[  OK  ] Started Getty on tty2.
[  OK  ] Started Serial Getty on ttyS0.
[  OK  ] Started Getty on tty1.
[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Load/Save RF Kill Switch Status.


Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.201' (ECDSA) to the list of known hosts.
2020/05/18 22:13:33 fuzzer started
2020/05/18 22:13:33 dialing manager at 10.128.0.105:34165
2020/05/18 22:13:33 syscalls: 3055
2020/05/18 22:13:33 code coverage: enabled
2020/05/18 22:13:33 comparison tracing: enabled
2020/05/18 22:13:33 extra coverage: enabled
2020/05/18 22:13:33 setuid sandbox: enabled
2020/05/18 22:13:33 namespace sandbox: enabled
2020/05/18 22:13:33 Android sandbox: /sys/fs/selinux/policy does not exist
2020/05/18 22:13:33 fault injection: enabled
2020/05/18 22:13:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/05/18 22:13:33 net packet injection: enabled
2020/05/18 22:13:33 net device setup: enabled
2020/05/18 22:13:33 concurrency sanitizer: enabled
2020/05/18 22:13:33 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/05/18 22:13:33 USB emulation: enabled
22:13:35 executing program 0:
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x4, 0x8d}, 0x0)
syz_init_net_socket$x25(0x6, 0x5, 0x0)

syzkaller login: [   53.306050][ T8947] IPVS: ftp: loaded support on port[0] = 21
[   53.381042][ T8947] chnl_net:caif_netlink_parms(): no params data found
22:13:35 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[   53.425576][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.432752][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.440476][ T8947] device bridge_slave_0 entered promiscuous mode
[   53.449955][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.457467][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.468067][ T8947] device bridge_slave_1 entered promiscuous mode
[   53.518156][ T8947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.543917][ T8947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.592468][ T8947] team0: Port device team_slave_0 added
[   53.599985][ T8947] team0: Port device team_slave_1 added
[   53.602726][ T9087] IPVS: ftp: loaded support on port[0] = 21
[   53.645236][ T8947] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.661765][ T8947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.689661][ T8947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.715326][ T8947] batman_adv: batadv0: Adding interface: batadv_slave_1
22:13:35 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r2, 0x4000, 0x0, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
dup(0xffffffffffffffff)
syz_open_dev$usbmon(0x0, 0x0, 0x0)

[   53.723008][ T8947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.750823][ T8947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.824608][ T8947] device hsr_slave_0 entered promiscuous mode
[   53.892558][ T8947] device hsr_slave_1 entered promiscuous mode
[   54.011686][ T9087] chnl_net:caif_netlink_parms(): no params data found
[   54.015825][ T9141] IPVS: ftp: loaded support on port[0] = 21
22:13:36 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x4)

[   54.121658][ T9087] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.129041][ T9087] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.142401][ T9087] device bridge_slave_0 entered promiscuous mode
[   54.184148][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.194174][ T9087] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.216050][ T9087] device bridge_slave_1 entered promiscuous mode
[   54.280375][ T9141] chnl_net:caif_netlink_parms(): no params data found
[   54.303428][ T8947] netdevsim netdevsim0 netdevsim0: renamed from eth0
22:13:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

[   54.344078][ T8947] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.395290][ T9087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.413415][ T8947] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.426527][ T9395] IPVS: ftp: loaded support on port[0] = 21
[   54.481602][ T9087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.504350][ T8947] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.572017][ T9087] team0: Port device team_slave_0 added
[   54.580481][ T9087] team0: Port device team_slave_1 added
[   54.613729][ T9403] IPVS: ftp: loaded support on port[0] = 21
[   54.651108][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.671636][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.699363][ T9087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
22:13:36 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

[   54.735877][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.746418][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.773647][ T9087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.787069][ T9141] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.795549][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.804089][ T9141] device bridge_slave_0 entered promiscuous mode
[   54.856722][ T9141] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.867719][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.876017][ T9141] device bridge_slave_1 entered promiscuous mode
[   54.933303][ T9087] device hsr_slave_0 entered promiscuous mode
[   54.971701][ T9087] device hsr_slave_1 entered promiscuous mode
[   55.021460][ T9087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.029128][ T9087] Cannot create hsr debugfs directory
[   55.056564][ T9141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.072264][ T9494] IPVS: ftp: loaded support on port[0] = 21
[   55.098285][ T9141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.123238][ T9141] team0: Port device team_slave_0 added
[   55.148807][ T9141] team0: Port device team_slave_1 added
[   55.186607][ T8947] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.220383][ T9395] chnl_net:caif_netlink_parms(): no params data found
[   55.240663][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.248693][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.281528][ T9141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.296092][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.304874][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.334087][ T9141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.351218][ T9403] chnl_net:caif_netlink_parms(): no params data found
[   55.391153][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.399467][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.414932][ T8947] 8021q: adding VLAN 0 to HW filter on device team0
[   55.470047][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.483765][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.493953][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.500987][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.543596][ T9141] device hsr_slave_0 entered promiscuous mode
[   55.631753][ T9141] device hsr_slave_1 entered promiscuous mode
[   55.681293][ T9141] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.688927][ T9141] Cannot create hsr debugfs directory
[   55.706238][ T9087] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.743328][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.753684][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.762682][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.771130][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.778379][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.811699][ T9087] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.845737][ T9087] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.924058][ T9494] chnl_net:caif_netlink_parms(): no params data found
[   55.944162][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.954817][ T9087] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.021684][ T9403] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.028756][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.038237][ T9403] device bridge_slave_0 entered promiscuous mode
[   56.046909][ T9403] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.054529][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.062690][ T9403] device bridge_slave_1 entered promiscuous mode
[   56.080087][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.088973][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.099703][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.128302][ T9395] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.135648][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.145037][ T9395] device bridge_slave_0 entered promiscuous mode
[   56.154797][ T9395] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.162377][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.169982][ T9395] device bridge_slave_1 entered promiscuous mode
[   56.178536][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.189855][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.201026][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.211877][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.222322][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.243309][ T9403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.274431][ T9403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.295309][ T8947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.310041][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.324899][ T9395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.338556][ T9395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.350305][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.359404][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.376123][ T9403] team0: Port device team_slave_0 added
[   56.401229][ T9403] team0: Port device team_slave_1 added
[   56.409753][ T9395] team0: Port device team_slave_0 added
[   56.416479][ T9494] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.425153][ T9494] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.433048][ T9494] device bridge_slave_0 entered promiscuous mode
[   56.440004][ T9141] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.506576][ T9141] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.564630][ T9141] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.627523][ T9141] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.684090][ T9395] team0: Port device team_slave_1 added
[   56.691565][ T9494] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.698718][ T9494] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.708322][ T9494] device bridge_slave_1 entered promiscuous mode
[   56.735520][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.742792][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.769602][ T9403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.801799][ T9494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.813277][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.820846][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.836156][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.843362][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.870412][ T9403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.899120][ T8947] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.908099][ T9494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.924969][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.932143][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.958734][ T9395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.033470][ T9403] device hsr_slave_0 entered promiscuous mode
[   57.073378][ T9403] device hsr_slave_1 entered promiscuous mode
[   57.111337][ T9403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.118918][ T9403] Cannot create hsr debugfs directory
[   57.149408][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.158918][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.186047][ T9395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.202507][ T9494] team0: Port device team_slave_0 added
[   57.218255][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.226721][ T9494] team0: Port device team_slave_1 added
[   57.267027][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.275362][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.301784][ T9494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.315686][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.323009][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.350097][ T9494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.362609][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.372307][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.432557][ T9395] device hsr_slave_0 entered promiscuous mode
[   57.471254][ T9395] device hsr_slave_1 entered promiscuous mode
[   57.542878][ T9395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.550520][ T9395] Cannot create hsr debugfs directory
[   57.584584][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.593333][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.629216][ T9141] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.640587][ T9087] 8021q: adding VLAN 0 to HW filter on device team0
[   57.692981][ T9494] device hsr_slave_0 entered promiscuous mode
[   57.751233][ T9494] device hsr_slave_1 entered promiscuous mode
[   57.790868][ T9494] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.798700][ T9494] Cannot create hsr debugfs directory
[   57.818341][ T9141] 8021q: adding VLAN 0 to HW filter on device team0
[   57.840797][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.851872][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.860223][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.867298][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.877482][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.885806][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.893868][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.902874][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.911571][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.918713][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.936480][ T9403] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   57.973871][ T9403] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   58.026588][ T8947] device veth0_vlan entered promiscuous mode
[   58.033194][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.043023][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.052216][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   58.060556][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   58.070532][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.080095][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.089697][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.098556][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.105734][ T8668] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.113717][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.122357][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.141556][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   58.149553][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   58.158407][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.166835][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.175395][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.184391][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.193366][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.200410][ T8668] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.208773][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.218170][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.233971][ T9403] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   58.293315][ T9403] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   58.360998][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.369783][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.379778][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.390384][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.399085][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.409290][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.417900][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.428609][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.438933][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.455761][ T9395] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   58.504756][ T9395] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   58.587538][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.596170][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.616522][ T9087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.627905][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.640284][ T9395] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   58.703114][ T9395] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   58.772309][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.781543][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.789755][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.798601][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.807813][ T9141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.823577][ T8947] device veth1_vlan entered promiscuous mode
[   58.840782][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   58.887751][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.896314][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.924498][ T9087] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.948630][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   58.956374][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   58.974869][ T9141] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.996766][ T9494] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   59.033028][ T9494] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   59.084914][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.101474][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.114681][ T8947] device veth0_macvtap entered promiscuous mode
[   59.129679][ T8947] device veth1_macvtap entered promiscuous mode
[   59.143404][ T9494] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   59.183497][ T9494] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   59.240124][ T9395] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.254782][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   59.264554][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   59.274145][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.283860][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.324986][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.334678][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.350269][ T9087] device veth0_vlan entered promiscuous mode
[   59.374603][ T8947] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.383610][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.394375][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.403656][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   59.415160][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   59.425347][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.435247][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.445839][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.458188][ T8947] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.468802][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.477870][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.489963][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   59.499257][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   59.510464][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.518334][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.538461][ T9141] device veth0_vlan entered promiscuous mode
[   59.551166][ T9395] 8021q: adding VLAN 0 to HW filter on device team0
[   59.567601][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.576190][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.586502][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.595316][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.605996][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.613090][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.624001][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.633045][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.641686][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.648749][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.660848][ T9087] device veth1_vlan entered promiscuous mode
[   59.678671][ T9403] 8021q: adding VLAN 0 to HW filter on device team0
[   59.687811][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.698242][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.706591][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.717514][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.746007][ T9141] device veth1_vlan entered promiscuous mode
[   59.754329][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   59.763241][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   59.771620][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.780301][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.789660][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.798381][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.807308][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.815983][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.824419][ T9841] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.831518][ T9841] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.846479][ T9087] device veth0_macvtap entered promiscuous mode
[   59.873723][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   59.881915][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.889880][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.899054][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   59.908251][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   59.918264][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.927029][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.935837][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.942903][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.951257][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.960003][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.968600][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.977370][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.986234][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.995206][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.004995][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.013146][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.028430][ T9087] device veth1_macvtap entered promiscuous mode
[   60.081719][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.090129][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.101203][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.109685][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.120670][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.129257][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.140414][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.149096][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.160232][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.169162][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.182521][ T9395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.214244][ T9403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.255811][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   60.266756][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.278635][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.290342][ T9087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   60.300899][ T9087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.313192][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.334417][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.343383][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.353114][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.362388][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.375446][ T9141] device veth0_macvtap entered promiscuous mode
[   60.434468][ T9494] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.444275][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.453690][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.462735][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.470710][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.478188][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.489947][ T9141] device veth1_macvtap entered promiscuous mode
22:13:42 executing program 0:
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x4, 0x8d}, 0x0)
syz_init_net_socket$x25(0x6, 0x5, 0x0)

[   60.537108][ T9403] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.558664][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
22:13:42 executing program 0:
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x4, 0x8d}, 0x0)
syz_init_net_socket$x25(0x6, 0x5, 0x0)

[   60.581842][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.589583][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.609943][ T9395] 8021q: adding VLAN 0 to HW filter on device batadv0
22:13:42 executing program 0:
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x4, 0x8d}, 0x0)
syz_init_net_socket$x25(0x6, 0x5, 0x0)

[   60.739330][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   60.755367][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
22:13:42 executing program 0:
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x4, 0x8d}, 0x0)
syz_init_net_socket$x25(0x6, 0x5, 0x0)

[   60.809312][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   60.825032][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
22:13:42 executing program 0:
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x4, 0x8d}, 0x0)
syz_init_net_socket$x25(0x6, 0x5, 0x0)

[   60.859814][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.893813][ T9494] 8021q: adding VLAN 0 to HW filter on device team0
[   60.908014][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.920747][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.938651][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
22:13:42 executing program 0:
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x4, 0x8d}, 0x0)
syz_init_net_socket$x25(0x6, 0x5, 0x0)

[   60.959068][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.985378][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   61.009583][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.041550][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
22:13:43 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000061401000000ea2273a500000900020073797a31000000000800410073697700140033"], 0x1}}, 0x0)
sendfile(r2, r1, 0x0, 0x80000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")

[   61.071348][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.110329][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.150181][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.159362][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.184674][   T28] audit: type=1804 audit(1589840023.108:2): pid=10233 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir995841712/syzkaller.csRD4y/7/cgroup.controllers" dev="sda1" ino=15744 res=1
[   61.211697][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   61.223838][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.237107][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.246560][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.258188][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.274171][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.290298][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.355118][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.367469][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.377611][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.386205][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.399463][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.414273][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.428704][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.440724][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.523486][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   61.532846][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.545136][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.556791][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.567683][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.579653][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   61.590723][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.603665][ T9395] device veth0_vlan entered promiscuous mode
[   61.651085][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.665870][ T3353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.737167][ T9494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   61.770363][ T9494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.823455][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.840496][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.863891][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.884933][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.913915][ T9403] device veth0_vlan entered promiscuous mode
[   61.931397][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   61.948089][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.950563][T10248] attempt to access beyond end of device
[   61.958170][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.976053][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.986616][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.001547][ T9395] device veth1_vlan entered promiscuous mode
[   62.042702][ T9403] device veth1_vlan entered promiscuous mode
[   62.050850][T10248] loop2: rw=1, want=3409, limit=63
[   62.058040][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.070295][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.113201][ T9494] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.128266][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.144500][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.157391][ T9403] device veth0_macvtap entered promiscuous mode
[   62.173811][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.187971][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.210858][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.231889][ T9403] device veth1_macvtap entered promiscuous mode
[   62.246405][ T9395] device veth0_macvtap entered promiscuous mode
[   62.276604][ T9395] device veth1_macvtap entered promiscuous mode
[   62.309401][ T9403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   62.323292][ T9403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.337688][ T9403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   62.351011][ T9403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.362835][ T9403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   62.374115][ T9403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.386815][ T9403] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.403611][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.415573][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.428802][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.438569][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.451290][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.476264][ T9403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   62.488984][ T9403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.504588][ T9403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   62.518295][ T9403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.532780][ T9403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   62.545366][ T9403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.561805][ T9403] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.590494][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   62.622366][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.642452][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   62.655526][T10241] attempt to access beyond end of device
[   62.665919][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.676913][T10241] loop2: rw=2049, want=78, limit=63
[   62.682460][T10241] Buffer I/O error on dev loop2, logical block 77, lost async page write
[   62.691220][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   62.702955][T10241] attempt to access beyond end of device
[   62.708690][T10241] loop2: rw=2049, want=79, limit=63
[   62.713958][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.725664][T10241] Buffer I/O error on dev loop2, logical block 78, lost async page write
[   62.737280][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   62.754317][T10241] attempt to access beyond end of device
[   62.759922][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.761489][T10241] loop2: rw=2049, want=80, limit=63
[   62.773615][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.780561][T10241] Buffer I/O error on dev loop2, logical block 79, lost async page write
[   62.789168][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   62.805365][T10241] attempt to access beyond end of device
[   62.808207][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.811977][T10241] loop2: rw=2049, want=81, limit=63
[   62.825809][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   62.829063][T10241] Buffer I/O error on dev loop2, logical block 80, lost async page write
[   62.839914][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.849565][T10241] attempt to access beyond end of device
[   62.862555][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   62.866775][T10241] loop2: rw=2049, want=130, limit=63
[   62.881539][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.884593][T10241] Buffer I/O error on dev loop2, logical block 129, lost async page write
[   62.896984][ T9395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   62.905439][T10241] attempt to access beyond end of device
[   62.915457][ T9395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.921943][T10241] loop2: rw=2049, want=131, limit=63
[   62.935946][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.941936][T10241] Buffer I/O error on dev loop2, logical block 130, lost async page write
[   62.958391][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.967724][T10241] attempt to access beyond end of device
[   62.969980][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.974512][T10241] loop2: rw=2049, want=132, limit=63
[   62.986812][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.989319][T10241] Buffer I/O error on dev loop2, logical block 131, lost async page write
[   62.998086][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.007728][T10241] attempt to access beyond end of device
[   63.020074][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.022631][T10241] loop2: rw=2049, want=133, limit=63
[   63.034669][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.035958][T10241] Buffer I/O error on dev loop2, logical block 132, lost async page write
[   63.074695][T10241] attempt to access beyond end of device
[   63.081055][T10241] loop2: rw=2049, want=142, limit=63
[   63.082943][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.087610][T10241] Buffer I/O error on dev loop2, logical block 141, lost async page write
[   63.099637][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.116696][T10241] attempt to access beyond end of device
[   63.141519][T10241] loop2: rw=2049, want=143, limit=63
[   63.149440][T10241] Buffer I/O error on dev loop2, logical block 142, lost async page write
[   63.166491][T10241] attempt to access beyond end of device
[   63.172759][T10241] loop2: rw=2049, want=144, limit=63
[   63.178462][T10241] attempt to access beyond end of device
[   63.190372][T10241] loop2: rw=2049, want=145, limit=63
[   63.190455][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.197142][T10241] attempt to access beyond end of device
[   63.211655][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.214890][T10241] loop2: rw=2049, want=161, limit=63
[   63.232616][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.248713][ T8668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.274003][T10241] attempt to access beyond end of device
[   63.280946][T10241] loop2: rw=2049, want=17809, limit=63
[   63.318715][T10241] attempt to access beyond end of device
[   63.328076][T10241] loop2: rw=2049, want=27809, limit=63
[   63.336412][ T9494] device veth0_vlan entered promiscuous mode
[   63.484380][ T9494] device veth1_vlan entered promiscuous mode
[   63.542976][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   63.557968][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   63.568434][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.581343][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.598801][ T9494] device veth0_macvtap entered promiscuous mode
[   63.612810][ T9494] device veth1_macvtap entered promiscuous mode
[   63.657780][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   63.672582][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.685022][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   63.698262][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.713050][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   63.724483][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.739280][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   63.754844][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.766136][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   63.785133][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.818455][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.844738][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
22:13:45 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:45 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000061401000000ea2273a500000900020073797a31000000000800410073697700140033"], 0x1}}, 0x0)
sendfile(r2, r1, 0x0, 0x80000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")

22:13:45 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r2, 0x4000, 0x0, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
dup(0xffffffffffffffff)
syz_open_dev$usbmon(0x0, 0x0, 0x0)

[   63.861834][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.876135][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.888285][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.914088][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   63.956853][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.029681][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   64.043284][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.043304][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   64.043310][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.043332][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   64.043339][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.043351][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   64.043358][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.044844][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.046137][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.046810][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.066039][    C0] hrtimer: interrupt took 26580 ns
22:13:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

[   64.145131][   T28] audit: type=1804 audit(1589840026.069:3): pid=10274 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir995841712/syzkaller.csRD4y/8/cgroup.controllers" dev="sda1" ino=15757 res=1
22:13:46 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x4)

22:13:46 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:46 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

22:13:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000061401000000ea2273a500000900020073797a31000000000800410073697700140033"], 0x1}}, 0x0)
sendfile(r2, r1, 0x0, 0x80000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")

[   64.508363][T10280] attempt to access beyond end of device
[   64.508480][T10280] loop2: rw=1, want=11785, limit=63
[   64.892368][T10272] attempt to access beyond end of device
22:13:46 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x4)

[   64.892384][T10272] loop2: rw=2049, want=78, limit=63
[   64.892398][T10272] attempt to access beyond end of device
22:13:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

[   64.893230][T10272] loop2: rw=2049, want=79, limit=63
[   64.893246][T10272] attempt to access beyond end of device
[   64.893259][T10272] loop2: rw=2049, want=80, limit=63
[   64.893269][T10272] attempt to access beyond end of device
[   64.893279][T10272] loop2: rw=2049, want=81, limit=63
22:13:47 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

22:13:47 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x4)

[   64.893301][T10272] attempt to access beyond end of device
[   64.893314][T10272] loop2: rw=2049, want=130, limit=63
[   64.893325][T10272] attempt to access beyond end of device
[   64.893392][T10272] loop2: rw=2049, want=131, limit=63
[   64.893404][T10272] attempt to access beyond end of device
22:13:47 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000061401000000ea2273a500000900020073797a31000000000800410073697700140033"], 0x1}}, 0x0)
sendfile(r2, r1, 0x0, 0x80000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")

[   64.893414][T10272] loop2: rw=2049, want=132, limit=63
[   64.893526][T10272] attempt to access beyond end of device
22:13:47 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

[   64.893537][T10272] loop2: rw=2049, want=133, limit=63
[   64.893547][T10272] attempt to access beyond end of device
[   64.893560][T10272] loop2: rw=2049, want=142, limit=63
[   64.893572][T10272] attempt to access beyond end of device
[   64.893635][T10272] loop2: rw=2049, want=143, limit=63
[   64.893647][T10272] attempt to access beyond end of device
[   64.893659][T10272] loop2: rw=2049, want=144, limit=63
[   64.893671][T10272] attempt to access beyond end of device
[   64.893683][T10272] loop2: rw=2049, want=145, limit=63
[   64.893722][T10272] attempt to access beyond end of device
[   64.893733][T10272] loop2: rw=2049, want=161, limit=63
[   64.964768][T10272] attempt to access beyond end of device
[   64.964785][T10272] loop2: rw=2049, want=15529, limit=63
[   65.034751][   T28] audit: type=1804 audit(1589840026.959:4): pid=10296 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir995841712/syzkaller.csRD4y/9/cgroup.controllers" dev="sda1" ino=15766 res=1
[   65.533989][   T28] audit: type=1804 audit(1589840027.459:5): pid=10317 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir995841712/syzkaller.csRD4y/10/cgroup.controllers" dev="sda1" ino=15765 res=1
22:13:47 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r2, 0x4000, 0x0, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
dup(0xffffffffffffffff)
syz_open_dev$usbmon(0x0, 0x0, 0x0)

22:13:47 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

22:13:47 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

[   66.068817][T10333] attempt to access beyond end of device
[   66.105091][T10333] loop2: rw=1, want=2209, limit=63
[   66.152667][T10333] attempt to access beyond end of device
[   66.190028][T10333] loop2: rw=1, want=4641, limit=63
[   66.230106][T10333] attempt to access beyond end of device
[   66.245153][T10333] loop2: rw=1, want=9257, limit=63
[   66.713173][T10329] attempt to access beyond end of device
[   66.719085][T10329] loop2: rw=2049, want=78, limit=63
[   66.725506][T10329] attempt to access beyond end of device
[   66.763960][T10329] loop2: rw=2049, want=79, limit=63
[   66.785130][T10329] attempt to access beyond end of device
[   66.791584][T10329] loop2: rw=2049, want=80, limit=63
[   66.797915][T10329] attempt to access beyond end of device
[   66.805427][T10329] loop2: rw=2049, want=81, limit=63
[   66.811965][T10329] attempt to access beyond end of device
[   66.818026][T10329] loop2: rw=2049, want=130, limit=63
[   66.824271][T10329] attempt to access beyond end of device
[   66.830350][T10329] loop2: rw=2049, want=131, limit=63
[   66.844416][T10329] attempt to access beyond end of device
[   66.850779][T10329] loop2: rw=2049, want=132, limit=63
[   66.856087][T10329] attempt to access beyond end of device
[   66.862146][T10329] loop2: rw=2049, want=133, limit=63
[   66.867607][T10329] attempt to access beyond end of device
[   66.873365][T10329] loop2: rw=2049, want=142, limit=63
[   66.879123][T10329] attempt to access beyond end of device
[   66.884974][T10329] loop2: rw=2049, want=143, limit=63
[   66.891636][T10329] attempt to access beyond end of device
[   66.897938][T10329] loop2: rw=2049, want=144, limit=63
[   66.903782][T10329] attempt to access beyond end of device
[   66.910264][T10329] loop2: rw=2049, want=145, limit=63
[   66.915743][T10329] attempt to access beyond end of device
[   66.921415][T10329] loop2: rw=2049, want=161, limit=63
[   66.931651][T10329] attempt to access beyond end of device
[   66.937355][T10329] loop2: rw=2049, want=12681, limit=63
[   66.950282][T10329] attempt to access beyond end of device
[   66.956315][T10329] loop2: rw=2049, want=14881, limit=63
[   66.987017][T10329] attempt to access beyond end of device
[   66.992705][T10329] loop2: rw=2049, want=29425, limit=63
22:13:49 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:49 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

22:13:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:49 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

22:13:49 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

22:13:49 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r2, 0x4000, 0x0, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
dup(0xffffffffffffffff)
syz_open_dev$usbmon(0x0, 0x0, 0x0)

[   68.020557][T10359] attempt to access beyond end of device
[   68.036374][T10359] loop2: rw=1, want=2241, limit=63
22:13:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

[   68.228755][T10359] attempt to access beyond end of device
[   68.263906][T10359] loop2: rw=1, want=5721, limit=63
22:13:50 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

22:13:50 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

[   68.463173][T10359] attempt to access beyond end of device
[   68.469652][T10359] loop2: rw=1, want=10329, limit=63
22:13:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

[   68.800955][T10348] attempt to access beyond end of device
[   68.819673][T10348] loop2: rw=2049, want=78, limit=63
[   68.845154][T10348] buffer_io_error: 26 callbacks suppressed
[   68.845166][T10348] Buffer I/O error on dev loop2, logical block 77, lost async page write
[   68.894073][T10348] attempt to access beyond end of device
[   68.901681][T10348] loop2: rw=2049, want=79, limit=63
[   68.907317][T10348] Buffer I/O error on dev loop2, logical block 78, lost async page write
[   68.920674][T10348] attempt to access beyond end of device
[   68.937386][T10348] loop2: rw=2049, want=80, limit=63
[   68.950408][T10348] Buffer I/O error on dev loop2, logical block 79, lost async page write
[   68.966912][T10348] attempt to access beyond end of device
[   68.983163][T10348] loop2: rw=2049, want=81, limit=63
[   68.994157][T10348] Buffer I/O error on dev loop2, logical block 80, lost async page write
[   69.006419][T10348] attempt to access beyond end of device
[   69.012664][T10348] loop2: rw=2049, want=130, limit=63
[   69.018518][T10348] Buffer I/O error on dev loop2, logical block 129, lost async page write
[   69.029648][T10348] attempt to access beyond end of device
[   69.036487][T10348] loop2: rw=2049, want=131, limit=63
[   69.043948][T10348] Buffer I/O error on dev loop2, logical block 130, lost async page write
[   69.054516][T10348] attempt to access beyond end of device
[   69.062730][T10348] loop2: rw=2049, want=132, limit=63
[   69.068116][T10348] Buffer I/O error on dev loop2, logical block 131, lost async page write
[   69.077960][T10348] attempt to access beyond end of device
[   69.085478][T10348] loop2: rw=2049, want=133, limit=63
[   69.091802][T10348] Buffer I/O error on dev loop2, logical block 132, lost async page write
[   69.102042][T10348] attempt to access beyond end of device
[   69.107831][T10348] loop2: rw=2049, want=142, limit=63
[   69.115170][T10348] Buffer I/O error on dev loop2, logical block 141, lost async page write
[   69.125630][T10348] attempt to access beyond end of device
[   69.132533][T10348] loop2: rw=2049, want=143, limit=63
[   69.142275][T10348] Buffer I/O error on dev loop2, logical block 142, lost async page write
[   69.151933][T10348] attempt to access beyond end of device
[   69.163029][T10348] loop2: rw=2049, want=144, limit=63
[   69.168668][T10348] attempt to access beyond end of device
[   69.175845][T10348] loop2: rw=2049, want=145, limit=63
[   69.183342][T10348] attempt to access beyond end of device
[   69.189060][T10348] loop2: rw=2049, want=161, limit=63
[   69.202918][T10348] attempt to access beyond end of device
[   69.208778][T10348] loop2: rw=2049, want=13073, limit=63
[   69.228129][T10348] attempt to access beyond end of device
[   69.234877][T10348] loop2: rw=2049, want=13145, limit=63
22:13:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:52 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

22:13:52 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)

22:13:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:54 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:54 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:54 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x7, &(0x7f0000002000))
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001})
socket(0x11, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

22:13:54 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:54 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:54 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r2, 0x4000, 0x0, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
dup(0xffffffffffffffff)
syz_open_dev$usbmon(0x0, 0x0, 0x0)

[   73.104227][T10569] attempt to access beyond end of device
[   73.138959][T10569] loop2: rw=1, want=2225, limit=63
[   73.197268][T10569] attempt to access beyond end of device
[   73.219386][T10569] loop2: rw=1, want=4465, limit=63
[   73.309873][T10569] attempt to access beyond end of device
[   73.315741][T10569] loop2: rw=1, want=7873, limit=63
[   73.460389][T10569] attempt to access beyond end of device
[   73.466282][T10569] loop2: rw=1, want=11265, limit=63
[   73.610865][T10569] attempt to access beyond end of device
[   73.616751][T10569] loop2: rw=1, want=18393, limit=63
[   73.802066][T10565] attempt to access beyond end of device
[   73.807881][T10565] loop2: rw=2049, want=78, limit=63
[   73.813967][T10565] attempt to access beyond end of device
[   73.817167][T10569] attempt to access beyond end of device
[   73.820305][T10565] loop2: rw=2049, want=79, limit=63
[   73.825897][T10569] loop2: rw=1, want=32721, limit=63
[   73.831362][T10565] attempt to access beyond end of device
[   73.842384][T10565] loop2: rw=2049, want=80, limit=63
[   73.847813][T10565] attempt to access beyond end of device
[   73.854206][T10565] loop2: rw=2049, want=81, limit=63
[   73.859921][T10565] buffer_io_error: 5 callbacks suppressed
[   73.859936][T10565] Buffer I/O error on dev loop2, logical block 80, lost async page write
[   73.875087][T10565] attempt to access beyond end of device
[   73.881188][T10565] loop2: rw=2049, want=130, limit=63
[   73.886609][T10565] Buffer I/O error on dev loop2, logical block 129, lost async page write
[   73.896042][T10565] attempt to access beyond end of device
[   73.902194][T10565] loop2: rw=2049, want=131, limit=63
[   73.907902][T10565] Buffer I/O error on dev loop2, logical block 130, lost async page write
[   73.918064][T10565] attempt to access beyond end of device
[   73.924187][T10565] loop2: rw=2049, want=132, limit=63
[   73.930640][T10565] Buffer I/O error on dev loop2, logical block 131, lost async page write
[   73.939656][T10565] attempt to access beyond end of device
[   73.945515][T10565] loop2: rw=2049, want=133, limit=63
[   73.951530][T10565] Buffer I/O error on dev loop2, logical block 132, lost async page write
[   73.960486][T10565] attempt to access beyond end of device
[   73.966128][T10565] loop2: rw=2049, want=142, limit=63
[   73.972112][T10565] Buffer I/O error on dev loop2, logical block 141, lost async page write
[   73.981152][T10565] attempt to access beyond end of device
[   73.986800][T10565] loop2: rw=2049, want=143, limit=63
[   73.992782][T10565] Buffer I/O error on dev loop2, logical block 142, lost async page write
[   74.002023][T10565] attempt to access beyond end of device
[   74.007653][T10565] loop2: rw=2049, want=144, limit=63
[   74.013455][T10565] Buffer I/O error on dev loop2, logical block 143, lost async page write
[   74.023554][T10565] attempt to access beyond end of device
[   74.029579][T10565] loop2: rw=2049, want=145, limit=63
[   74.034871][T10565] Buffer I/O error on dev loop2, logical block 144, lost async page write
[   74.044113][T10565] attempt to access beyond end of device
22:13:56 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r2, 0x4000, 0x0, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
dup(0xffffffffffffffff)
syz_open_dev$usbmon(0x0, 0x0, 0x0)

[   74.050066][T10565] loop2: rw=2049, want=161, limit=63
[   74.388153][T10580] attempt to access beyond end of device
[   74.396821][T10580] loop2: rw=1, want=2569, limit=63
[   74.471885][T10580] attempt to access beyond end of device
[   74.478194][T10580] loop2: rw=1, want=4617, limit=63
[   74.546540][T10580] attempt to access beyond end of device
[   74.553080][T10580] loop2: rw=1, want=6873, limit=63
[   74.654437][T10580] attempt to access beyond end of device
[   74.660723][T10580] loop2: rw=1, want=10513, limit=63
[   74.787909][T10576] attempt to access beyond end of device
[   74.796086][T10576] loop2: rw=2049, want=78, limit=63
[   74.803002][T10576] Buffer I/O error on dev loop2, logical block 77, lost async page write
[   74.814277][T10576] attempt to access beyond end of device
[   74.820702][T10576] loop2: rw=2049, want=79, limit=63
[   74.822634][T10580] attempt to access beyond end of device
[   74.825964][T10576] attempt to access beyond end of device
[   74.831860][T10580] loop2: rw=1, want=18001, limit=63
[   74.840681][T10576] loop2: rw=2049, want=80, limit=63
[   74.848289][T10576] attempt to access beyond end of device
[   74.856955][T10576] loop2: rw=2049, want=81, limit=63
[   74.862777][T10576] attempt to access beyond end of device
[   74.868467][T10576] loop2: rw=2049, want=130, limit=63
[   74.876827][T10576] attempt to access beyond end of device
[   74.882928][T10576] loop2: rw=2049, want=131, limit=63
[   74.888267][T10576] attempt to access beyond end of device
[   74.897304][T10576] loop2: rw=2049, want=132, limit=63
[   74.903492][T10576] attempt to access beyond end of device
[   74.913262][T10576] loop2: rw=2049, want=133, limit=63
[   74.919917][T10576] attempt to access beyond end of device
[   74.926273][T10576] loop2: rw=2049, want=142, limit=63
[   74.934741][T10576] attempt to access beyond end of device
[   74.941124][T10576] loop2: rw=2049, want=143, limit=63
[   74.946467][T10576] attempt to access beyond end of device
[   74.955430][T10576] loop2: rw=2049, want=144, limit=63
[   74.961246][T10576] attempt to access beyond end of device
[   74.985456][T10576] loop2: rw=2049, want=145, limit=63
[   75.001145][T10576] attempt to access beyond end of device
[   75.006873][T10576] loop2: rw=2049, want=161, limit=63
[   75.023146][T10580] attempt to access beyond end of device
[   75.029332][T10580] loop2: rw=1, want=25113, limit=63
[   75.040821][T10576] attempt to access beyond end of device
[   75.048324][T10576] loop2: rw=2049, want=26529, limit=63
[   75.058194][T10580] attempt to access beyond end of device
[   75.066206][T10580] loop2: rw=1, want=26761, limit=63
[   75.073099][T10576] attempt to access beyond end of device
[   75.079690][T10576] loop2: rw=2049, want=26809, limit=63
[   75.086662][T10580] attempt to access beyond end of device
[   75.094602][T10580] loop2: rw=1, want=27121, limit=63
[   75.104016][T10576] attempt to access beyond end of device
[   75.111710][T10576] loop2: rw=2049, want=27137, limit=63
[   75.118007][T10580] attempt to access beyond end of device
[   75.126215][T10580] loop2: rw=1, want=27241, limit=63
[   75.132556][T10576] attempt to access beyond end of device
[   75.144455][T10576] loop2: rw=2049, want=27257, limit=63
[   75.150975][T10580] attempt to access beyond end of device
[   75.156804][T10580] loop2: rw=1, want=27361, limit=63
[   75.164772][T10576] attempt to access beyond end of device
[   75.172518][T10576] loop2: rw=2049, want=27617, limit=63
[   75.179763][T10580] attempt to access beyond end of device
[   75.186460][T10580] loop2: rw=1, want=28329, limit=63
[   75.193596][T10576] attempt to access beyond end of device
[   75.199890][T10576] loop2: rw=2049, want=28921, limit=63
[   75.206770][T10580] attempt to access beyond end of device
[   75.213513][T10580] loop2: rw=1, want=28953, limit=63
[   75.222338][T10576] attempt to access beyond end of device
[   75.228290][T10576] loop2: rw=2049, want=29041, limit=63
[   75.235210][T10580] attempt to access beyond end of device
[   75.242940][T10580] loop2: rw=1, want=29193, limit=63
[   75.250794][T10576] attempt to access beyond end of device
[   75.258550][T10576] loop2: rw=2049, want=29281, limit=63
[   75.267543][T10580] attempt to access beyond end of device
[   75.274290][T10580] loop2: rw=1, want=29313, limit=63
[   75.280281][T10576] attempt to access beyond end of device
[   75.286278][T10576] loop2: rw=2049, want=29521, limit=63
22:13:57 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:57 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[   75.295520][T10580] attempt to access beyond end of device
[   75.318582][T10580] loop2: rw=1, want=29681, limit=63
[   75.331928][T10576] attempt to access beyond end of device
[   75.337960][T10576] loop2: rw=2049, want=30009, limit=63
[   75.354983][T10576] attempt to access beyond end of device
[   75.358759][T10580] attempt to access beyond end of device
[   75.364345][T10576] loop2: rw=2049, want=32881, limit=63
[   75.369476][T10580] loop2: rw=1, want=30217, limit=63
22:13:57 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:57 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r2, 0x4000, 0x0, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
dup(0xffffffffffffffff)
syz_open_dev$usbmon(0x0, 0x0, 0x0)

22:13:57 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:13:57 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[   75.925541][T10602] attempt to access beyond end of device
[   75.935898][T10602] loop2: rw=1, want=2993, limit=63
[   76.013515][T10602] attempt to access beyond end of device
[   76.028073][T10602] loop2: rw=1, want=5041, limit=63
[   76.111730][T10602] attempt to access beyond end of device
[   76.117839][T10602] loop2: rw=1, want=7809, limit=63
[   76.171312][T10602] attempt to access beyond end of device
[   76.177307][T10602] loop2: rw=1, want=9449, limit=63
[   76.547581][T10597] attempt to access beyond end of device
[   76.553755][T10597] loop2: rw=2049, want=78, limit=63
[   76.559196][T10597] attempt to access beyond end of device
[   76.565159][T10597] loop2: rw=2049, want=79, limit=63
[   76.570545][T10597] attempt to access beyond end of device
[   76.576378][T10597] loop2: rw=2049, want=80, limit=63
[   76.581793][T10597] attempt to access beyond end of device
[   76.587470][T10597] loop2: rw=2049, want=81, limit=63
[   76.592748][T10597] attempt to access beyond end of device
[   76.598774][T10597] loop2: rw=2049, want=130, limit=63
[   76.604069][T10597] attempt to access beyond end of device
[   76.609999][T10597] loop2: rw=2049, want=131, limit=63
[   76.615511][T10597] attempt to access beyond end of device
[   76.621335][T10597] loop2: rw=2049, want=132, limit=63
[   76.626694][T10597] attempt to access beyond end of device
[   76.632983][T10597] loop2: rw=2049, want=133, limit=63
[   76.638370][T10597] attempt to access beyond end of device
[   76.644100][T10597] loop2: rw=2049, want=142, limit=63
[   76.649463][T10597] attempt to access beyond end of device
[   76.655155][T10597] loop2: rw=2049, want=143, limit=63
[   76.660594][T10597] attempt to access beyond end of device
[   76.666434][T10597] loop2: rw=2049, want=144, limit=63
[   76.672076][T10597] attempt to access beyond end of device
[   76.677710][T10597] loop2: rw=2049, want=145, limit=63
[   76.683093][T10597] attempt to access beyond end of device
[   76.688777][T10597] loop2: rw=2049, want=161, limit=63
[   76.698093][T10597] attempt to access beyond end of device
[   76.703813][T10597] loop2: rw=2049, want=12289, limit=63
[   76.715591][T10597] attempt to access beyond end of device
[   76.721403][T10597] loop2: rw=2049, want=14337, limit=63
[   76.732901][T10597] attempt to access beyond end of device
[   76.739307][T10597] loop2: rw=2049, want=17505, limit=63
22:13:58 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r2, 0x4000, 0x0, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
dup(0xffffffffffffffff)
syz_open_dev$usbmon(0x0, 0x0, 0x0)

[   76.750351][T10597] attempt to access beyond end of device
[   76.756013][T10597] loop2: rw=2049, want=19977, limit=63
[   76.766857][T10597] attempt to access beyond end of device
[   76.772723][T10597] loop2: rw=2049, want=22601, limit=63
[   77.050842][T10620] attempt to access beyond end of device
[   77.057036][T10620] loop2: rw=1, want=2329, limit=63
[   77.133088][T10620] attempt to access beyond end of device
[   77.143115][T10620] loop2: rw=1, want=4561, limit=63
[   77.274593][T10620] attempt to access beyond end of device
[   77.280723][T10620] loop2: rw=1, want=9233, limit=63
[   77.435064][T10620] attempt to access beyond end of device
[   77.443684][T10620] loop2: rw=1, want=14177, limit=63
[   77.481537][T10617] attempt to access beyond end of device
[   77.487357][T10617] loop2: rw=2049, want=78, limit=63
[   77.495152][T10617] attempt to access beyond end of device
[   77.501177][T10617] loop2: rw=2049, want=79, limit=63
[   77.506533][T10617] attempt to access beyond end of device
[   77.515299][T10617] loop2: rw=2049, want=80, limit=63
[   77.520766][T10617] attempt to access beyond end of device
[   77.526690][T10617] loop2: rw=2049, want=81, limit=63
[   77.534726][T10617] attempt to access beyond end of device
[   77.541299][T10617] loop2: rw=2049, want=130, limit=63
[   77.546812][T10617] attempt to access beyond end of device
[   77.555622][T10617] loop2: rw=2049, want=131, limit=63
[   77.561318][T10617] attempt to access beyond end of device
[   77.567267][T10617] loop2: rw=2049, want=132, limit=63
[   77.575860][T10617] attempt to access beyond end of device
[   77.582213][T10617] loop2: rw=2049, want=133, limit=63
[   77.587639][T10617] attempt to access beyond end of device
[   77.596372][T10617] loop2: rw=2049, want=142, limit=63
[   77.601943][T10617] attempt to access beyond end of device
[   77.607971][T10617] loop2: rw=2049, want=143, limit=63
[   77.616939][T10617] attempt to access beyond end of device
[   77.623669][T10617] loop2: rw=2049, want=144, limit=63
[   77.633520][T10617] attempt to access beyond end of device
[   77.639794][T10617] loop2: rw=2049, want=145, limit=63
[   77.645905][T10617] attempt to access beyond end of device
[   77.654661][T10617] loop2: rw=2049, want=161, limit=63
[   77.663351][T10620] attempt to access beyond end of device
[   77.669401][T10620] loop2: rw=1, want=25705, limit=63
[   77.722670][T10617] attempt to access beyond end of device
[   77.731419][T10617] loop2: rw=2049, want=27105, limit=63
[   77.738981][T10620] attempt to access beyond end of device
[   77.745015][T10620] loop2: rw=1, want=27113, limit=63
[   77.755054][T10617] attempt to access beyond end of device
[   77.763075][T10617] loop2: rw=2049, want=27137, limit=63
[   77.773257][T10620] attempt to access beyond end of device
[   77.779264][T10620] loop2: rw=1, want=27409, limit=63
[   77.785093][T10617] attempt to access beyond end of device
[   77.791943][T10617] loop2: rw=2049, want=28217, limit=63
[   77.798079][T10620] attempt to access beyond end of device
[   77.804096][T10620] loop2: rw=1, want=28353, limit=63
[   77.812136][T10617] attempt to access beyond end of device
[   77.817872][T10617] loop2: rw=2049, want=28457, limit=63
[   77.824271][T10620] attempt to access beyond end of device
[   77.832247][T10620] loop2: rw=1, want=28529, limit=63
[   77.837716][T10617] attempt to access beyond end of device
[   77.844788][T10617] loop2: rw=2049, want=28577, limit=63
[   77.850885][T10620] attempt to access beyond end of device
[   77.856905][T10620] loop2: rw=1, want=28649, limit=63
[   77.866166][T10617] attempt to access beyond end of device
[   77.872124][T10617] loop2: rw=2049, want=28697, limit=63
[   77.877881][T10620] attempt to access beyond end of device
[   77.884335][T10620] loop2: rw=1, want=28769, limit=63
[   77.890016][T10617] attempt to access beyond end of device
[   77.895899][T10617] loop2: rw=2049, want=28817, limit=63
[   77.904294][T10620] attempt to access beyond end of device
[   77.910383][T10620] loop2: rw=1, want=28849, limit=63
[   77.915947][T10617] attempt to access beyond end of device
[   77.922437][T10617] loop2: rw=2049, want=29057, limit=63
[   77.928331][T10620] attempt to access beyond end of device
[   77.934291][T10620] loop2: rw=1, want=29145, limit=63
[   77.942886][T10617] attempt to access beyond end of device
[   77.949388][T10617] loop2: rw=2049, want=29177, limit=63
[   77.955155][T10620] attempt to access beyond end of device
[   77.961049][T10620] loop2: rw=1, want=30825, limit=63
[   77.968292][T10617] attempt to access beyond end of device
[   77.974800][T10617] loop2: rw=2049, want=30945, limit=63
[   77.984105][T10620] attempt to access beyond end of device
[   77.990073][T10620] loop2: rw=1, want=31305, limit=63
[   77.996184][T10617] attempt to access beyond end of device
[   78.002749][T10617] loop2: rw=2049, want=31553, limit=63
[   78.009019][T10620] attempt to access beyond end of device
[   78.014922][T10620] loop2: rw=1, want=31793, limit=63
[   78.023656][T10617] attempt to access beyond end of device
[   78.029600][T10617] loop2: rw=2049, want=31817, limit=63
[   78.035453][T10620] attempt to access beyond end of device
[   78.041781][T10620] loop2: rw=1, want=31913, limit=63
[   78.047406][T10617] attempt to access beyond end of device
[   78.053451][T10617] loop2: rw=2049, want=31937, limit=63
[   78.061734][T10620] attempt to access beyond end of device
[   78.067740][T10620] loop2: rw=1, want=32033, limit=63
[   78.073559][T10617] attempt to access beyond end of device
[   78.079865][T10617] loop2: rw=2049, want=32057, limit=63
[   78.085424][T10620] attempt to access beyond end of device
[   78.091876][T10620] loop2: rw=1, want=32153, limit=63
[   78.098020][T10617] attempt to access beyond end of device
[   78.104579][T10617] loop2: rw=2049, want=32177, limit=63
[   78.111056][T10617] attempt to access beyond end of device
[   78.111716][T10620] attempt to access beyond end of device
[   78.116764][T10617] loop2: rw=2049, want=32881, limit=63
[   78.123552][T10620] loop2: rw=1, want=32513, limit=63
22:14:00 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r2, 0x4000, 0x0, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
dup(0xffffffffffffffff)
syz_open_dev$usbmon(0x0, 0x0, 0x0)

22:14:00 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:14:00 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:14:00 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[   78.567007][T10628] attempt to access beyond end of device
[   78.591332][T10628] loop2: rw=1, want=2409, limit=63
[   78.699972][T10628] attempt to access beyond end of device
[   78.718958][T10628] loop2: rw=1, want=4457, limit=63
[   78.810670][T10628] attempt to access beyond end of device
[   78.823338][T10628] loop2: rw=1, want=7073, limit=63
22:14:00 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

22:14:00 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf3, &(0x7f0000000240)="f7f258480aa4ce20e779e77d0076cc03592a160500000032a56f7259e480249950f34c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb01819502f5fa6fa2e990b1df395f3249121933b05884012ce6e5f8844d19a1602ce32d48041cdd4dabd5b386e3f2810a5be8d2c4cd3505cc248a2f6a4fbdbc83823fa035cdd1232d1f276e39f897faf5c1f78ed02790f26129d6582a377c1fdaaaa135a44e88f785290f970c5b5afb70a741197192c4ea43bed2b6b7515fbf7da8c162d744bcb9d2a44e570dd0ea9fae5f860d597c85f808ca00"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[   78.970318][T10628] attempt to access beyond end of device
[   78.984133][T10628] loop2: rw=1, want=10393, limit=63
[   79.229852][T10625] attempt to access beyond end of device
[   79.242335][T10625] loop2: rw=2049, want=78, limit=63
[   79.243291][T10628] attempt to access beyond end of device
[   79.253113][T10625] buffer_io_error: 35 callbacks suppressed
[   79.253150][T10625] Buffer I/O error on dev loop2, logical block 77, lost async page write
[   79.254965][T10628] loop2: rw=1, want=20705, limit=63
[   79.265871][T10625] attempt to access beyond end of device
[   79.292130][T10628] attempt to access beyond end of device
[   79.297953][T10628] loop2: rw=1, want=25049, limit=63
[   79.299565][T10625] loop2: rw=2049, want=79, limit=63
[   79.323154][T10625] Buffer I/O error on dev loop2, logical block 78, lost async page write
[   79.343055][T10625] attempt to access beyond end of device
[   79.351499][T10625] loop2: rw=2049, want=80, limit=63
[   79.356964][T10625] Buffer I/O error on dev loop2, logical block 79, lost async page write
[   79.365634][T10625] attempt to access beyond end of device
[   79.374054][T10625] loop2: rw=2049, want=81, limit=63
[   79.380266][T10625] Buffer I/O error on dev loop2, logical block 80, lost async page write
[   79.391191][T10625] attempt to access beyond end of device
[   79.396929][T10625] loop2: rw=2049, want=130, limit=63
[   79.402418][T10625] Buffer I/O error on dev loop2, logical block 129, lost async page write
[   79.413942][T10625] attempt to access beyond end of device
[   79.419792][T10625] loop2: rw=2049, want=131, limit=63
[   79.425225][T10625] Buffer I/O error on dev loop2, logical block 130, lost async page write
[   79.436655][T10625] attempt to access beyond end of device
[   79.442905][T10625] loop2: rw=2049, want=132, limit=63
[   79.448291][T10625] Buffer I/O error on dev loop2, logical block 131, lost async page write
[   79.460483][T10625] attempt to access beyond end of device
[   79.466335][T10625] loop2: rw=2049, want=133, limit=63
[   79.472398][T10625] Buffer I/O error on dev loop2, logical block 132, lost async page write
[   79.491417][T10625] attempt to access beyond end of device
[   79.497194][T10625] loop2: rw=2049, want=142, limit=63
[   79.504884][T10625] Buffer I/O error on dev loop2, logical block 141, lost async page write
[   79.513727][T10625] attempt to access beyond end of device
[   79.519437][T10625] loop2: rw=2049, want=143, limit=63
[   79.524832][T10625] Buffer I/O error on dev loop2, logical block 142, lost async page write
[   79.533440][T10625] attempt to access beyond end of device
22:14:01 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fadvise64(r2, 0x4000, 0x0, 0x4)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
dup(0xffffffffffffffff)
syz_open_dev$usbmon(0x0, 0x0, 0x0)

[   79.539167][T10625] loop2: rw=2049, want=144, limit=63
[   79.544483][T10625] attempt to access beyond end of device
[   79.550425][T10625] loop2: rw=2049, want=145, limit=63
[   79.555758][T10625] attempt to access beyond end of device
[   79.562207][T10625] loop2: rw=2049, want=161, limit=63
[   79.840834][T10660] attempt to access beyond end of device
[   79.846805][T10660] loop2: rw=1, want=3289, limit=63
[   79.917117][T10660] attempt to access beyond end of device
[   79.923112][T10660] loop2: rw=1, want=5337, limit=63
[   79.992449][T10660] attempt to access beyond end of device
[   79.999101][T10660] loop2: rw=1, want=7393, limit=63
[   80.112271][T10660] attempt to access beyond end of device
[   80.118231][T10660] loop2: rw=1, want=11769, limit=63
[   80.211884][T10660] attempt to access beyond end of device
[   80.218049][T10660] loop2: rw=1, want=14441, limit=63
[   80.244947][T10660] ==================================================================
[   80.253186][T10660] BUG: KCSAN: data-race in __mpage_writepage / generic_write_end
[   80.261943][T10660] 
[   80.264303][T10660] write to 0xffff88811d9d8768 of 8 bytes by task 10657 on cpu 1:
[   80.272321][T10660]  generic_write_end+0xd4/0x290
[   80.277198][T10660]  fat_write_end+0x57/0x120
[   80.281706][T10660]  generic_perform_write+0x1d7/0x320
[   80.286998][T10660]  __generic_file_write_iter+0x240/0x370
[   80.292633][T10660]  generic_file_write_iter+0x294/0x38e
[   80.298114][T10660]  new_sync_write+0x303/0x400
[   80.302909][T10660]  __vfs_write+0x9e/0xb0
[   80.307144][T10660]  vfs_write+0x189/0x380
[   80.311146][T10657] attempt to access beyond end of device
[   80.311395][T10660]  ksys_write+0xc5/0x1a0
[   80.317168][T10657] loop2: rw=2049, want=78, limit=63
[   80.321230][T10660]  __x64_sys_write+0x49/0x60
[   80.321250][T10660]  do_syscall_64+0xc7/0x3b0
[   80.321267][T10660]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   80.321270][T10660] 
[   80.321285][T10660] read to 0xffff88811d9d8768 of 8 bytes by task 10660 on cpu 0:
[   80.321302][T10660]  __mpage_writepage+0xb5/0xdc0
[   80.321330][T10660]  write_cache_pages+0x400/0xa10
[   80.326730][T10657] attempt to access beyond end of device
[   80.331188][T10660]  mpage_writepages+0xab/0x180
[   80.331211][T10660]  fat_writepages+0x2a/0x40
[   80.331229][T10660]  do_writepages+0x6b/0x170
[   80.331245][T10660]  __filemap_fdatawrite_range+0x1bb/0x220
[   80.331260][T10660]  generic_fadvise+0x47b/0x490
[   80.331285][T10660]  vfs_fadvise+0x8a/0x90
[   80.336076][T10657] loop2: rw=2049, want=79, limit=63
[   80.341999][T10660]  ksys_fadvise64_64+0x5b/0xa0
[   80.342018][T10660]  __x64_sys_fadvise64+0x5a/0x70
[   80.342037][T10660]  do_syscall_64+0xc7/0x3b0
[   80.342054][T10660]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   80.342067][T10660] 
[   80.344505][T10657] attempt to access beyond end of device
[   80.352022][T10660] Reported by Kernel Concurrency Sanitizer on:
[   80.352043][T10660] CPU: 0 PID: 10660 Comm: syz-executor.2 Not tainted 5.7.0-rc1-syzkaller #0
[   80.352052][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   80.352059][T10660] ==================================================================
[   80.352067][T10660] Kernel panic - not syncing: panic_on_warn set ...
[   80.352083][T10660] CPU: 0 PID: 10660 Comm: syz-executor.2 Not tainted 5.7.0-rc1-syzkaller #0
[   80.352091][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   80.352105][T10660] Call Trace:
[   80.357540][T10657] loop2: rw=2049, want=80, limit=63
[   80.362352][T10660]  dump_stack+0x11d/0x187
[   80.362378][T10660]  panic+0x210/0x640
[   80.362469][T10660]  ? vprintk_func+0x89/0x13a
[   80.362496][T10660]  kcsan_report.cold+0xc/0x1a
[   80.368539][T10657] attempt to access beyond end of device
[   80.373440][T10660]  kcsan_setup_watchpoint+0x3fb/0x440
[   80.373467][T10660]  __mpage_writepage+0xb5/0xdc0
[   80.373492][T10660]  ? __sanitizer_cov_trace_switch+0x45/0x70
[   80.373524][T10660]  ? __read_once_size+0x45/0xd0
[   80.378134][T10657] loop2: rw=2049, want=81, limit=63
[   80.382517][T10660]  ? __this_cpu_preempt_check+0x3c/0x130
[   80.382537][T10660]  ? __mod_memcg_state+0x85/0x110
[   80.382554][T10660]  ? __this_cpu_preempt_check+0x3c/0x130
[   80.382567][T10660]  ? __this_cpu_preempt_check+0x3c/0x130
[   80.382588][T10660]  ? __rcu_read_unlock+0x77/0x390
[   80.382610][T10660]  ? percpu_counter_add_batch+0x10f/0x140
[   80.382650][T10660]  ? clear_page_dirty_for_io+0x12e/0x520
[   80.388663][T10657] attempt to access beyond end of device
[   80.393226][T10660]  write_cache_pages+0x400/0xa10
[   80.393261][T10660]  ? clean_buffers+0x1a0/0x1a0
[   80.397623][T10657] loop2: rw=2049, want=130, limit=63
[   80.402797][T10660]  ? fat_add_cluster+0xd0/0xd0
[   80.402820][T10660]  ? fat_readpages+0x50/0x50
[   80.402848][T10660]  mpage_writepages+0xab/0x180
[   80.407717][T10657] attempt to access beyond end of device
[   80.412539][T10660]  ? fat_add_cluster+0xd0/0xd0
[   80.412563][T10660]  ? apic_timer_interrupt+0xa/0x20
[   80.412591][T10660]  fat_writepages+0x2a/0x40
[   80.417228][T10657] loop2: rw=2049, want=131, limit=63
[   80.422966][T10660]  do_writepages+0x6b/0x170
[   80.422984][T10660]  ? _raw_spin_unlock+0x38/0x60
[   80.423004][T10660]  ? wbc_attach_and_unlock_inode+0xdd/0x3b0
[   80.423029][T10660]  ? __filemap_fdatawrite_range+0x16f/0x220
[   80.425481][T10657] attempt to access beyond end of device
[   80.430969][T10660]  __filemap_fdatawrite_range+0x1bb/0x220
[   80.430997][T10660]  generic_fadvise+0x47b/0x490
[   80.431016][T10660]  vfs_fadvise+0x8a/0x90
[   80.431035][T10660]  ksys_fadvise64_64+0x5b/0xa0
[   80.431063][T10660]  __x64_sys_fadvise64+0x5a/0x70
[   80.437372][T10657] loop2: rw=2049, want=132, limit=63
[   80.446134][T10660]  do_syscall_64+0xc7/0x3b0
[   80.446158][T10660]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   80.446172][T10660] RIP: 0033:0x45ca29
[   80.446207][T10660] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   80.456377][T10657] attempt to access beyond end of device
[   80.464275][T10660] RSP: 002b:00007f4ef51cfc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[   80.464294][T10660] RAX: ffffffffffffffda RBX: 00000000004db980 RCX: 000000000045ca29
[   80.464304][T10660] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000000000005
[   80.464314][T10660] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
[   80.464333][T10660] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000ffffffff
[   80.471000][T10657] loop2: rw=2049, want=133, limit=63
[   80.479578][T10660] R13: 00000000000000ad R14: 00000000004c35d6 R15: 00007f4ef51d06d4
[   80.480859][T10660] Kernel Offset: disabled
[   80.804756][T10660] Rebooting in 86400 seconds..