149442][T19476] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2079.156730][T19476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2079.184520][T19476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2079.263916][T19476] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2079.271084][T19476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2079.298324][T19476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2079.374948][T19476] device hsr_slave_0 entered promiscuous mode
[ 2079.382947][T19476] device hsr_slave_1 entered promiscuous mode
[ 2079.390212][T19476] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2079.399183][T19476] Cannot create hsr debugfs directory
[ 2079.422550][    T9] device hsr_slave_0 left promiscuous mode
[ 2079.429085][    T9] device hsr_slave_1 left promiscuous mode
[ 2079.436882][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2079.444737][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2079.452825][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2079.460334][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2079.468405][    T9] device bridge_slave_1 left promiscuous mode
[ 2079.474937][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2079.483359][    T9] device bridge_slave_0 left promiscuous mode
[ 2079.489865][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2079.518866][    T9] device veth1_macvtap left promiscuous mode
[ 2079.525037][    T9] device veth0_macvtap left promiscuous mode
[ 2079.531140][    T9] device veth1_vlan left promiscuous mode
[ 2079.538014][    T9] device veth0_vlan left promiscuous mode
[ 2080.050849][    T9] team0 (unregistering): Port device team_slave_1 removed
[ 2080.107275][    T9] team0 (unregistering): Port device team_slave_0 removed
[ 2080.164208][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2080.221417][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2080.492805][    T9] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 2080.877902][    T9] bond0 (unregistering): Released all slaves
[ 2081.206901][T19476] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2081.217131][T19476] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2081.228200][T19476] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2081.239080][T19476] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2081.362744][T19476] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2081.377732][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2081.394960][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2081.411422][T19476] 8021q: adding VLAN 0 to HW filter on device team0
[ 2081.426314][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2081.438065][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2081.448718][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2081.455934][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2081.501945][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2081.522614][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2081.534214][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2081.542939][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2081.550080][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2081.557998][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2081.582212][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2081.598878][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2081.614955][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2081.626832][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2081.638963][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2081.651155][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2081.670165][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2081.684922][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2081.715074][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2081.732597][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2081.749202][T19476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2082.041656][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2082.049584][ T2889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2082.078991][T19476] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2082.601074][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2082.620620][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2082.647777][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2082.660066][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2082.676019][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2082.687121][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2082.701471][T19476] device veth0_vlan entered promiscuous mode
[ 2082.720389][T19476] device veth1_vlan entered promiscuous mode
[ 2082.760302][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2082.769902][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2082.778924][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2082.788054][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2082.800175][T19476] device veth0_macvtap entered promiscuous mode
[ 2082.816735][T19476] device veth1_macvtap entered promiscuous mode
[ 2082.857109][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.869258][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.879201][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.889831][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.900545][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.911415][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.922375][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2082.933708][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2082.945500][T19476] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2082.956281][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2082.964914][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2082.974738][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2082.984629][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2082.999259][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2083.009869][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2083.020299][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2083.030897][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2083.040830][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2083.051469][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2083.061419][T19476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2083.072366][T19476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2083.085213][T19476] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2083.097294][T19476] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2083.106730][T19476] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2083.115796][T19476] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2083.125414][T19476] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2083.140236][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2083.155527][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2083.279170][ T5133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2083.302806][ T5133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2083.334357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2083.349188][ T2889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2083.358167][ T2889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2083.388233][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2083.782000][ T4377] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 2083.963540][ T4377] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2083.979782][ T4377] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2083.999976][ T4377] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2084.011214][ T4377] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2084.040736][ T4377] usb 10-1: config 0 descriptor??
[ 2084.061568][ T4377] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 2087.145626][ T4313] usb 10-1: USB disconnect, device number 2
[ 2098.985902][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2098.992313][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 2126.651889][T16714] Bluetooth: hci4: command 0x0406 tx timeout
[ 2160.416002][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.422444][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 2193.211918][T10510] Bluetooth: hci0: command 0x0406 tx timeout
[ 2221.855786][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.862203][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 2283.303924][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.310358][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 2344.734627][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.741157][ T1277] ieee802154 phy1 wpan1: encryption failed: -22