last executing test programs:

12m26.195273226s ago: executing program 0 (id=1841):
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8)
r1 = syz_io_uring_setup(0x6937, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xfffffffe, 0x100000, 0x0, r0}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}})
r4 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000080)={0x1, 0x9}, 0x1)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r5, 0x0)
accept4(r5, 0x0, 0x0, 0x0)

12m25.255613979s ago: executing program 0 (id=1849):
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioperm(0x376, 0x5, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x0, 0x0, 0x34324258, 0x0, 0x0, [{}, {0x1}, {}, {0xfffffffe}]}})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xdd)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f1b", @ANYRES64], 0x22)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

12m22.778437004s ago: executing program 0 (id=1856):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0xfff)
socket(0x40000000015, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3}, 0x20)

12m19.230211684s ago: executing program 0 (id=1862):
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0x2000083, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x24d, &(0x7f0000000e00)="$eJzs3M9qU1sUB+B1krRN7x0kgzu6CB7QgaPS9glSpILYkZKBOtBiW5AkFFoItIqhI5/AJ/E5nPgGPoDQmQ4KR06SNimm1WL+lPp9ky44+7fX2k1CRtkvb7UaW7v7O0dvv0S5nEShFrXkOKIahcgtBABw03zPsjjOeq6WLBUmNRMAMFm/+f2/OMWRAIAJe/L02aO1jY31x2lajmi9b9eT6P3tPV/bidfRjO1YjkqcRGRnevWDhxvrUUpz1bjb6rTrebL14lN//7WvEd38SlSiOjq/kvYM5Tvt+lz80+9fy/OrUYn/RudXR+SjPh/37gzNvxSV+PwqdqMZW5FnB/l3K2l6P/vw7c3zfOI8n3Ta9YXuuoGsOPUXBwAAAAAAAAAAAAAAAAAAAACAG2spTdM0yz5mWZZ1zt2/UzzpPl9KT1XP38/Ty190P1Bn6H6d5bxF0ls/yJfi/1KUZnl2AAAAAAAAAAAAAAAAAAAAuC72Dw4bm83m9t44i7PdyzHmnf+4iGJ/tGYScQ3m6RaL+TzT6XU7rtirdsUWURh6AzQ2k/hFqhyTOWkW8dPOxQtT82PqPv/veE+RRMTc2T/zssWFmBvzJwUAAAAAAAAAAAAAAAAAAJiywY9+Rzw8msFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAD+weHjShH7OXFZrO5XTgt9i4uOv3wZWuGihkfEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/AjwAAAP//PdN3/g==")
syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5ad5b0b10a818868cc63e509dca434325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c"], 0xff, 0x6de, &(0x7f0000000180)="$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")
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x13)
ptrace(0x4206, r2)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[], 0x1, 0xb0d, &(0x7f0000000d80)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000400)={0x401, 0x18df80000000, 0x1, 0xfdb6})

12m16.755039239s ago: executing program 0 (id=1880):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0xfff)
socket(0x40000000015, 0x5, 0x0)
socket(0x22, 0x2, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3}, 0x20)

12m16.67118064s ago: executing program 0 (id=1871):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, <r8=>0x0, <r9=>0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000180)=[0x2], &(0x7f0000000340)=[r9, r8], &(0x7f00000003c0), 0x0, 0x1})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x800)

12m15.328029159s ago: executing program 32 (id=1871):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, <r8=>0x0, <r9=>0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000180)=[0x2], &(0x7f0000000340)=[r9, r8], &(0x7f00000003c0), 0x0, 0x1})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x800)

11m40.897426144s ago: executing program 5 (id=2032):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000500)=0x27, 0x4)

11m39.815544879s ago: executing program 5 (id=2040):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x101800, 0x10c)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0205838, &(0x7f0000000040)={0x2, 0x401, 0x7, 0x2, 0xe, 0xa312})

11m37.925984886s ago: executing program 5 (id=2059):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0xfff)
socket(0x40000000015, 0x5, 0x0)
socket(0x22, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3}, 0x20)

11m37.076342648s ago: executing program 5 (id=2068):
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0x2000083, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x24d, &(0x7f0000000e00)="$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")
syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5ad5b0b10a818868cc63e509dca434325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c"], 0xff, 0x6de, &(0x7f0000000180)="$eJzs3c9vHGcZB/DvrNeON1TBaZM2QkVYiVSQIhInVgrhgkEI5VChqhx6thKnsbpJqsRFaYUgBQQnJA79AwqSbxwQEvegcOFSbr36WAmJS8QhqpAWzezsete7ju0kXifw+UTjed9533nnmWd+eddZbYD/W5dOp3kvRS6dfuNOWd9YX2xvrC8eqpvbScpyI2l2ZyluJMX9ZKlsLwamDMxHfLx68a3PHmx83q0166nqP9Vfb3ZXIY/Zxt16ynw93vzYNad3NX53rCq8vJDkcj0fNrPbsYY6lkk7Vc/hwHVG3N3L6tte78Czr/d0KrrPzRFzyeH6yVz9TlDfHRqTi3B/7OkuBwAAAM+pT28edAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/Km//7+op0Y9z3yK3vf/z/SW1eVn0NKue97b1zgAAAAAAAAAYDK+9jAPcydHevVOUf3N/2RVOZYvOsmX8n5uZyW3ciZ3spy1rOVWziWZGxho5s7y2tqtc/01S+PXPD92zfOT2mMAAAAAAAAA+J/0i7Q2//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgiKZ6s6q6Vg9z1wazWy25W7yjyQzBx3vHhTjFt6bfBwAAADwRGYfY50vP8zD3MmRXr1TVK/5X65eL8/m/dzIWlazlnZWcqV+DV2+6m9srC+2N9YXr5dTWR8e93v/2lMYM/UIU1Vt3JZPVD1auZrVasmZXC6S/3Q6nUZ326eSE714BuIa8FEZU/Hd2i4ja9ZpLff8d9u9i/BUDL8V0XhEz9ZmcEk/Iwt1bOWaR7sZKKo3apKtmdjx6DSHanPVqNP9LZ1Lo//Oz7F9yPnhel7uz6/3Ned71c9EI1UmzqfRP1IvPzoTydf/8se3r7VvvHvt6u3Tz84u7WBqm+Vbz4nFgUy88lxnornH/gtVJo7365fyw/w4pzOfN3Mrq/lJlrOWlXTq9uX6fC5/zj06U0tDtTd3imSmPi7dY7abmObzg6q0nJPVukeymiI3cyUreb36dz7n8q1cyIVcHDjCx7eNu9q36qpvbL3qe0f6r2ODP/WNulDe3X6zeZdbetQeb3d2Pi3de3+Z16MDee2e9Q/6vY4OXAcLA1l6sZed6bGDP869sfmVulBu45c7PCcma67ORHkB9Z4Svehe6maiWT2LRs/z33fK9dK+0elcW35vm/Hvbqm/Vs/L02r9qzv17hl/KJ6u8nx5MbP1nWT47CjbXurfZQbaOpvncrdt+Ilbrne8aiuK3pX6o9ysToDRK3Wm/h1udKTzVdsrY9sWq7YTA21Dv2/lZtq5MoH8AfA4/v52vziXwzOtf7Y+bX3S+lXrWuuN2e8f+vahV2cy/bfp7zQXpl5rvFr8OZ/kZ5uv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMd3+4MP311ut1dujS80tm9aXup9cU27vdLK1j7bjXxo/IBF/YU+O8TzTBbSHG2aLfMyuGS6m6gJR9jaGsZIofPzZOIZ632J4Pg+vy0LzZEzalxhaWjJn0YH/GiPERa7uy72sdDIZDdaXsXjmg7ohgRMzNm16++dvf3Bh99cvb78zso7KzemL1y4uHDxwuuLZ6+utlcWuj8POkpgP2w+9A86EgAAAAAAAAAAAGC3xn0w4OQLO31oZFef8fA/CwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICn4tLpNO+lyLmFMwtlfWN9sV1OvfJmz2aSRiMpfpoU95OldKfMDQxX5A/30xmznY9XL7712YONzzfHanb7J416vr1Htya5W0+ZTzJVz5/A0HiXn3i84t+9fSgT9kWn01l6svjg6fhvAAAA///1I/PD")
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
ptrace(0x4206, r3)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[], 0x1, 0xb0d, &(0x7f0000000d80)="$eJzs3U2sXFUBAOAz8968H1roFAs8C/IjCKjwCq9P/Gm0JRATCSXGDQlx05SCjbUmYqISEtuuTYSQalz5E1dsCBoT2ZimKzck0oSYsEIXmtDUSOJCq+2YN3POvDuHmXdn3s/MvM73JXfOnHvuvefcO3fu/z0nABOr2vxcXl6ohHD2zVcff//ev82v9DnYHqLe/JwuxGohhEqMT2fTe2+qFV754KWj3cJKWGp+pnh46lJ73B0hhFPhznAu1MPesxdeeWvpycOnnzhz19uvHbi4NXMPAACT5avnDizf9Jc/3br78uu3Hwqz7f7p+Lwe4zvjcf+heOCfjv+roTNeKXRFM9lw07GrzncON9VluGI+tWy46RAa3fKfyfKv9SjnbFg7/6lCv27zDdtZWo/roVJd7IhXq4uLrXPy0Dyvn6ksnjx+4rkXRlRQYNP9644Qwp2F7rEznfFx6w6OQRnW2TXGoAzbsjs0vLwuN1pGPs9D6hq7Rr0FAmjJ7xd+yKn8ysLG5FMry//So9U1x4eNGPb632l27fxntjr/Neb/nvOtcFT5JyPO/9enbXHYPNfq2pTmK/2PdsZ4fh8hf36p9/8vv9PR2Xcqm16c/lxZOXvdR9gu9xd6lXNqyOVYr17lz9eLa9UXY5iWw5ey9OL/J/9Nt8tvDHT37/z6v043bl3aGY+6HOPSdS6L2kam1RjhtgcYb/lzc410fzTKn+vL02dL0udK0udL0q8rSd9Rkg6T7Lff/XF4ubJ6np+f0w96PTxdZ7s+hjcMWJ5B78fl+efP/Q5qo/nnzxPDOPv9kaePfe7ZZy60nv+vtNf/q3F9T6cb9fjfOhcHSNcL8+vq7Wf/6535VLsO9/dwY1ae67sM3/y+p3O4Sivevkx7Q69yLHSOt6vXcLd1DlfPhpuPXX5BPz8+uS4bLx1/pO1qWl7T2fzWsvmYycqRtiu7Y7hSjh+9H2BD0vrY4/n/9s5tIdQqzx0/ceyhGE/r6R+narMr/R8ebrGBTdDv+z8LofP9n53t/rVqcbuwa7V/pbVdeCNOr7P/Ujufzv77Yzzt574xNd/sv3j02yee3fzZh4n2wg9e/OaREyeOfWdrvoTqVk15jL58eTyKMciXdNoyLuWZqC8r+9gxKEbJlxFvmIAtt++HrYOAB49/68jzx54/dnL/I4/sX1p65PP7l/c1j+v3FY/ui06NoLTAZlrd6a893I5hFQgAAAAAAAAAAAAo9b0nHr/wzvnPvtt6/3/1/b/0/n968rf1/v9qXRfVQv/QpXbc9B7g7i7pzWGyClZnsuFqsftIVt49WT43ZePdHMN2O37x/f+UXV6vayrPLVn/Wo9oVp3Ah+pLmcnqIMnbC/x4DM/E8FcBRqgy3713DLvVb138b6R1PdVPUagfo6F+4O0j/W5pbUj1mKTnvrvW61T4sXcPoYxsvmG8TjjqeQS6+8dE1f/9z9UZH6i+5foYlH2Suunh5vezdawTA3aN2a2d/uF1lr/R8yi9tvUbH4CCkbX/GS8MpuueKTz5h6/MrXRpsEuPdm4v8/pLYRB/fqczPu7tT251/nm7fcPOf9TzP+z2P9vt3/W9/ctazKuvL9///Pziu4Vsw95+88/nP94QquwZLP/LMf80N/eF/vJv/DLLP78h1Kf/Zvlf10f+Xeu2v63/PH9a+P6/mH9abPffXZ5/aC7/Vokrc53LIb9unO7/5deNkyvZ/Ke6PdfI/2svdvv919lQ49WYP0yy7dLO7KCy44j2Qfv62/+NTg3U/m//hc02a/lzGJ+J8bQhTs855PuEQcufnq9I+4GbsulXSvZv62n/d5waX5r09n+/EMOy/0Nq/zetj/W4yy/Em8syxWtdlu21uq2B7eq9ibr/ty26ub6Gq/UxTBj5vExC15hax3jtduJGXP5Go7G1F7RKjDRzRr78C+cJd4w4/5EY9fIvk7f/mz/3n7f/mx/j5+3/5ul5+795+nz8hXql5+3/5sszb/83T78lm27ePvBCSfpHS9L3dk9vn7bfWjL+bSXpHytJv6udfrBjiJR+e8n4d/RKj3NwY8n4d5ek31OS/omS9HvXSH9gZwj3F9KLbUCn8T9ZMv1rXXofZVLnHyZZ/n5e7///zcMsFjAE6f5Pr///npJ0YPv6yesPP/bMb75eb73/P9O+HpLu4x2K8Vo8f/p+jOf3vUMhvpJ2Psb/mqWP+/UOmCR5/Rn5/v2+knRg+0pn9f7fMIEqc917x7Cs3qpex/lsL5+K4adj+EAMH4zhYgz3xfDhGC4NqXxsjcfe+N2Blyur5/u7svR+nyevVDvP7DvqiQoh7O+zPPn1gUGfZ8/r8RvURvNf5+tgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI1Ntfi4vL1RCOPvmq48/ffj4vpU+B9tD1Juf04VYrT1eCA/FcCqGv4hfrnzw0tFieDWGlbAUKqHS7h+eutTOaUcI4VS4M5wL9bD37IVX3lp68vDpJ87c9fZrBy5u3RIAAACAa9//AwAA///sPRGX")
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000400)={0x401, 0x18df80000000, 0x1, 0xfdb6})

11m36.513347186s ago: executing program 5 (id=2073):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0xfff)
socket(0x40000000015, 0x5, 0x0)
socket(0x22, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3}, 0x20)

11m36.035114142s ago: executing program 5 (id=2079):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19)

11m35.787206696s ago: executing program 33 (id=2079):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19)

10m37.003270564s ago: executing program 6 (id=2660):
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r1}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@struct={0x1, 0x0, 0x0, 0x4, 0x1, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
close(0x3)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES32], 0xfd, 0x1505, &(0x7f0000000880)="$eJzs3Au4TtX2MPAx5pyLbefyJrmvMcfiTS6TJAklySVJkpA7CUmSJElik1sSkpDrTnIPuSdpu98vuSftHEmShIQk83t2l8+/czp/59J39J09fs+znj3Hu9aYa6w9nne/a67n2e9XXYZWbVCtUl1mhn+F/nWAP/9IAoAEABgAANkAIACA0tlLZ0/bn0lj0r90EvFvQ/N7r9ab/p+vRPx5SP/TN+l/+ib9T9+k/+mb9D99k/7/V7vsalv6n75J/4VI12bmuVq29LvJ8///z6l/J1k+/9MF/Hs7pP//bfQ/dbT0P32T/qdv0v/0TfqfngVXugBxhcn7P32T/guRrv3hz5Q3nLvSz7Rl+yc2IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDiP+Ccv8QAwK/jK12XEEIIIYQQQggh/jj+nStdgRBCCCGEEEIIIf7fQ1CgwUAAGSAjJEAmSISrIDNkgayQDWJwNWSHayAHXAs5IRfkhjyQF/JBfgiBwAJDBAWgIMThOigE10NhKAJFoRg4KA4l4AYoCTdCKbgJSsPNUAZugbJQ7qdzprkdKsIdUAnuhMpQBapCNbgLqsPdUAPugZpwL9SC+6A23A914AGoC/WgPjwIDaAhNILG0ASaQjNoDi0uk5+c7ffyn4Pu8Dz0gJ6QBL2gN7wAfaAv9IP+MABehIHwEgyCl2EwDIGh8AoMg1dhOLwGI2AkjILXYTSMgbEwDsbDBEiGN2AivAmT4K2GWWAKTIVpMB1mwEx4G2bBbJgD78BcmAfzITnTQlgEi+FdWALvwVJ4H5bBB5ACy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2AYfwnbYATthF+yGPbAXPoJ98DHsh08gFT/9J/PP/jYfuiIgoEKFBg1mwAyYgAmYiImYGTNjVsyKMYxhdsyOOTAH5sScmBtzYxLmxfyYHwkJGRkLYAGMYxwLYSEsjIWxKBZFhw5LYAksiTdiKSyFpbE0lsEyWBbLYTm8FW/FClgBK2JFrISVsDJWxqpYFe/Cu/BurIE1sCbWxFpYC2tjbayDdbAu1sX6WB8bYANshI2wCTbBZtgMW2ALbIktsRW2wjbYBttiW2yH7bA9tscO2AE7YkfshJ2wM3bGLtgFu+Kz+Cw+h8/h8/g89sTKqhf2xt7YB/tgP+yP/fFFHIgv4Uv4Mg7GITgUX8FX8FUcjmdwBI7EUTgKK6gxOBbHIasJmIzJmBEm4iSchJNxCk7BaTgdZ+BMnImzcDbOxndwLs7DebgAF+AiXIyLcQm+h0txKS7Ds5iCy3EFrsRVuBpX4Vpch2txA27EDbgZN+NW3Iof4oe4A3fgLtyFe3APfoQf4cf4MQ7GVEzFA3gAD+JBPISH8DAexiN4BI/iUTyGx/A4HscTeBJP4Uk8jafxDJ7FcwBwHs/jBbyAF/Fi2ptfpTHKqAwqg0pQCSpRJarMKrPKqrKqmIqp7Cq7MiqHyqlyqtwqt8qr8qr8Kr8iRYpVpAqoAiqu4qqQKqQKq8KqqCqqnHKqhCqhSqqSqpQqpUqrm1UZdYsqq8qp1u5WdauqoNq4iuoOVUlVUpVVFVVVVVPVVHVVXdVQNVRNVVPVUrVUbXW/qqN6YT+sp9I600ANwUZqKDZRTVUz1Vy9ig+plmo4tlKtVRv1iBqJI7Cdaunaq8dVBzUWO6on1Th8SnVWE7CLekZ1Vc+qbuo51V21cj1UTzUZe6neahr2UX1VP9VfzcIqKq1jVdXL6rmMQ9RQ9YpahK+q4eo1NUKNVKPU62q0GqPGqnFqvJqgktUbaqJ6U01Sb6nJaoqaqqap6WqGmqneVrPUbDVHvaPmqnlqvlqgFqpFarF6Vy1R76ml6n21TH2gUtRytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVdvUh2q72qF2ql1qt9qj9qqP1D71sdqvPlGp6lN1QP1FHVSfqUPqc3VYfaGOqC/VUfWVOqa+VsfVN+qEOqlOqW/VafWdOqPOqnPqe3Ve/aAuqB/VReUVaNRKa210oDPojDpBZ9KJ+iqdWWfRWXU2HdNX6+z6Gp1DX6tz6lw6t8mj8+p8Or8ONWmrWUe6gC6o4/o6XUhfrwvrIrqoLqadLq5L6Bt0SX2jLqVv0qX1zbqMvkWX1eV0eQ/6Nl1B364r6jt0JX2nrqyr6Kq6mr5LV9d36xr6Hl1T36tr6ft0bX2/rqMf0HV1PV1fP6gb6Ia6kW6sm+imuplurlvoh3RL/bBupVvrNvoR3VY/qtvpx3R7/bjuoJ/QHfWTupN+SnfWT+su+hndVT+ru+kf9UXtdQ/dUyfpXrq3fkH30X11P91fD9Av6oH6JT1Iv6wH6yF6qH5FD9Ov6uH6NT1Cj9Sj9Ot6tB6jx+pxeryeoJP1G3qiflNP0m/pyXqKnqqn6el6hu73y0xz/oH8N38nf9BPZ9+qt+kP9Xa9Q+/Uu/RuvUfv1Xv1Pr1P79f7dapO1Qf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9vf5Wn9bf6TP6rD6rv9fn9Xl94ZffARg0ymhjTGAymIwmwWQyieYqk9lkMVlNNhMzV5vs5hqTw1xrcppcJrfJY/KafCa/CQ0Za9hEpoApaOLmOlPIXG8KmyKmqClmnCluSpgb/u38y9XXwrQwLU1L08q0Mm1MG9PWtDXtTDvT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfT1XQ13Uw30910Nz1MD5Nkkkxv84LpY/qafqa/GWBeNAPNQDPIDDKDzWAz1Aw1w8wwM9wMNyPMCDPKjDKjzWgz1ow14814k+yzmYlmoplkJpnJZrKZOiCbmW6mm5lmppllZpk5Zo6Za+aa+Wa+WWgWmsVmsVlilpilZqlZZpaZFLPcLDcrzUqz2qw2a81as96sNxvNRrPZbDYpZpvZZrab7Wan2Wl2m91mr9lr9pl9Zr/Zb1JNqjlgDpiD5qA5ZA6Zw+awOWKOmKPmqDlmjpnj5rg5YU6YU+aUOW1OmzPmjDlnzpnz5ry5YC6Yi+Zi2m1foAIVmMAEGYIMQUKQECQGiUHmIHOQNcgaxIJYkD3IHuQIrg1yBrmC3EGeIG+QL8gfhAEFNuAgCgoEBYN4cF1QKLg+KBwUCYoGxQIXFA9KBDcEJYMbg1LBTUHp4OagTHBLUDYoF5QPbg1uCyoEtwcVgzuCSsGdQeWgSlA1qBbcFVQP7g5qBPcENYN7g1rBfUHt4P6gTvBAUDeoF9QPHgwaBA2DRkHjoEnQNGgWNA9a/KHze38m18OuR9gzTAp7hb3DF8I+Yd+wX9g/HBC+GA4MXwoHhS+Hg8Mh4dDwlXBY+Go4PHwtHBGODEeFr4ejwzHh2HBcOD6cECaHb4QTwzfDSeFb4eRwSjg1mBZOD2eEM8O3w1nh7HBO+E44N5wXzg8XhAvDRSH+fEsMS8P3w2XhB2FKuDxcEa4MV4WrwzXh2nBduD7cEG4MN4WbSw/8+dBwe7gj3BnuCneHe8K94UfhvvDjcH/4SZgafhoeCP8SHgw/Cw+Fn4eHwy/CI+GX4dHwq/BY+HV4PPwmPBGeDE+F34anw+/CM+HZ8Fz4fXg+/CG8EP4YXgx92s192sc7GTKUgTJQAiVQIiVSZspMWSkrxShG2Sk75aAclJNyUm7KTXkpL+Wn/JSGiakAFaA4xakQFaLCVJiKUlFy5KgElaCSVJJKUSkqTaWpDJWhslSWylN5uo1uo9vpdrqD7qA76U6qQlWoGlWj6lSdalANqkk1qRbVotpUm+pQHapLdak+1acG1IAaUSNqQk2oGTWjFtSCWlJLakWtqA21obbUltpRO2pP7akDdaCO1JE6USfqTJ2pC3WhrtSVulE36k7dqQf1oCRKot7Um/pQH+pH/WgADaCBNJAG0SAaTINpKA2lYTSMhtNwGkEjaRS9TqNpDI2lcTSeJlAyJdNEmkiTaBJNpsk0labSdJpOM2kmzaJZNIfm0FyaS/NpPi2khbSYFtMSWkJLaSkto2WUQim0glbQKlpFa2gNraN1tIE20CbaRFtoC22jbbSdttNO2km7aTftpb20j/bRftpPqZRKB+gAHaSDdIgO0WE6TEfoCB2lo3SMjtFxOk4n6ASdolN0mk7TGTpD5+gcnacf6AL9SBfJU4LNZBPtVTazzWKz2mz2r+PcNo/Na/PZ/Da0OW2u38RkrS1si9iitph1trgtYW/4m7isLWfL21vtbbaCvd1WtGVtJvifcXV7t61h77E17b22mr3rN3Ete5+tbRvaOraxrWub2vq2uW1gG9pGtrFtYpvaZra5bWsfte3sY7a9fdx2sE/8TbzEvmfX2fV2g91o99mP7Tn7vT1qv7Ln7Q+2h+1pB9gX7UD7kh1kX7aD7ZDfxgB2lH3djrZj7Fg7zo63E/4mnmqn2el2hp1p37az7Oy/iRfbd+1cu9TOtwvsQrvopzitpqX2fbvMfmBT7HK7wq60q+xqu8au/b+1rrSb7Ra71e61H9ntdofdaXfZ3XbPT3Hadey3n9hU+6k9Yr+0B+1n9pA9Zg/bL36K067vmP3aHrff2BP2pD1lv7UBfGfP2LM/XX/atX9rf7QXrbfAyIo1Gw44A2fkBM7EiXwVZ+YsnJWzcYyv5ux8Defgazkn5+LcnIfzcj7OzyETW2aOuAAX5Dhfx4X4ei7MRbgoF2PHxbkE38Al+UYuxTdxab6Zy/AtXJbLcXm+lW/jCnw7V+Q7uBLfyZW5ClflanwXV+e7uQbfwzX5Xq7F93Ftvp/r8ANcl+txfX6QG3BDbsSNuQk35WbcnFvwQ9ySH+ZW3Jrb8CPclh/ldvwYt+fHuQM/wR35Se7ET3Fnfpq78DPclZ/lbvwcd+fnuQf35CTuxb35Be7Dfbkf9+cB/CIP5Jd4EL/Mg3kID+VXeBi/ysP5NR7BI3kUv86jeQyP5XE8nidwMr/BE/lNnsRv8WSewlN5Gk/nGTyT3+ZZPJvn8Ds8l+fxfF7AC3kRL+Z3FfB7vJTf52X8Aafwcl7BK3kVr+Y1vJbX8XrewBt5E2/mLbyVt/GHvJ138E7exbt5D+/lj3gff8z7+RNO5U/5AP+FD/JnfIg/58P8BR/hL/kof8XH+Gs+zt/wCT7Jp/hbPs3f8Rk+y+f4ez7PP/AF/pEvsmeIMFKRjkwURBmijFFClClKjK6KMkdZoqxRtigWXR1lj66JckTXRjmjXFHuKE+UN8oX5Y/CiCIbcRRFBaKCUTy6LioUXR8VjopERaNikYuKRyWiG6KS0Y1RqeimqHR0c1QmuiUqG5WLyke3RrdFFaLbo4rRHVGl6M6oclQlqhpVi+6Kqkd3RzWie6Ka0b1Rqei+qHZ0f1QneiCqG9WL6kcPRg2ihlGjqHHUJGoaNYuaRy2ih6KW0cNRq6h11CZ6JGobPRq1ix6L2kePRx2iJy7tLxL8/Gn6V/uTol6R/uUJ2T16YXxRfHH83fiS+Hvxhl1+fjUlvjy+Ir4yviq+Or4mvja+Lr4+viG+Mb4pvjm+Jb417n21jOAwbSEMxgUug8voElwml+iucpldFpfVZXMxd7XL7q5xOdy1LqfL5XK7PC6vy+fyu9CRs45d5Aq4gi7urnOF3PWusCviirpizrniroRr7lq4Fq6le9i1cq1dG/eIe8Q96h51jyX8Urjr6J50ndxTrrN72j3tnnFd3bOum3vOdXfPux6up0tySa636+36uD6un+vnBrgBbqAb6Aa5QW6wG+yGuqFumBvmhrvhboQb4Ua5UW60G+3GurFuvBvvkl2ym+gmuklukpvsJrupbqqb7qa7mW6mm+VmuTlujpvr5rr5br5b6Ba6xW6xW+KWuKVuqVvmlrkUl+JWuBVulVvl1rg1bp1b5za4DW6T2+S2uC1um9vmtrvtAbidbrfb7fa6vW6f2+f2u/0u1aW6A+6AO+gOukPuc3fYfeGOuC/dUfeVO+a+dsfdN+6EO+lOOa9Pu+/cGXfWnXPfu/PuB3fB/eguOu+SY2/EJsbejE2KvRWbHJsSmxqbFpsemxGbGXs7Nis2OzYn9k5sbmxebH5sQWxhbFFscezd2JLYe7Glsfdjy2IfxFJiy2MrYitjq2KrY97n2x75Ar6gj/vrfCF/vS/si/iivph3vrgv4W/wJf2NvpS/yZf2N/sy/hZf1pfz5X1j38Q39c18c9/CP+Rb+od9K9/at/GP+Lb+Ud/OP+bb+8d9B/+E7+if9J38U76zf9p38c/M+6XLvrt/3vfwPX2S7+V7+xd8H9/X9/P9/QD/oh/oX/KD/Mt+sB/ih/pX/DD/qh/uX/Mj/Eg/yr/uR/sxfqwf58f7CT7Zv+En+jf9JP+Wn+yn+Kl+mp/uZ/iZ/m0/y8/2c/w7fq6f5+f7BX6hX+QX+3f9Ev+eX+rf98v8Bz7FL/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zX/ot/sdfqff5Xf7PX6v/8jv8x/7/f4Tn+o/9Qf8X/xB/5k/5D/3h/0X/oj/0h/1X/lj/mt/3H/jT/iT/pT/1p/23/kz/qw/57/35/0P/oL/0V+U/1kTQgghhPiH6Mvs7/U7r6lftjS9ASDLjjyH/3rOTTl/HvdV+zrEAODxnl3q/brVq5eUlPTLsSkagoILACB2Kf+n7x/4JV4ObeBRaA+toeTv1tdXlf/pvu9/mz9+M0AiQKZfc9KWR4nw1/Pf+Hfmb/wuX27+BQCFC17KSTvRr/Gl+Uv9nfn3tL3M/Jk+SwZo9T9yMsOl+NL8JeBheALa/+ZIIYQQQgghhBDiZ33V+a6XW9+mrc/zmks5GeFSfLn1+WVU/COuQQghhBBCCCGEEP+7p57t9thD7du37vTfPMj45yjjTzBAAPgTlCGDP//gSv9lEkIIIYQQQvzRLt30X+lKhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKI9Otf/4Yw9Q8ffKWvUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjS/k8AAAD//w+5ULA=")
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000006c0)={'vlan1\x00', 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

10m36.032407468s ago: executing program 6 (id=2671):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000003c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

10m35.715948862s ago: executing program 6 (id=2673):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x38}}, 0x0)

10m35.618936094s ago: executing program 6 (id=2677):
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0x2000083, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x24d, &(0x7f0000000e00)="$eJzs3M9qU1sUB+B1krRN7x0kgzu6CB7QgaPS9glSpILYkZKBOtBiW5AkFFoItIqhI5/AJ/E5nPgGPoDQmQ4KR06SNimm1WL+lPp9ky44+7fX2k1CRtkvb7UaW7v7O0dvv0S5nEShFrXkOKIahcgtBABw03zPsjjOeq6WLBUmNRMAMFm/+f2/OMWRAIAJe/L02aO1jY31x2lajmi9b9eT6P3tPV/bidfRjO1YjkqcRGRnevWDhxvrUUpz1bjb6rTrebL14lN//7WvEd38SlSiOjq/kvYM5Tvt+lz80+9fy/OrUYn/RudXR+SjPh/37gzNvxSV+PwqdqMZW5FnB/l3K2l6P/vw7c3zfOI8n3Ta9YXuuoGsOPUXBwAAAAAAAAAAAAAAAAAAAACAG2spTdM0yz5mWZZ1zt2/UzzpPl9KT1XP38/Ty190P1Bn6H6d5bxF0ls/yJfi/1KUZnl2AAAAAAAAAAAAAAAAAAAAuC72Dw4bm83m9t44i7PdyzHmnf+4iGJ/tGYScQ3m6RaL+TzT6XU7rtirdsUWURh6AzQ2k/hFqhyTOWkW8dPOxQtT82PqPv/veE+RRMTc2T/zssWFmBvzJwUAAAAAAAAAAAAAAAAAAJiywY9+Rzw8msFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAD+weHjShH7OXFZrO5XTgt9i4uOv3wZWuGihkfEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/AjwAAAP//PdN3/g==")
syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5ad5b0b10a818868cc63e509dca434325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c"], 0xff, 0x6de, &(0x7f0000000180)="$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")
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
ptrace(0x4206, r3)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[], 0x1, 0xb0d, &(0x7f0000000d80)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000400)={0x401, 0x18df80000000, 0x1, 0xfdb6})

10m34.934542244s ago: executing program 6 (id=2682):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

10m34.269076083s ago: executing program 6 (id=2688):
unshare(0x22020600)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x5, 0x1)

10m34.088717266s ago: executing program 34 (id=2688):
unshare(0x22020600)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x5, 0x1)

28.874000214s ago: executing program 3 (id=4652):
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x74ed00, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x404, &(0x7f0000000300), 0x3, 0x434, &(0x7f0000000680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2200c851, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100080, 0x0)
dup(0xffffffffffffffff)
writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

25.300180814s ago: executing program 3 (id=4657):
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x74ed00, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x404, &(0x7f0000000300), 0x3, 0x434, &(0x7f0000000680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2200c851, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100080, 0x0)
dup(0xffffffffffffffff)
writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

23.702857946s ago: executing program 3 (id=4663):
socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r1}, 0x10)
r2 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x6, "96ab3f272339cf3935a8824943478cb18a5722d2da3a03f39b5eaee25558f362e7"}})

21.643634665s ago: executing program 3 (id=4666):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x400005)
getpid()
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x80000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x18}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

19.236175699s ago: executing program 3 (id=4674):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))

19.16174168s ago: executing program 7 (id=4675):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000440)=""/91, 0xfffffffffffffdff, 0x200)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c)

17.843751209s ago: executing program 3 (id=4677):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
keyctl$setperm(0x5, 0x0, 0x9290101)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r6, 0x4b3a, 0x1)
ioctl$TCXONC(r6, 0x4b3a, 0x2)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

15.553180351s ago: executing program 7 (id=4683):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000300)={&(0x7f00000001c0)})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fanotify_init(0xf00, 0x0)
fanotify_mark(r4, 0x105, 0x40009975, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="910418026421b54fa0aaaa050004424203"], 0x0)

13.023346537s ago: executing program 7 (id=4684):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x400005)
getpid()
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x80000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x18}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

12.664381892s ago: executing program 1 (id=4686):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x0, 0x10030, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

12.643696632s ago: executing program 7 (id=4687):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))

11.414281769s ago: executing program 1 (id=4688):
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x74ed00, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x404, &(0x7f0000000300), 0x3, 0x434, &(0x7f0000000680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2200c851, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100080, 0x0)
dup(0xffffffffffffffff)
writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

11.401836449s ago: executing program 4 (id=4689):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000440)=""/91, 0xfffffffffffffdff, 0x200)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xa0041)
gettid()
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x8000000, 0x71, 0x200000009})
pread64(r6, 0x0, 0x0, 0xce2)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)

9.451507527s ago: executing program 1 (id=4691):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
keyctl$setperm(0x5, 0x0, 0x9290101)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1)
ioctl$TCXONC(0xffffffffffffffff, 0x4b3a, 0x2)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

9.451097597s ago: executing program 4 (id=4692):
socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r3}, 0x10)
r4 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x6, "96ab3f272339cf3935a8824943478cb18a5722d2da3a03f39b5eaee25558f362e7"}})

9.390920438s ago: executing program 2 (id=4693):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe(0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x27, 0x3, 0x80000000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r5)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x14, r6, 0x528ea124191aeb57, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

7.77719733s ago: executing program 2 (id=4694):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
keyctl$setperm(0x5, 0x0, 0x9290101)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r6, 0x4b3a, 0x1)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

7.77658961s ago: executing program 4 (id=4695):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000300)={&(0x7f00000001c0)})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fanotify_init(0xf00, 0x0)
fanotify_mark(r4, 0x105, 0x40009975, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00'})
syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="910418026421b54fa0aaaa050004424203"], 0x0)

6.615489517s ago: executing program 7 (id=4696):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
keyctl$setperm(0x5, 0x0, 0x9290101)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r5, 0x4b3a, 0x1)
ioctl$TCXONC(r5, 0x4b3a, 0x2)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

6.614374787s ago: executing program 1 (id=4697):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
keyctl$setperm(0x5, 0x0, 0x9290101)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r6, 0x4b3a, 0x1)
ioctl$TCXONC(r6, 0x4b3a, 0x2)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

6.599327397s ago: executing program 4 (id=4698):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x0, 0x10030, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

6.222947242s ago: executing program 2 (id=4699):
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x74ed00, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x404, &(0x7f0000000300), 0x3, 0x434, &(0x7f0000000680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2200c851, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
dup(0xffffffffffffffff)
writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

3.255345064s ago: executing program 1 (id=4700):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000440)=""/91, 0xfffffffffffffdff, 0x200)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xa0041)
r6 = gettid()
timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x800000000005, @tid=r6}, &(0x7f0000bbdffc))
pread64(r5, 0x0, 0x0, 0xce2)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
fsopen(&(0x7f0000000080)='autofs\x00', 0x0)

3.248847274s ago: executing program 2 (id=4701):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
keyctl$setperm(0x5, 0x0, 0x9290101)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r6, 0x4b3a, 0x2)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

3.155142136s ago: executing program 4 (id=4702):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe(0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x27, 0x3, 0x80000000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r3)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x14, r4, 0x528ea124191aeb57, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.16846209s ago: executing program 7 (id=4703):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000440)=""/91, 0xfffffffffffffdff, 0x200)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xa0041)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x8000000, 0x71, 0x200000009})
pread64(r6, 0x0, 0x0, 0xce2)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)

1.721697826s ago: executing program 35 (id=4677):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
keyctl$setperm(0x5, 0x0, 0x9290101)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r6, 0x4b3a, 0x1)
ioctl$TCXONC(r6, 0x4b3a, 0x2)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

1.698698776s ago: executing program 2 (id=4705):
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x74ed00, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x404, &(0x7f0000000300), 0x3, 0x434, &(0x7f0000000680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2200c851, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100080, 0x0)
dup(0xffffffffffffffff)
writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

1.697210536s ago: executing program 4 (id=4706):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
keyctl$setperm(0x5, 0x0, 0x9290101)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r6, 0x4b3a, 0x1)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

109.899528ms ago: executing program 1 (id=4707):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))

0s ago: executing program 2 (id=4708):
socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r3}, 0x10)
r4 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x6, "96ab3f272339cf3935a8824943478cb18a5722d2da3a03f39b5eaee25558f362e7"}})

kernel console output (not intermixed with test programs):

[ T7329]  ? sget+0x427/0x440
[  335.780200][ T7329]  ? free_anon_bdev+0x20/0x20
[  335.784882][ T7329]  ? ovl_mount+0x30/0x30
[  335.789154][ T7329]  mount_nodev+0x52/0xe0
[  335.793401][ T7329]  legacy_get_tree+0xe6/0x180
[  335.798071][ T7329]  ? virtio_fs_zero_page_range+0x120/0x120
[  335.803877][ T7329]  vfs_get_tree+0x88/0x270
[  335.808299][ T7329]  do_new_mount+0x24a/0xa40
[  335.812806][ T7329]  __se_sys_mount+0x2d6/0x3c0
[  335.817484][ T7329]  ? __x64_sys_mount+0xc0/0xc0
[  335.822247][ T7329]  ? lockdep_hardirqs_on+0x94/0x140
[  335.827448][ T7329]  ? __x64_sys_mount+0x1c/0xc0
[  335.832215][ T7329]  do_syscall_64+0x4c/0xa0
[  335.836634][ T7329]  ? clear_bhb_loop+0x30/0x80
[  335.841307][ T7329]  ? clear_bhb_loop+0x30/0x80
[  335.845987][ T7329]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  335.851891][ T7329] RIP: 0033:0x7f973e3e1929
[  335.856329][ T7329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.876054][ T7329] RSP: 002b:00007f973c249038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  335.884475][ T7329] RAX: ffffffffffffffda RBX: 00007f973e608fa0 RCX: 00007f973e3e1929
[  335.892448][ T7329] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  335.900418][ T7329] RBP: 00007f973e463b39 R08: 0000200000000400 R09: 0000000000000000
[  335.908388][ T7329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.916355][ T7329] R13: 0000000000000000 R14: 00007f973e608fa0 R15: 00007ffc8cab7428
[  335.924340][ T7329]  </TASK>
[  336.050493][ T7329] overlayfs: statfs failed on './file0'
[  336.085706][ T7336] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  336.112409][ T7336] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  337.428932][ T7339] device bridge1 entered promiscuous mode
[  337.940403][ T6926] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  338.319301][ T6926] usb 1-1: Using ep0 maxpacket: 8
[  338.600526][ T6926] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  338.649998][ T6926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.769767][ T6926] usb 1-1: Product: syz
[  338.920790][ T6926] usb 1-1: Manufacturer: syz
[  338.945905][ T6926] usb 1-1: SerialNumber: syz
[  338.970061][ T6926] usb 1-1: config 0 descriptor??
[  339.411509][ T6926] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  340.887288][ T7382] siw: device registration error -23
[  342.274305][ T6926] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  342.326225][ T6926] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  342.347365][ T6926] usb 1-1: media controller created
[  342.414311][ T6926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  342.540818][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  342.540833][   T26] audit: type=1326 audit(1750444815.354:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff348184929 code=0x7ffc0000
[  342.608433][ T6926] i2c i2c-1: Added multiplexed i2c bus 2
[  342.648137][   T26] audit: type=1326 audit(1750444815.404:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff348184929 code=0x7ffc0000
[  342.652245][ T6926] rtl2832 1-0010: Realtek RTL2832 successfully attached
[  342.722430][ T6926] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))...
[  342.731491][   T26] audit: type=1326 audit(1750444815.404:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff348184929 code=0x7ffc0000
[  342.770403][ T6926] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered.
[  343.848539][ T7419] loop0: detected capacity change from 0 to 40427
[  343.903507][ T7419] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff
[  343.912535][ T7419] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4
[  343.932672][ T7419] F2FS-fs (loop0): invalid crc value
[  343.951824][   T26] audit: type=1326 audit(1750444815.404:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff348184929 code=0x7ffc0000
[  343.976908][ T7419] F2FS-fs (loop0): Found nat_bits in checkpoint
[  344.027403][ T7419] F2FS-fs (loop0): Start checkpoint disabled!
[  344.168030][ T7419] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  344.204024][ T6926] usb 1-1: USB disconnect, device number 9
[  344.909727][   T26] audit: type=1326 audit(1750444815.404:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff348184929 code=0x7ffc0000
[  344.949519][   T26] audit: type=1326 audit(1750444815.404:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff348184929 code=0x7ffc0000
[  345.160430][   T26] audit: type=1326 audit(1750444815.404:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff348184929 code=0x7ffc0000
[  345.310946][   T26] audit: type=1326 audit(1750444815.404:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff348184929 code=0x7ffc0000
[  345.472257][   T26] audit: type=1326 audit(1750444815.404:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff348184929 code=0x7ffc0000
[  345.607605][   T26] audit: type=1326 audit(1750444815.404:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.1.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff348184929 code=0x7ffc0000
[  347.426552][ T4340] attempt to access beyond end of device
[  347.426552][ T4340] loop0: rw=2049, want=40976, limit=40427
[  347.615510][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'.
[  348.252980][ T7466] netlink: 'syz.3.918': attribute type 9 has an invalid length.
[  349.187370][ T7471] netlink: 96 bytes leftover after parsing attributes in process `syz.2.920'.
[  349.975537][ T7480] overlayfs: failed to clone upperpath
[  352.225323][ T7502] overlayfs: failed to clone upperpath
[  355.099821][ T7530] fuse: Bad value for 'fd'
[  355.486776][ T7531] lo speed is unknown, defaulting to 1000
[  355.498242][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.3.941'.
[  356.728087][ T7545] overlayfs: failed to clone upperpath
[  356.789438][ T7549] loop0: detected capacity change from 0 to 64
[  356.847252][ T7549] hfs: unable to parse mount options
[  357.203617][ T7568] device bridge0 entered promiscuous mode
[  362.048866][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'.
[  362.257290][ T7610] siw: device registration error -23
[  364.229379][ T7624] netlink: 96 bytes leftover after parsing attributes in process `syz.3.965'.
[  372.319634][ T7692] device wg2 entered promiscuous mode
[  373.337122][ T7699] loop0: detected capacity change from 0 to 512
[  373.600981][ T7699] EXT4-fs (loop0): Ignoring removed bh option
[  373.617192][ T7699] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  373.628850][ T7699] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)!
[  373.639738][ T7699] EXT4-fs (loop0): group descriptors corrupted!
[  379.069968][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  379.076476][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  396.036926][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  396.036940][   T26] audit: type=1326 audit(1750445124.843:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea2083929 code=0x7ffc0000
[  396.147253][   T26] audit: type=1326 audit(1750445124.883:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6ea2083929 code=0x7ffc0000
[  396.457866][   T26] audit: type=1326 audit(1750445124.883:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea2083929 code=0x7ffc0000
[  396.587398][   T26] audit: type=1326 audit(1750445124.883:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea2083929 code=0x7ffc0000
[  396.774229][   T26] audit: type=1326 audit(1750445124.883:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f6ea2083929 code=0x7ffc0000
[  396.897308][   T26] audit: type=1326 audit(1750445124.883:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea2083929 code=0x7ffc0000
[  396.932103][   T26] audit: type=1326 audit(1750445124.883:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea2083929 code=0x7ffc0000
[  396.975209][   T26] audit: type=1326 audit(1750445124.883:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f6ea2083929 code=0x7ffc0000
[  397.016883][   T26] audit: type=1326 audit(1750445125.153:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea2083929 code=0x7ffc0000
[  397.064551][   T26] audit: type=1326 audit(1750445125.153:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ea2083929 code=0x7ffc0000
[  398.823494][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'.
[  399.897785][ T7946] loop0: detected capacity change from 0 to 1024
[  401.559544][   T26] audit: type=1326 audit(1750445130.303:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  401.827572][   T26] audit: type=1326 audit(1750445130.303:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  401.865182][   T26] audit: type=1326 audit(1750445130.303:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  401.891627][   T26] audit: type=1326 audit(1750445130.313:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  401.926657][   T26] audit: type=1326 audit(1750445130.313:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  401.949631][   T26] audit: type=1326 audit(1750445130.313:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  401.987834][   T26] audit: type=1326 audit(1750445130.353:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  402.019372][   T26] audit: type=1326 audit(1750445130.353:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  402.070121][   T26] audit: type=1326 audit(1750445130.363:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  402.179847][   T26] audit: type=1326 audit(1750445130.363:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.4.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  402.314223][ T7970] overlayfs: failed to clone upperpath
[  403.318967][ T7974] loop0: detected capacity change from 0 to 32768
[  403.896433][ T7974] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  407.859319][ T4170] ocfs2: Unmounting device (7,0) on (node local)
[  408.762959][ T8022] loop0: detected capacity change from 0 to 1024
[  409.531048][ T8022] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,grpid,errors=continue,max_dir_size_kb=0x0000000000000400,acl,nodelalloc,usrquota,noauto_da_alloc,usrjquota=,init_itable,,errors=continue. Quota mode: writeback.
[  410.958449][ T8014] lo speed is unknown, defaulting to 1000
[  419.279337][ T8100] overlayfs: failed to clone upperpath
[  421.544846][ T8126] overlayfs: failed to clone upperpath
[  423.936074][ T8148] overlayfs: failed to clone upperpath
[  424.641035][ T8158] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  434.604003][ T8261] Cannot find map_set index 0 as target
[  434.614153][ T8261] Cannot find set identified by id 0 to match
[  434.781446][ T8259] device wg2 entered promiscuous mode
[  435.039723][ T4651] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  435.259525][ T4651] usb 1-1: device descriptor read/64, error -71
[  435.780397][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  435.784241][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  435.784471][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  435.789353][ T8268] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  436.829350][ T4651] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  437.366043][ T4651] usb 1-1: device descriptor read/64, error -71
[  437.601455][ T4651] usb usb1-port1: attempt power cycle
[  439.090747][ T8282] loop0: detected capacity change from 0 to 4096
[  440.042205][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.048584][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  440.472476][ T8289] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  440.547678][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  440.547728][   T26] audit: type=1800 audit(1750445169.353:159): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1147" name="file1" dev="loop0" ino=15 res=0 errno=0
[  447.444866][ T8344] netlink: 'syz.4.1167': attribute type 3 has an invalid length.
[  451.066355][ T8376] ptrace attach of "./syz-executor exec"[8377] was attempted by "./syz-executor exec"[8376]
[  453.595251][ T8405] loop0: detected capacity change from 0 to 16
[  453.766732][ T8405] erofs: (device loop0): mounted with root inode @ nid 36.
[  458.459370][ T4655] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  459.414412][ T4655] usb 1-1: device descriptor read/64, error -71
[  459.709314][ T4655] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  459.929674][ T4655] usb 1-1: device descriptor read/64, error -71
[  460.059882][ T4655] usb usb1-port1: attempt power cycle
[  462.502466][ T4655] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  462.629409][ T4655] usb 1-1: device descriptor read/8, error -71
[  472.182281][ T8579] cgroup: Unknown subsys name 'subj_type'
[  475.011151][ T8598] loop0: detected capacity change from 0 to 256
[  475.334204][ T8598] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  480.912788][ T8674] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  481.812147][ T8682] netlink: 'syz.2.1262': attribute type 10 has an invalid length.
[  481.850702][ T8682] device syz_tun entered promiscuous mode
[  481.896676][ T8682] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  486.055609][ T8726] loop0: detected capacity change from 0 to 32768
[  486.081364][ T8712] overlayfs: failed to clone lowerpath
[  486.098631][ T8712] overlayfs: missing 'lowerdir'
[  486.104804][ T8726] XFS: ikeep mount option is deprecated.
[  486.185725][ T8726] XFS (loop0): Mounting V5 Filesystem
[  486.392231][ T8726] XFS (loop0): Ending clean mount
[  486.404562][ T8726] XFS (loop0): Quotacheck needed: Please wait.
[  486.491207][ T8726] XFS (loop0): Quotacheck: Done.
[  487.516121][ T4170] XFS (loop0): Unmounting Filesystem
[  488.717438][ T8772] overlayfs: failed to clone upperpath
[  489.072920][ T8776] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  493.995899][ T8817] xt_TCPMSS: Only works on TCP SYN packets
[  494.218491][ T8818] loop0: detected capacity change from 0 to 64
[  496.169361][ T4655] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  499.314118][ T8864] loop0: detected capacity change from 0 to 8
[  501.091034][ T8864] SQUASHFS error: lzo decompression failed, data probably corrupt
[  501.098941][ T8864] SQUASHFS error: Failed to read block 0x91: -5
[  501.109259][ T8864] SQUASHFS error: Unable to read metadata cache entry [8f]
[  501.283109][ T8864] SQUASHFS error: Unable to read inode 0x11f
[  501.481900][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.503044][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  501.899219][   T13] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  502.179277][   T13] usb 1-1: Using ep0 maxpacket: 16
[  502.434286][   T13] usb 1-1: config 0 interface 0 has no altsetting 0
[  503.329935][ T8894] overlayfs: failed to clone lowerpath
[  504.049715][   T13] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.9c
[  504.091054][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.119180][   T13] usb 1-1: Product: syz
[  504.301772][   T13] usb 1-1: Manufacturer: syz
[  504.307180][   T13] usb 1-1: SerialNumber: syz
[  504.315244][   T13] usb 1-1: config 0 descriptor??
[  504.364481][   T13] usb 1-1: selecting invalid altsetting 1
[  504.378035][   T13] snd-usb-caiaq 1-1:0.0: can't set alt interface.
[  505.109867][   T13] usb 1-1: unable to init card! (ret=-5)
[  505.116656][   T13] snd-usb-caiaq: probe of 1-1:0.0 failed with error -5
[  505.139694][   T13] usb 1-1: USB disconnect, device number 18
[  505.654864][   T13] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  505.979425][   T13] usb 1-1: Using ep0 maxpacket: 8
[  506.370268][   T13] usb 1-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=11.58
[  506.434504][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.640443][   T13] usb 1-1: Product: syz
[  506.645144][   T13] usb 1-1: Manufacturer: syz
[  506.653345][   T13] usb 1-1: SerialNumber: syz
[  506.668215][   T13] usb 1-1: config 0 descriptor??
[  506.721969][   T13] pwc: Logitech QuickCam Pro 3000 USB webcam detected.
[  507.549356][   T13] pwc: Failed to set LED on/off time (-71)
[  507.569432][   T13] pwc: send_video_command error -71
[  507.587607][   T13] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  507.655438][   T13] Philips webcam: probe of 1-1:0.0 failed with error -71
[  507.672564][   T13] usb 1-1: USB disconnect, device number 19
[  508.509733][ T8953] overlayfs: failed to clone upperpath
[  508.939707][ T8961] loop0: detected capacity change from 0 to 8
[  509.080176][ T8961] SQUASHFS error: xz decompression failed, data probably corrupt
[  509.108522][ T8961] SQUASHFS error: Failed to read block 0x108: -5
[  509.128875][ T8961] SQUASHFS error: Unable to read metadata cache entry [106]
[  509.143272][ T8961] SQUASHFS error: Unable to read inode 0x11f
[  509.704579][   T21] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  509.959428][   T21] usb 1-1: Using ep0 maxpacket: 16
[  510.220497][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.304891][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  510.422094][   T21] usb 1-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00
[  510.445633][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.461728][   T21] usb 1-1: config 0 descriptor??
[  510.761101][   T21] usb 1-1: string descriptor 0 read error: -71
[  510.781137][   T21] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8
[  510.829414][ T3530] bcm5974 1-1:0.0: could not read from device
[  510.856955][   T21] usb 1-1: USB disconnect, device number 20
[  511.489666][ T9022] loop0: detected capacity change from 0 to 256
[  511.561523][ T9022] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d)
[  511.845329][ T9031] loop0: detected capacity change from 0 to 256
[  511.927060][ T9031] FAT-fs (loop0): bogus number of FAT sectors
[  511.937049][ T9031] FAT-fs (loop0): Can't find a valid FAT filesystem
[  512.758298][ T9031] loop0: detected capacity change from 0 to 2048
[  512.913183][ T9066] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  513.269242][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'.
[  513.472291][ T9085] team0: Port device team_slave_0 removed
[  513.831048][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'.
[  514.204835][ T9086] device ipvlan2 entered promiscuous mode
[  514.315007][ T9093] loop0: detected capacity change from 0 to 64
[  514.432971][ T9093] hfs: get root inode failed
[  514.687248][ T9105] loop0: detected capacity change from 0 to 512
[  514.815856][ T9105] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  514.855606][ T9105] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  517.593423][ T9121] loop0: detected capacity change from 0 to 128
[  517.785106][ T9121] befs: (loop0): No write support. Marking filesystem read-only
[  517.814606][ T9121] befs: (loop0): invalid magic header
[  518.519223][ T7730] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  518.809392][ T7730] usb 1-1: Using ep0 maxpacket: 16
[  518.959661][ T7730] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  519.168701][ T7730] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  519.178889][ T7730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.204616][ T7730] usb 1-1: Product: syz
[  519.208839][ T7730] usb 1-1: Manufacturer: syz
[  519.234071][ T7730] usb 1-1: SerialNumber: syz
[  519.266247][ T7730] usb 1-1: config 0 descriptor??
[  519.322571][ T7730] hub 1-1:0.0: bad descriptor, ignoring hub
[  519.328543][ T7730] hub: probe of 1-1:0.0 failed with error -5
[  519.397871][ T7730] snd-usb-audio: probe of 1-1:0.0 failed with error -2
[  519.457204][ T8485] udevd[8485]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  519.684213][   T13] usb 1-1: USB disconnect, device number 21
[  520.395895][ T9211] loop0: detected capacity change from 0 to 8
[  520.483586][ T9211] SQUASHFS error: Corrupted symlink
[  522.011211][ T9253] loop0: detected capacity change from 0 to 128
[  522.078178][ T9253] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  522.333108][ T9260] loop0: detected capacity change from 0 to 1764
[  522.894761][ T9286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1491'.
[  523.015091][ T9277] loop0: detected capacity change from 0 to 256
[  523.024526][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'.
[  523.053872][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'.
[  523.054684][ T9277] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  523.244160][ T9297] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  523.296805][ T9297] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  523.333697][ T9297] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  523.362707][ T9297] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  524.815615][ T9327] loop0: detected capacity change from 0 to 32768
[  524.852521][ T9327] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1511 (9327)
[  524.946049][ T9327] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  524.983778][ T9327] BTRFS info (device loop0): using free space tree
[  525.013443][ T9327] BTRFS info (device loop0): has skinny extents
[  525.242873][ T9327] BTRFS info (device loop0): enabling ssd optimizations
[  526.705493][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1547'.
[  526.715140][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'.
[  528.486145][ T9468] loop0: detected capacity change from 0 to 2048
[  528.546118][ T9468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  529.929529][ T9468] UDF-fs: error (device loop0): udf_read_inode: (ino 1329) failed !bh
[  529.995501][ T9468] 9pnet_virtio: no channels available for device /dev/nbd0
[  530.309262][ T4655] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  530.559276][ T4655] usb 1-1: Using ep0 maxpacket: 8
[  530.679426][ T4655] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  530.859492][ T4655] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  530.882686][ T4655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.922677][ T4655] usb 1-1: Product: syz
[  530.938063][ T4655] usb 1-1: Manufacturer: syz
[  530.943075][ T4655] usb 1-1: SerialNumber: syz
[  530.960896][ T4655] usb 1-1: config 0 descriptor??
[  531.001202][ T4655] ati_remote_probe: Unexpected desc.bNumEndpoints
[  533.003701][ T9435] usb 1-1: USB disconnect, device number 22
[  533.373783][ T9554] loop0: detected capacity change from 0 to 1024
[  533.599964][ T6046] hfsplus: b-tree write err: -5, ino 4
[  533.795559][ T9560] loop0: detected capacity change from 0 to 2048
[  533.857207][ T9560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  534.140103][ T9573] loop0: detected capacity change from 0 to 1024
[  534.396391][ T6046] hfsplus: b-tree write err: -5, ino 4
[  534.538751][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1608'.
[  535.972975][ T9595] loop0: detected capacity change from 0 to 40427
[  536.025409][ T9595] F2FS-fs (loop0): invalid crc value
[  536.047048][ T9595] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  536.272686][ T9595] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  536.298069][ T9595] F2FS-fs (loop0): Start checkpoint disabled!
[  536.357004][ T9595] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  538.753735][ T9644] loop0: detected capacity change from 0 to 40427
[  538.788171][ T9644] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff
[  538.819864][ T9644] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2
[  538.866674][ T9644] F2FS-fs (loop0): invalid crc value
[  538.891265][ T9644] F2FS-fs (loop0): Found nat_bits in checkpoint
[  538.968980][ T9644] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  539.174599][ T4170] attempt to access beyond end of device
[  539.174599][ T4170] loop0: rw=2049, want=45104, limit=40427
[  542.678590][ T9706] overlayfs: failed to clone upperpath
[  543.025559][ T9701] loop0: detected capacity change from 0 to 32768
[  543.140754][ T9701] JBD2: Ignoring recovery information on journal
[  543.390482][ T9701] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  543.742345][ T9701] (syz.0.1656,9701,1):ocfs2_reflink_ioctl:4454 ERROR: status = -14
[  543.874341][ T4170] ocfs2: Unmounting device (7,0) on (node local)
[  544.560856][ T9750] loop0: detected capacity change from 0 to 4096
[  544.689187][ T9756] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  545.558707][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  545.575325][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  545.583436][ T9769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  545.600817][ T9769] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  546.595020][ T9777] loop0: detected capacity change from 0 to 2048
[  546.669483][ T9777] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051
[  546.739986][ T9777] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  548.613077][ T9795] loop0: detected capacity change from 0 to 256
[  548.764198][ T9795] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  548.907175][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  548.929120][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  548.938513][ T9814] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  549.818939][ T9820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1708'.
[  549.966514][ T9820] macvtap0: Device is already in use.
[  552.412140][ T9838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  553.840833][ T9867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  553.849574][ T9867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  553.875367][ T9867] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  556.285538][ T9889] overlayfs: failed to clone lowerpath
[  558.699399][ T9900] loop0: detected capacity change from 0 to 40427
[  558.773017][ T9900] F2FS-fs (loop0): invalid crc value
[  558.786105][ T9902] kAFS: unparsable volume name
[  558.810566][ T9900] F2FS-fs (loop0): Found nat_bits in checkpoint
[  559.018061][ T9900] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  559.041855][ T9900] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  559.189371][ T9900] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  559.432259][ T9924] Cannot find map_set index 0 as target
[  559.443035][ T9924] Cannot find set identified by id 0 to match
[  560.413341][ T9926] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  562.137348][ T9943] 9pnet_virtio: no channels available for device /dev/nbd4
[  562.472052][ T9951] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  562.925747][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  562.935142][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  563.338501][ T9953] overlayfs: failed to clone upperpath
[  563.666374][ T9945] loop0: detected capacity change from 0 to 32768
[  564.497280][ T9945] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  564.573444][ T9945] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  564.759775][ T9945] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  565.058628][ T9945] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  566.716400][ T9435] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  566.979677][ T9435] usb 1-1: Using ep0 maxpacket: 8
[  567.131253][ T9435] usb 1-1: config 0 interface 0 has no altsetting 0
[  567.161360][ T9435] usb 1-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00
[  567.251119][ T9435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.450114][ T9435] usb 1-1: config 0 descriptor??
[  568.284420][ T9435] wacom 0003:056A:00D4.0001: Unknown device_type for 'HID 056a:00d4'. Assuming pen.
[  568.350210][ T9435] wacom 0003:056A:00D4.0001: hidraw0: USB HID v0.00 Device [HID 056a:00d4] on usb-dummy_hcd.0-1/input0
[  568.384176][ T9435] input: Wacom Bamboo Pen Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D4.0001/input/input9
[  568.529584][ T9435] usb 1-1: USB disconnect, device number 23
[  568.738098][T10020] fido_id[10020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  571.889470][T10088] loop0: detected capacity change from 0 to 256
[  571.950412][T10088] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  573.722038][T10120] xt_TCPMSS: Only works on TCP SYN packets
[  574.789380][T10127] loop0: detected capacity change from 0 to 256
[  574.897174][T10127] FAT-fs (loop0): bogus number of FAT sectors
[  574.907190][T10127] FAT-fs (loop0): Can't find a valid FAT filesystem
[  575.959968][T10127] loop0: detected capacity change from 0 to 2048
[  576.076300][T10149] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  577.479696][T10168] overlayfs: failed to clone upperpath
[  578.502789][T10187] loop0: detected capacity change from 0 to 2048
[  578.722771][T10187] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  579.123215][T10188] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  583.233181][T10238] overlayfs: failed to clone upperpath
[  586.636546][T10258] loop0: detected capacity change from 0 to 256
[  586.685071][T10258] FAT-fs (loop0): bogus number of FAT sectors
[  586.693839][T10258] FAT-fs (loop0): Can't find a valid FAT filesystem
[  586.863392][T10258] loop0: detected capacity change from 0 to 1024
[  591.575638][T10311] lo speed is unknown, defaulting to 1000
[  591.983949][T10311] chnl_net:caif_netlink_parms(): no params data found
[  592.205752][T10311] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.238509][T10311] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.251104][T10311] device bridge_slave_0 entered promiscuous mode
[  592.260463][T10311] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.268093][T10311] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.276568][T10311] device bridge_slave_1 entered promiscuous mode
[  592.321747][T10311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  592.372750][T10311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  592.483628][T10311] team0: Port device team_slave_0 added
[  592.504274][T10311] team0: Port device team_slave_1 added
[  592.568768][T10311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  592.576166][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.603993][T10311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.617664][T10311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.625170][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.651634][T10311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.694950][T10311] device hsr_slave_0 entered promiscuous mode
[  592.702244][T10311] device hsr_slave_1 entered promiscuous mode
[  592.712488][T10311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  592.721962][T10311] Cannot create hsr debugfs directory
[  592.759215][ T8752] Bluetooth: hci1: command 0x0409 tx timeout
[  592.842403][T10311] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  592.857214][T10311] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  592.866504][T10311] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  592.876012][T10311] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  592.943077][T10311] 8021q: adding VLAN 0 to HW filter on device bond0
[  592.957377][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  592.965825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  592.976851][T10311] 8021q: adding VLAN 0 to HW filter on device team0
[  592.988708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  592.998004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  593.009998][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.017180][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.025660][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  593.044509][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  593.053588][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  593.066661][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.073823][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  593.090238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  593.099276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  593.112052][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  593.122898][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  593.131809][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  593.146229][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  593.157388][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  593.175274][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  593.185296][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  593.194010][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  593.202809][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  593.214560][T10311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  593.316281][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  593.324355][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  593.339647][T10311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  593.476640][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  593.488190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  593.513063][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  593.521805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  593.532079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  593.540569][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  593.553070][T10311] device veth0_vlan entered promiscuous mode
[  593.566035][T10311] device veth1_vlan entered promiscuous mode
[  593.592950][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  593.601165][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  593.610058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  593.618609][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  593.631213][T10311] device veth0_macvtap entered promiscuous mode
[  593.644055][T10311] device veth1_macvtap entered promiscuous mode
[  593.668012][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.679229][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.689968][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.700513][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.710444][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.721738][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.732079][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.743300][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.753459][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.764888][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.776249][T10311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.787129][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  593.795752][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  593.804027][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  593.813127][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  593.823557][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.834898][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.844961][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.856405][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.866315][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.876776][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.886898][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.897716][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.907950][T10311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  593.918729][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.930472][T10311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.939537][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  593.948699][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  593.961122][T10311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.971087][T10311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.980090][T10311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.988808][T10311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  594.068688][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.095386][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.104504][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.122078][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.125519][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  594.144499][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  594.787673][T10366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  594.828582][T10366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  594.837900][T10366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  594.866124][T10366] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  595.503641][ T8752] Bluetooth: hci1: command 0x041b tx timeout
[  597.559784][ T8752] Bluetooth: hci1: command 0x040f tx timeout
[  599.640023][ T4655] Bluetooth: hci1: command 0x0419 tx timeout
[  600.030990][T10419] loop5: detected capacity change from 0 to 256
[  600.079758][T10419] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  601.207999][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'.
[  601.414124][T10435] team0: Port device team_slave_0 removed
[  601.455795][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'.
[  601.484053][T10445] device ipvlan2 entered promiscuous mode
[  603.239337][ T1111] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  603.579181][ T1111] usb 6-1: Using ep0 maxpacket: 16
[  604.368256][ T1111] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  604.569377][ T1111] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40
[  604.578460][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.599292][ T1111] usb 6-1: Product: syz
[  604.603519][ T1111] usb 6-1: Manufacturer: syz
[  604.639144][ T1111] usb 6-1: SerialNumber: syz
[  604.712311][ T1111] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input12
[  604.967359][ T8752] usb 6-1: USB disconnect, device number 2
[  606.005139][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'.
[  606.158909][T10503] team0: Port device team_slave_0 removed
[  606.232523][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'.
[  606.283000][T10506] device ipvlan2 entered promiscuous mode
[  606.674193][T10516] loop5: detected capacity change from 0 to 2048
[  606.731234][T10516] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  607.039412][T10517] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  609.288507][T10548] loop5: detected capacity change from 0 to 64
[  611.460439][T10550] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  613.979299][T10595] syz.5.1968 (10595) used obsolete PPPIOCDETACH ioctl
[  614.353940][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  614.373813][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  614.383130][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  614.403058][T10601] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  617.726978][T10654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  617.747097][T10654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  617.756167][T10654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  617.780316][T10654] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  621.060584][T10707] lo speed is unknown, defaulting to 1000
[  621.229273][T10705] loop5: detected capacity change from 0 to 256
[  621.281276][T10705] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  624.516124][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  624.526842][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  624.764447][T10780] 9pnet: Insufficient options for proto=fd
[  627.280678][T10813] loop5: detected capacity change from 0 to 32768
[  627.429520][T10813] XFS (loop5): Mounting V5 Filesystem
[  627.570449][T10813] XFS (loop5): Ending clean mount
[  627.617233][T10813] XFS (loop5): Quotacheck needed: Please wait.
[  627.773127][T10813] XFS (loop5): Quotacheck: Done.
[  627.883868][T10311] XFS (loop5): Unmounting Filesystem
[  628.783108][T10897] loop5: detected capacity change from 0 to 256
[  628.855241][T10897] FAT-fs (loop5): bogus number of FAT sectors
[  628.909051][T10897] FAT-fs (loop5): Can't find a valid FAT filesystem
[  629.048437][T10897] loop5: detected capacity change from 0 to 1024
[  629.914929][ T6043] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.086438][ T6043] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.236918][ T6043] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.365010][ T6043] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.612064][T10940] lo speed is unknown, defaulting to 1000
[  631.230611][T10940] chnl_net:caif_netlink_parms(): no params data found
[  631.588066][T10940] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.623234][T10940] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.665215][T10940] device bridge_slave_0 entered promiscuous mode
[  631.730689][T10940] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.779865][T10940] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.824258][T10940] device bridge_slave_1 entered promiscuous mode
[  631.938768][T10940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.994208][T10940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  632.126625][T10940] team0: Port device team_slave_0 added
[  632.138524][T10940] team0: Port device team_slave_1 added
[  632.271155][T10940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  632.284361][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  632.343756][T10940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  632.386589][T10940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  632.401881][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  632.428837][T10940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  632.599185][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[  632.624122][T10940] device hsr_slave_0 entered promiscuous mode
[  632.640071][T10940] device hsr_slave_1 entered promiscuous mode
[  632.651912][T10940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  632.679814][T10940] Cannot create hsr debugfs directory
[  632.715091][T11033] overlayfs: failed to clone upperpath
[  632.768392][ T6043] device hsr_slave_0 left promiscuous mode
[  632.804554][ T6043] device hsr_slave_1 left promiscuous mode
[  632.822015][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  632.837588][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0
[  632.865323][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  632.887633][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_1
[  632.905081][ T6043] device bridge_slave_1 left promiscuous mode
[  632.926255][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.045284][T11055] xt_recent: hitcount (16385) is larger than allowed maximum (255)
[  633.046300][ T6043] device bridge_slave_0 left promiscuous mode
[  633.093901][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.141976][ T6043] device veth1_macvtap left promiscuous mode
[  633.154708][ T6043] device veth0_macvtap left promiscuous mode
[  633.161136][ T6043] device veth1_vlan left promiscuous mode
[  633.168179][ T6043] device veth0_vlan left promiscuous mode
[  633.464936][ T6043] team0 (unregistering): Port device team_slave_1 removed
[  633.492648][ T6043] team0 (unregistering): Port device team_slave_0 removed
[  633.514534][ T6043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  633.532739][ T6043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.616456][ T6043] bond0 (unregistering): Released all slaves
[  634.120073][T10940] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  634.195504][T10940] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  634.241274][T10940] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  634.455417][T10940] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  634.759792][ T4661] Bluetooth: hci1: command 0x041b tx timeout
[  635.059358][T10940] 8021q: adding VLAN 0 to HW filter on device bond0
[  635.158032][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  635.180396][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  635.235953][T10940] 8021q: adding VLAN 0 to HW filter on device team0
[  635.270275][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  635.327269][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  635.397900][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.405172][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state
[  635.442926][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  635.467061][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  635.510397][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  635.552120][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.559294][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state
[  635.628595][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  635.668969][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  635.750827][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  635.791582][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  635.837866][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  635.874232][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  635.905962][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  635.946613][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  635.960249][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  635.972125][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  635.982945][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  636.010440][T10940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  636.116045][T11118] xt_CT: You must specify a L4 protocol and not use inversions on it
[  636.754779][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  636.795447][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  636.845166][T10940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  636.852721][ T8752] Bluetooth: hci1: command 0x040f tx timeout
[  637.567062][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  637.593106][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  637.685303][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  637.706861][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  637.752691][T10940] device veth0_vlan entered promiscuous mode
[  637.784472][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  637.800278][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  637.835734][T10940] device veth1_vlan entered promiscuous mode
[  637.902086][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  637.916339][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  637.958236][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  637.977817][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  638.014749][T10940] device veth0_macvtap entered promiscuous mode
[  638.056100][T10940] device veth1_macvtap entered promiscuous mode
[  638.127522][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.167059][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.189577][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.393609][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.429122][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  638.781247][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.171708][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  639.219861][ T8752] Bluetooth: hci1: command 0x0419 tx timeout
[  639.228101][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.238032][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  639.249218][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.277980][T10940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.310135][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  639.344043][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  639.377937][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  639.420190][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  639.481445][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.516351][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.583607][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.639201][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.685796][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.724852][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.765271][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.816233][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.853395][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  639.889159][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  639.927883][T10940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.949634][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  639.978699][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  640.017968][T10940] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  640.065219][T10940] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.084648][T10940] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.114294][T10940] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  640.397779][ T6048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.459333][ T6048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.496554][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  640.545032][ T6048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.596846][ T6048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.697989][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  641.239241][ T8752] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  641.649811][ T8752] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  641.659557][ T8752] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  641.679056][ T8752] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  641.694095][ T8752] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9
[  641.715607][ T8752] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  641.779668][T11279] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2187'.
[  641.903127][ T8752] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  641.924788][ T8752] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  641.945881][ T8752] usb 7-1: Product: syz
[  641.954535][ T8752] usb 7-1: Manufacturer: syz
[  642.050589][ T8752] cdc_wdm 7-1:1.0: skipping garbage
[  642.058319][ T8752] cdc_wdm 7-1:1.0: skipping garbage
[  642.091272][ T8752] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  642.114312][ T8752] cdc_wdm 7-1:1.0: Unknown control protocol
[  642.310832][ T9435] usb 7-1: USB disconnect, device number 2
[  643.473034][T11317] loop6: detected capacity change from 0 to 256
[  643.530656][T11317] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  645.302159][T11376] 9pnet: Insufficient options for proto=fd
[  646.703587][   T26] audit: type=1107 audit(1750445375.514:160): pid=11414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  647.594331][T11416] loop6: detected capacity change from 0 to 131072
[  647.661731][T11416] F2FS-fs (loop6): invalid crc value
[  647.686703][T11416] F2FS-fs (loop6): Found nat_bits in checkpoint
[  647.944199][T11416] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  650.461113][T11497] loop6: detected capacity change from 0 to 256
[  650.564060][T11497] FAT-fs (loop6): bogus number of FAT sectors
[  650.580285][T11497] FAT-fs (loop6): Can't find a valid FAT filesystem
[  652.078721][T11527] netlink: 'syz.1.2262': attribute type 10 has an invalid length.
[  652.256881][T11497] loop6: detected capacity change from 0 to 2048
[  652.358063][T11543] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  652.913656][T11560] loop6: detected capacity change from 0 to 2048
[  653.038589][T11564] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  656.334532][T11617] device syzkaller1 entered promiscuous mode
[  659.380994][T11705] loop6: detected capacity change from 0 to 256
[  659.789410][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'.
[  659.819814][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'.
[  659.852751][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'.
[  660.519300][   T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  660.889425][   T13] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  660.911807][   T13] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  660.942241][   T13] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  660.956326][   T13] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  660.975427][   T13] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  661.109784][   T13] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  661.128308][   T13] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  661.159158][   T13] usb 7-1: Product: syz
[  661.206059][   T13] usb 7-1: Manufacturer: syz
[  661.252838][T11801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2338'.
[  661.280201][   T13] cdc_wdm 7-1:1.0: skipping garbage
[  661.298366][   T13] cdc_wdm 7-1:1.0: skipping garbage
[  661.313527][   T13] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  661.323970][   T13] cdc_wdm 7-1:1.0: Unknown control protocol
[  661.537130][T11817] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2343'.
[  662.164471][ T9435] usb 7-1: USB disconnect, device number 3
[  662.771068][T11869] loop6: detected capacity change from 0 to 1024
[  662.935307][T11869] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  663.002197][   T26] audit: type=1800 audit(1750445391.804:161): pid=11869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2357" name="file1" dev="loop6" ino=15 res=0 errno=0
[  663.152172][T11869] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3876: comm syz.6.2357: Allocating blocks 449-513 which overlap fs metadata
[  663.246485][T11868] EXT4-fs (loop6): pa ffff888072c97380: logic 48, phys. 177, len 21
[  663.254964][T11868] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 4
[  664.467241][T11926] loop6: detected capacity change from 0 to 256
[  664.500847][T11926] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  665.332303][T11982] loop6: detected capacity change from 0 to 256
[  665.450983][T11987] mmap: syz.3.2388 (11987) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  665.494918][T11982] FAT-fs (loop6): Directory bread(block 64) failed
[  665.523999][T11982] FAT-fs (loop6): Directory bread(block 65) failed
[  665.545009][T11982] FAT-fs (loop6): Directory bread(block 66) failed
[  665.580943][T11982] FAT-fs (loop6): Directory bread(block 67) failed
[  665.598075][T11982] FAT-fs (loop6): Directory bread(block 68) failed
[  665.638680][T11982] FAT-fs (loop6): Directory bread(block 69) failed
[  665.667449][T11996] 9pnet: Insufficient options for proto=fd
[  665.680627][T11982] FAT-fs (loop6): Directory bread(block 70) failed
[  665.687227][T11982] FAT-fs (loop6): Directory bread(block 71) failed
[  665.719201][T11982] FAT-fs (loop6): Directory bread(block 72) failed
[  665.746158][T11982] FAT-fs (loop6): Directory bread(block 73) failed
[  666.537221][T12029] 9pnet: Insufficient options for proto=fd
[  666.645009][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2404'.
[  666.654642][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2404'.
[  666.664170][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2404'.
[  666.680393][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2404'.
[  666.691744][T12034] netlink: 'syz.1.2404': attribute type 6 has an invalid length.
[  667.557712][    C1] Unknown status report in ack skb
[  667.848034][T12083] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2421'.
[  667.857179][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2421'.
[  667.888305][T12083] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2421'.
[  667.902033][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2421'.
[  669.319319][T12122] loop6: detected capacity change from 0 to 512
[  669.366004][T12122] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  669.427447][T12122] EXT4-fs (loop6): 1 truncate cleaned up
[  669.453781][T12122] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none.
[  670.726537][T12139] loop6: detected capacity change from 0 to 32768
[  670.782389][T12139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2440 (12139)
[  670.871234][T12139] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  670.909199][T12139] BTRFS info (device loop6): setting nodatacow, compression disabled
[  670.918096][T12139] BTRFS info (device loop6): enabling auto defrag
[  670.940849][T12139] BTRFS info (device loop6): max_inline at 83
[  670.959049][T12139] BTRFS info (device loop6): using free space tree
[  670.965616][T12139] BTRFS info (device loop6): has skinny extents
[  671.346140][T12139] 9pnet_virtio: no channels available for device syz
[  671.556125][T12213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2459'.
[  671.565757][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2459'.
[  672.506322][T12238] loop6: detected capacity change from 0 to 256
[  672.553667][T12238] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  672.602652][T12245] __nla_validate_parse: 2 callbacks suppressed
[  672.602673][T12245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2471'.
[  672.649316][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2471'.
[  673.519243][ T4655] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  673.879968][ T4655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.898255][ T4655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  673.908689][ T4655] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  673.915025][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2483'.
[  673.931427][ T4655] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  673.932828][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2483'.
[  673.946423][ T4655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.963443][ T4655] usb 7-1: config 0 descriptor??
[  673.980127][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2483'.
[  673.989464][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2483'.
[  674.453338][ T4655] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  674.553845][ T4655] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  674.796615][T12234] usb 7-1: USB disconnect, device number 4
[  678.305902][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2534'.
[  678.351520][T12418] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  678.360582][T12418] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  678.369386][T12418] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  678.378308][T12418] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  678.397840][T12418] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.407040][T12418] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.416654][T12418] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.426165][T12418] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  678.523167][T12422] syz.1.2535 sent an empty control message without MSG_MORE.
[  678.881071][T12445] syz.1.2546[12445] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  678.881145][T12445] syz.1.2546[12445] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  678.899317][ T8752] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  678.942630][T12445] xt_TPROXY: Can be used only with -p tcp or -p udp
[  679.169083][ T8752] usb 7-1: Using ep0 maxpacket: 8
[  679.289154][ T8752] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  679.309313][ T8752] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  679.329089][ T8752] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  679.349087][ T8752] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  679.369255][ T8752] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  679.389109][ T8752] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  679.398330][ T8752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.669209][ T8752] usb 7-1: GET_CAPABILITIES returned 0
[  679.679710][ T8752] usbtmc 7-1:16.0: can't read capabilities
[  679.771422][T12463] syz.2.2554[12463] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  679.771579][T12463] syz.2.2554[12463] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  679.990154][ T1111] usb 7-1: USB disconnect, device number 5
[  679.999522][T12428] usbtmc 7-1:16.0: usb_control_msg returned -71
[  682.086103][T12536] loop6: detected capacity change from 0 to 32768
[  682.148886][T12536] JBD2: Ignoring recovery information on journal
[  682.380091][T12536] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  682.479477][T12536] (syz.6.2578,12536,1):ocfs2_reflink_ioctl:4454 ERROR: status = -14
[  682.567823][T10940] ocfs2: Unmounting device (7,6) on (node local)
[  683.568773][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'.
[  683.849396][T12562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  684.319218][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2597'.
[  684.365105][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  684.388560][T12595] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  684.879234][T12613] lo speed is unknown, defaulting to 1000
[  685.292058][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'.
[  685.301951][T12628] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  685.391578][T12633] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2613'.
[  685.802228][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  685.808634][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  685.835672][T12643] loop6: detected capacity change from 0 to 256
[  685.853614][T12643] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  686.596408][T12687] overlayfs: failed to clone upperpath
[  687.512084][T12717] loop6: detected capacity change from 0 to 256
[  687.579684][T12717] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  688.165629][   T26] audit: type=1804 audit(1750445929.974:162): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2651" name="file0" dev="ramfs" ino=59339 res=1 errno=0
[  688.222915][T12739] overlayfs: failed to clone upperpath
[  689.085110][T12762] loop6: detected capacity change from 0 to 256
[  689.151105][T12762] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  689.336105][T12778] overlayfs: failed to clone upperpath
[  690.160326][T12807] loop6: detected capacity change from 0 to 256
[  690.227654][T12807] FAT-fs (loop6): bogus number of FAT sectors
[  690.240553][T12807] FAT-fs (loop6): Can't find a valid FAT filesystem
[  690.307082][T12807] loop6: detected capacity change from 0 to 1024
[  690.519065][   T26] audit: type=1326 audit(1750445932.324:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.1.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff348184929 code=0x7fc00000
[  691.356091][ T4340] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.496593][ T4340] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.610007][ T4340] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.748571][ T4340] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.217165][T12841] lo speed is unknown, defaulting to 1000
[  692.724224][T12841] chnl_net:caif_netlink_parms(): no params data found
[  693.017822][T12841] bridge0: port 1(bridge_slave_0) entered blocking state
[  693.057669][T12841] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.084924][T12841] device bridge_slave_0 entered promiscuous mode
[  693.160667][ T4340] device hsr_slave_0 left promiscuous mode
[  693.187811][ T4340] device hsr_slave_1 left promiscuous mode
[  693.202350][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  693.239243][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0
[  693.277283][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  693.289065][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1
[  693.312461][ T4340] device bridge_slave_1 left promiscuous mode
[  693.325530][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state
[  693.351114][ T4340] device bridge_slave_0 left promiscuous mode
[  693.359346][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.396768][ T4340] device veth1_macvtap left promiscuous mode
[  693.419151][ T4340] device veth0_macvtap left promiscuous mode
[  693.432119][ T4340] device veth1_vlan left promiscuous mode
[  693.445716][ T4340] device veth0_vlan left promiscuous mode
[  693.994606][ T4340] team0 (unregistering): Port device team_slave_1 removed
[  694.015264][ T4340] team0 (unregistering): Port device team_slave_0 removed
[  694.030851][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  694.048189][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  694.137152][ T4340] bond0 (unregistering): Released all slaves
[  694.195466][T12841] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.199107][ T8752] Bluetooth: hci1: command 0x0409 tx timeout
[  694.205770][T12841] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.222928][T12841] device bridge_slave_1 entered promiscuous mode
[  694.286328][T12841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  694.317834][T12841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  694.449954][T12841] team0: Port device team_slave_0 added
[  694.468317][T12841] team0: Port device team_slave_1 added
[  694.549187][T12841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  694.556947][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  694.593336][T12841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.645083][T12841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  694.658528][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  694.694932][T12841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  694.840607][T12841] device hsr_slave_0 entered promiscuous mode
[  694.868240][T12841] device hsr_slave_1 entered promiscuous mode
[  694.882274][T12841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  694.893809][T12841] Cannot create hsr debugfs directory
[  695.306239][T12841] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  695.331693][T12841] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  695.369123][T12841] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  695.400051][T12841] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  695.692381][T12841] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.718553][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  695.728585][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  695.741856][T12841] 8021q: adding VLAN 0 to HW filter on device team0
[  695.756673][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  695.771264][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  695.780854][T10378] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.788828][T10378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  695.807754][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  695.817759][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  695.827675][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  695.838248][T10378] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.845508][T10378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.855966][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  695.865392][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  695.887638][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  695.914327][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  695.934586][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  695.957953][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  695.985370][T12841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  696.010776][T12841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  696.038308][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  696.065352][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  696.096197][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  696.126689][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  696.156113][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  696.183620][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  696.279168][ T8752] Bluetooth: hci1: command 0x041b tx timeout
[  696.322366][T12935] overlayfs: failed to clone upperpath
[  696.699556][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  696.707110][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  696.737722][T12841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  697.513511][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  697.552219][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  697.681070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  697.723584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  697.746589][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  697.784305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  697.816100][T12841] device veth0_vlan entered promiscuous mode
[  697.845932][T12841] device veth1_vlan entered promiscuous mode
[  697.894659][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  697.917573][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  697.967646][T12841] device veth0_macvtap entered promiscuous mode
[  697.993248][T12841] device veth1_macvtap entered promiscuous mode
[  698.036920][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  698.068226][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.099055][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  698.120771][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.139010][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  698.168999][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.201274][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  698.239333][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.258999][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  698.279087][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.323085][T12841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  698.345118][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  698.359468][ T8752] Bluetooth: hci1: command 0x040f tx timeout
[  698.372172][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  698.399998][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  698.419411][T10378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  698.450856][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  698.471630][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.509073][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  698.550308][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.580661][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  698.632484][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.652868][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  698.683825][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.698995][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  698.731262][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.773238][T12841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  698.810187][ T6043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  698.831283][ T6043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  698.902740][T12841] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  698.928266][T12841] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  698.949181][T12841] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  698.969077][T12841] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  699.144190][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.169873][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.206980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  699.233868][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.260576][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.305857][ T6043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  699.639672][T13022] bridge0: port 3(syz_tun) entered blocking state
[  699.646353][T13022] bridge0: port 3(syz_tun) entered disabled state
[  699.688685][T13022] device syz_tun entered promiscuous mode
[  699.695939][T13022] bridge0: port 3(syz_tun) entered blocking state
[  699.702480][T13022] bridge0: port 3(syz_tun) entered forwarding state
[  700.439175][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[  700.598012][T13039] loop7: detected capacity change from 0 to 32768
[  700.818811][T13039] XFS (loop7): Mounting V5 Filesystem
[  700.994005][T13039] XFS (loop7): Ending clean mount
[  701.004088][T13039] XFS (loop7): Quotacheck needed: Please wait.
[  701.178789][T13039] XFS (loop7): Quotacheck: Done.
[  701.477914][T12841] XFS (loop7): Unmounting Filesystem
[  702.636156][T13094] loop7: detected capacity change from 0 to 256
[  702.649066][T13094] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  705.219309][T13153] loop7: detected capacity change from 0 to 256
[  705.247446][T13153] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  705.520653][T13180] overlayfs: failed to clone upperpath
[  706.401298][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2814'.
[  706.457146][T13206] loop7: detected capacity change from 0 to 512
[  706.509901][T13206] EXT4-fs (loop7): 1 truncate cleaned up
[  706.523852][T13206] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  709.822462][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2846'.
[  711.310878][T13328] overlayfs: failed to clone upperpath
[  711.652624][T13312] loop7: detected capacity change from 0 to 32768
[  711.791274][T13312] XFS (loop7): Mounting V5 Filesystem
[  711.910967][T13312] XFS (loop7): Ending clean mount
[  712.181903][T12841] XFS (loop7): Unmounting Filesystem
[  713.452509][ T4177] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  713.462729][ T4177] CPU: 0 PID: 4177 Comm: kworker/u5:4 Not tainted 5.15.185-syzkaller #0
[  713.471093][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  713.481175][ T4177] Workqueue: hci0 hci_rx_work
[  713.485896][ T4177] Call Trace:
[  713.489200][ T4177]  <TASK>
[  713.492151][ T4177]  dump_stack_lvl+0x168/0x230
[  713.496859][ T4177]  ? show_regs_print_info+0x20/0x20
[  713.502086][ T4177]  ? load_image+0x3b0/0x3b0
[  713.506630][ T4177]  sysfs_create_dir_ns+0x252/0x280
[  713.511763][ T4177]  ? __lock_acquire+0x7c60/0x7c60
[  713.516819][ T4177]  ? sysfs_warn_dup+0xa0/0xa0
[  713.521517][ T4177]  ? le_conn_complete_evt+0xcbc/0x1590
[  713.527027][ T4177]  ? hci_event_packet+0xe05/0x12f0
[  713.532165][ T4177]  ? process_one_work+0x863/0x1000
[  713.537293][ T4177]  ? do_raw_spin_unlock+0x11d/0x230
[  713.542511][ T4177]  kobject_add_internal+0x662/0xd00
[  713.547767][ T4177]  kobject_add+0x152/0x210
[  713.552197][ T4177]  ? kobject_init+0x1d0/0x1d0
[  713.556887][ T4177]  ? klist_children_get+0x50/0x50
[  713.561924][ T4177]  ? get_device_parent+0x121/0x3f0
[  713.567049][ T4177]  device_add+0x483/0xfb0
[  713.571398][ T4177]  hci_conn_add_sysfs+0xd1/0x1e0
[  713.576348][ T4177]  le_conn_complete_evt+0xcbc/0x1590
[  713.581654][ T4177]  ? cs_le_create_conn+0x5e0/0x5e0
[  713.586867][ T4177]  ? __mutex_trylock_common+0x14f/0x250
[  713.592426][ T4177]  hci_le_meta_evt+0x289/0x3b80
[  713.597292][ T4177]  ? hci_event_packet+0x36d/0x12f0
[  713.602408][ T4177]  ? hci_event_packet+0x2e2/0x12f0
[  713.607528][ T4177]  ? __lock_acquire+0x7c60/0x7c60
[  713.612661][ T4177]  ? hci_remote_host_features_evt+0x280/0x280
[  713.618738][ T4177]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  713.624594][ T4177]  ? mark_lock+0x94/0x320
[  713.628956][ T4177]  ? mutex_unlock+0x10/0x10
[  713.633468][ T4177]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  713.639454][ T4177]  ? lock_chain_count+0x20/0x20
[  713.644321][ T4177]  ? __rwlock_init+0x140/0x140
[  713.649096][ T4177]  hci_event_packet+0xe05/0x12f0
[  713.654039][ T4177]  ? lockdep_hardirqs_on+0x94/0x140
[  713.659256][ T4177]  ? rcu_lock_release+0x20/0x20
[  713.664119][ T4177]  ? hci_send_to_monitor+0x9c/0x4a0
[  713.669330][ T4177]  hci_rx_work+0x255/0xa10
[  713.673764][ T4177]  process_one_work+0x863/0x1000
[  713.678719][ T4177]  ? worker_detach_from_pool+0x240/0x240
[  713.684357][ T4177]  ? lockdep_hardirqs_off+0x70/0x100
[  713.689653][ T4177]  ? _raw_spin_lock_irq+0xab/0xe0
[  713.694687][ T4177]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  713.700067][ T4177]  ? wq_worker_running+0x97/0x170
[  713.705100][ T4177]  worker_thread+0xaa8/0x12a0
[  713.709813][ T4177]  kthread+0x436/0x520
[  713.713882][ T4177]  ? rcu_lock_release+0x20/0x20
[  713.718738][ T4177]  ? kthread_blkcg+0xd0/0xd0
[  713.723336][ T4177]  ret_from_fork+0x1f/0x30
[  713.727771][ T4177]  </TASK>
[  713.735637][ T4177] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  713.749018][ T4177] Bluetooth: hci0: failed to register connection device
[  714.556075][   T26] audit: type=1326 audit(1750445956.364:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13394 comm="syz.3.2879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ea2083929 code=0x0
[  716.086518][ T8752] Bluetooth: hci0: command 0x2016 tx timeout
[  716.830059][T13433] loop7: detected capacity change from 0 to 256
[  716.869894][T13433] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙'
[  717.678413][T13461] loop7: detected capacity change from 0 to 1024
[  717.973826][T13461] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  718.011973][T13461] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  719.113568][T13480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  719.122763][T13480] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  719.130459][T13480] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  721.665278][T13512] netlink: 'syz.7.2918': attribute type 39 has an invalid length.
[  723.366415][T13528] netlink: 'syz.2.2923': attribute type 4 has an invalid length.
[  723.400001][T13528] netlink: 'syz.2.2923': attribute type 4 has an invalid length.
[  728.827310][T13572] loop7: detected capacity change from 0 to 65536
[  728.979388][T13572] XFS (loop7): Mounting V5 Filesystem
[  729.115352][T13572] XFS (loop7): Ending clean mount
[  729.188661][T13572] XFS (loop7): Quotacheck needed: Please wait.
[  729.416842][T13572] XFS (loop7): Quotacheck: Done.
[  730.697977][T13604] CIFS: iocharset name too long
[  730.855367][T13572] syz.7.2936 (13572) used greatest stack depth: 19488 bytes left
[  731.087651][T12841] XFS (loop7): Unmounting Filesystem
[  734.882029][T13646] loop7: detected capacity change from 0 to 128
[  735.090152][T13652] attempt to access beyond end of device
[  735.090152][T13652] loop7: rw=2049, want=249, limit=128
[  735.488133][T10378] attempt to access beyond end of device
[  735.488133][T10378] loop7: rw=1, want=1041, limit=128
[  738.740225][T13694] overlayfs: failed to clone upperpath
[  739.887186][T13710] loop7: detected capacity change from 0 to 128
[  740.075788][T13710] FAT-fs (loop7): error, corrupted file size (i_pos 548, 512)
[  740.112238][T13710] FAT-fs (loop7): Filesystem has been set read-only
[  741.110097][T13720] loop7: detected capacity change from 0 to 1024
[  741.184440][T13720] EXT4-fs (loop7): Test dummy encryption mode enabled
[  741.287245][T13720] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,noblock_validity,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  741.524019][T13720] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  741.950120][T13720] fscrypt (loop7): Error allocating 'xts(aes)' transform: -4
[  745.691608][T13783] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2997'.
[  747.251940][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  747.258362][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  752.156848][T13871] device veth0 entered promiscuous mode
[  752.804239][T13869] could not allocate digest TFM handle sha256-ce
[  752.813423][T13868] device veth0 left promiscuous mode
[  752.834304][T13877] binder_alloc: 13875: binder_alloc_buf, no vma
[  753.235050][T13892] binder_alloc: 13891: binder_alloc_buf, no vma
[  756.413018][T13941] loop7: detected capacity change from 0 to 16
[  757.108372][T13936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  757.160968][T13941] erofs: (device loop7): mounted with root inode @ nid 36.
[  758.483742][T13956] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3051'.
[  761.903987][T13992] loop7: detected capacity change from 0 to 512
[  761.974994][T13992] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  762.003193][T13992] EXT4-fs (loop7): 1 truncate cleaned up
[  762.171058][T13992] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,nouid32,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback.
[  769.684150][T14118] loop7: detected capacity change from 0 to 2048
[  770.467319][T14118] NILFS (loop7): invalid segment: Inconsistency found
[  770.575676][T14118] NILFS (loop7): trying rollback from an earlier position
[  770.713911][T14118] NILFS (loop7): recovery complete
[  770.739480][T14134] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  777.500637][T14220] loop7: detected capacity change from 0 to 40427
[  777.757034][T14220] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  777.765060][T14220] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  777.786186][T14220] F2FS-fs (loop7): invalid crc value
[  778.159343][T14220] F2FS-fs (loop7): Found nat_bits in checkpoint
[  778.652150][T14220] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  778.660011][T14220] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  786.922026][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3150'.
[  790.033349][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3165'.
[  794.833143][T14403] overlayfs: failed to clone upperpath
[  802.765678][T14480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  802.785134][T14480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  802.797927][T14480] device bridge_slave_0 left promiscuous mode
[  802.833148][T14480] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.893024][T14480] device bridge_slave_1 left promiscuous mode
[  803.095440][T14480] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.239409][   T26] audit: type=1326 audit(1750446045.024:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832082929 code=0x7fc00000
[  803.279872][T14480] bond0: (slave bond_slave_0): Releasing backup interface
[  803.409065][   T26] audit: type=1326 audit(1750446045.024:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa832082929 code=0x7fc00000
[  803.446830][   T26] audit: type=1326 audit(1750446045.024:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832082929 code=0x7fc00000
[  803.498172][   T26] audit: type=1326 audit(1750446045.024:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832082929 code=0x7fc00000
[  803.521956][   T26] audit: type=1326 audit(1750446045.024:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832082929 code=0x7fc00000
[  803.546114][T14480] bond0: (slave bond_slave_1): Releasing backup interface
[  803.554801][   T26] audit: type=1326 audit(1750446045.034:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832082929 code=0x7fc00000
[  803.686795][   T26] audit: type=1326 audit(1750446045.034:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832082929 code=0x7fc00000
[  804.308777][   T26] audit: type=1326 audit(1750446045.034:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832082929 code=0x7fc00000
[  804.348078][   T26] audit: type=1326 audit(1750446045.034:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832082929 code=0x7fc00000
[  804.445266][   T26] audit: type=1326 audit(1750446045.034:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14487 comm="syz.2.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832082929 code=0x7fc00000
[  804.486254][T14480] team0: Port device team_slave_1 removed
[  804.505049][T14480] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  804.525626][T14480] batman_adv: batadv0: Removing interface: batadv_slave_0
[  804.578291][T14480] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  805.017524][T14480] batman_adv: batadv0: Removing interface: batadv_slave_1
[  805.209142][T14480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  805.313530][T14480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  805.860857][T14480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  806.011618][T14480] bond0: (slave wlan1): Releasing backup interface
[  806.689356][T14475] netlink: 'syz.4.3197': attribute type 10 has an invalid length.
[  806.771741][T14475] 8021q: adding VLAN 0 to HW filter on device bond0
[  806.968549][T14475] team0: Port device bond0 added
[  806.993337][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'.
[  807.139647][T14482] team0 (unregistering): Port device bond0 removed
[  808.951480][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  808.957897][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  811.862352][   T26] kauditd_printk_skb: 56 callbacks suppressed
[  811.862373][   T26] audit: type=1326 audit(1750446052.714:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  812.549773][   T26] audit: type=1326 audit(1750446052.714:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  812.584504][   T26] audit: type=1326 audit(1750446052.714:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  812.673396][   T26] audit: type=1326 audit(1750446052.714:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  812.720935][   T26] audit: type=1326 audit(1750446052.714:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  815.274953][   T26] audit: type=1326 audit(1750446052.714:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  815.348961][   T26] audit: type=1326 audit(1750446052.714:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  815.456878][   T26] audit: type=1326 audit(1750446052.714:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  815.556577][   T26] audit: type=1326 audit(1750446052.714:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  815.580917][   T26] audit: type=1326 audit(1750446052.714:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.3222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff7f45929 code=0x7ffc0000
[  817.697469][ T4655] Bluetooth: hci1: command 0x0406 tx timeout
[  822.165710][T14671] overlayfs: unrecognized mount option "/" or missing value
[  828.167358][T14732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  830.415233][T14769] loop7: detected capacity change from 0 to 40427
[  832.173308][T14769] F2FS-fs (loop7): invalid crc value
[  832.267821][T14769] F2FS-fs (loop7): Found nat_bits in checkpoint
[  832.297699][T14769] F2FS-fs (loop7): Start checkpoint disabled!
[  832.334769][T14769] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  835.005871][ T4339] attempt to access beyond end of device
[  835.005871][ T4339] loop7: rw=2049, want=40968, limit=40427
[  838.193429][T14836] loop7: detected capacity change from 0 to 128
[  838.252601][T14836] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  838.788246][T14844] overlayfs: failed to clone upperpath
[  838.858314][T14825] TCP: TCP_TX_DELAY enabled
[  838.912227][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3299'.
[  841.737956][T14866] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3304'.
[  843.965582][T14897] netlink: 'syz.3.3309': attribute type 10 has an invalid length.
[  843.973763][T14897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3309'.
[  843.985348][T14897] device bond0 entered promiscuous mode
[  843.991158][T14897] device bond_slave_0 entered promiscuous mode
[  843.998352][T14897] device bond_slave_1 entered promiscuous mode
[  844.006062][T14897] bridge0: port 4(bond0) entered blocking state
[  844.012623][T14897] bridge0: port 4(bond0) entered disabled state
[  844.025305][T14897] bridge0: port 4(bond0) entered blocking state
[  844.031698][T14897] bridge0: port 4(bond0) entered forwarding state
[  848.852006][T14938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3324'.
[  849.112563][ T4651] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  852.919080][ T4651] usb 8-1: device descriptor read/all, error -71
[  853.445890][T14988] nfs: Unexpected value for 'acl'
[  854.176210][T14982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  856.952675][T15019] loop7: detected capacity change from 0 to 1024
[  857.118771][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.186032][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.313959][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.356460][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.364071][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.371832][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.381981][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.392026][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.399772][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.407641][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.415693][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.423485][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.432070][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.441199][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.450245][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.457920][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.467034][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.474803][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  857.483401][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.338000][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.407034][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.418671][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.426427][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.436348][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.445827][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.456781][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.465084][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.472875][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.486032][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.493800][T15019] hfsplus: request for non-existent node 16777216 in B*Tree
[  858.507957][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  858.507974][   T26] audit: type=1800 audit(1750446356.318:251): pid=15019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3347" name="file1" dev="loop7" ino=20 res=0 errno=0
[  867.370463][T15092] overlayfs: failed to clone upperpath
[  870.193537][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  870.199919][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  870.282501][T15133] x_tables: unsorted underflow at hook 1
[  872.750018][T15163] loop7: detected capacity change from 0 to 512
[  873.629325][T15163] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  875.135973][T15163] EXT4-fs (loop7): 1 truncate cleaned up
[  875.158686][T15163] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback.
[  878.989156][T15221] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  882.482867][T15253] cgroup: Unknown subsys name 'subj_type'
[  882.515615][   T26] audit: type=1326 audit(1750446380.318:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15255 comm="syz.2.3409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa832082929 code=0x0
[  882.575206][T15253] loop7: detected capacity change from 0 to 2048
[  882.819945][T15253] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  882.827649][T15253] UDF-fs: Scanning with blocksize 512 failed
[  884.994246][T15253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  886.267270][T15279] Process accounting resumed
[  889.388879][T15317] loop7: detected capacity change from 0 to 128
[  890.070136][T15317] befs: (loop7): No write support. Marking filesystem read-only
[  890.084792][T15317] befs: (loop7): invalid magic header
[  890.398094][T15320] overlayfs: failed to clone upperpath
[  891.163570][T15339] loop7: detected capacity change from 0 to 2048
[  891.328725][T15339] NILFS (loop7): couldn't find nilfs on the device
[  891.613164][T15254] udevd[15254]: incorrect nilfs2 checksum on /dev/loop7
[  904.935449][T15448] netlink: 1672 bytes leftover after parsing attributes in process `syz.4.3460'.
[  906.333163][T15486] loop7: detected capacity change from 0 to 4096
[  906.361924][T15486] ntfs3: Unknown parameter 'discardpre­ĒQ™c'
[  906.580569][T15497] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  907.989113][T15511] netlink: 'syz.4.3473': attribute type 10 has an invalid length.
[  922.263116][T15756] kvm [15754]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1897
[  922.290390][T15756] kvm [15754]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x5897
[  922.343401][T15756] kvm [15754]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x87f9
[  922.430865][T15756] kvm [15754]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0xc7f9
[  931.561509][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  931.568391][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  957.662815][T16260] loop7: detected capacity change from 0 to 32768
[  957.754500][T16260] XFS (loop7): Mounting V5 Filesystem
[  957.847411][T16260] XFS (loop7): Ending clean mount
[  957.877570][T16260] XFS (loop7): Quotacheck needed: Please wait.
[  957.941588][T16260] XFS (loop7): Quotacheck: Done.
[  957.990527][T12841] XFS (loop7): Unmounting Filesystem
[  979.393952][T16541] loop7: detected capacity change from 0 to 16
[  980.527855][T16541] erofs: (device loop7): mounted with root inode @ nid 36.
[  982.843123][T16571] loop7: detected capacity change from 0 to 32768
[  984.551578][ T4655] Bluetooth: hci1: command 0x0405 tx timeout
[  989.343902][T16635] nfs: Unexpected value for 'acl'
[  990.968944][T16644] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3779'.
[  993.996447][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  994.021242][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  996.116593][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3789'.
[  996.685948][T16716] autofs4:pid:16716:autofs_fill_super: called with bogus options
[  999.013137][T16752] loop7: detected capacity change from 0 to 64
[  999.468621][T16759] minix_free_block (loop7:1): bit already cleared
[  999.475737][T16759] minix_free_block (loop7:4): bit already cleared
[  999.482428][T16759] minix_free_block (loop7:3): bit already cleared
[  999.488970][T16759] minix_free_block (loop7:2): bit already cleared
[  999.495477][T16759] minix_free_block (loop7:1): bit already cleared
[ 1004.800538][T16816] loop7: detected capacity change from 0 to 1024
[ 1007.369249][T16846] netlink: 'syz.7.3829': attribute type 10 has an invalid length.
[ 1007.519880][T16846] bridge0: port 3(syz_tun) entered disabled state
[ 1007.569912][T16846] bridge0: port 3(syz_tun) entered disabled state
[ 1007.835950][T16846] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1012.118235][T16898] overlayfs: failed to clone upperpath
[ 1018.307409][T16961] loop7: detected capacity change from 0 to 32768
[ 1018.533940][T16961] XFS (loop7): Mounting V5 Filesystem
[ 1019.061786][T16961] XFS (loop7): Ending clean mount
[ 1019.079688][T16961] XFS (loop7): Quotacheck needed: Please wait.
[ 1019.203192][T16961] XFS (loop7): Quotacheck: Done.
[ 1020.309984][T12841] XFS (loop7): Unmounting Filesystem
[ 1026.634748][T17072] binder: 17071:17072 ioctl 4018620d 0 returned -22
[ 1041.534988][T17262] autofs4:pid:17262:autofs_fill_super: called with bogus options
[ 1044.127635][T17297] autofs4:pid:17297:autofs_fill_super: called with bogus options
[ 1047.166385][T17307] autofs4:pid:17307:autofs_fill_super: called with bogus options
[ 1052.685946][T17375] loop7: detected capacity change from 0 to 32768
[ 1053.650991][T17375] XFS (loop7): Mounting V5 Filesystem
[ 1054.699309][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.705750][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.921469][T17418] autofs4:pid:17418:autofs_fill_super: called with bogus options
[ 1055.438839][T17375] XFS (loop7): Ending clean mount
[ 1055.466581][T17375] XFS (loop7): Quotacheck needed: Please wait.
[ 1055.639043][T17375] XFS (loop7): Quotacheck: Done.
[ 1055.679784][T12841] XFS (loop7): Unmounting Filesystem
[ 1065.823014][T17540] autofs4:pid:17540:autofs_fill_super: called with bogus options
[ 1072.891817][T17623] autofs4:pid:17623:autofs_fill_super: called with bogus options
[ 1073.290998][T17625] autofs4:pid:17625:autofs_fill_super: called with bogus options
[ 1076.929448][T17687] autofs4:pid:17687:autofs_fill_super: called with bogus options
[ 1082.953181][T17748] autofs4:pid:17748:autofs_fill_super: called with bogus options
[ 1085.001964][T17773] autofs4:pid:17773:autofs_fill_super: called with bogus options
[ 1085.761706][T17786] autofs4:pid:17786:autofs_fill_super: called with bogus options
[ 1087.637078][T17803] autofs4:pid:17803:autofs_fill_super: called with bogus options
[ 1087.925471][T17805] autofs4:pid:17805:autofs_fill_super: called with bogus options
[ 1091.994244][T17844] autofs4:pid:17844:autofs_fill_super: called with bogus options
[ 1098.532334][T17910] autofs4:pid:17910:autofs_fill_super: called with bogus options
[ 1102.912020][T17974] autofs4:pid:17974:autofs_fill_super: called with bogus options
[ 1108.266379][T18039] autofs4:pid:18039:autofs_fill_super: called with bogus options
[ 1110.550073][T18064] autofs4:pid:18064:autofs_fill_super: called with bogus options
[ 1112.560075][T18097] autofs4:pid:18097:autofs_fill_super: called with bogus options
[ 1113.483149][T18109] autofs4:pid:18109:autofs_fill_super: called with bogus options
[ 1114.611257][T18115] autofs4:pid:18115:autofs_fill_super: called with bogus options
[ 1116.004110][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.014102][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 1118.486119][T18151] autofs4:pid:18151:autofs_fill_super: called with bogus options
[ 1120.026130][T18163] loop7: detected capacity change from 0 to 32768
[ 1120.894288][T18163] XFS (loop7): Mounting V5 Filesystem
[ 1121.379175][T18190] autofs4:pid:18190:autofs_fill_super: called with bogus options
[ 1122.211690][T18163] XFS (loop7): Ending clean mount
[ 1122.221872][T18163] XFS (loop7): Quotacheck needed: Please wait.
[ 1122.378279][T18163] XFS (loop7): Quotacheck: Done.
[ 1123.434610][T12841] XFS (loop7): Unmounting Filesystem
[ 1124.141901][T18206] autofs4:pid:18206:autofs_fill_super: called with bogus options
[ 1125.180100][T18210] autofs4:pid:18210:autofs_fill_super: called with bogus options
[ 1127.162697][T18226] autofs4:pid:18226:autofs_fill_super: called with bogus options
[ 1130.907118][T18254] autofs4:pid:18254:autofs_fill_super: called with bogus options
[ 1131.921365][T18264] autofs4:pid:18264:autofs_fill_super: called with bogus options
[ 1135.621563][T18309] autofs4:pid:18309:autofs_fill_super: called with bogus options
[ 1138.121879][T18326] autofs4:pid:18326:autofs_fill_super: called with bogus options
[ 1141.727569][T18365] autofs4:pid:18365:autofs_fill_super: called with bogus options
[ 1142.194447][T18372] autofs4:pid:18372:autofs_fill_super: called with bogus options
[ 1145.032054][T18409] autofs4:pid:18409:autofs_fill_super: called with bogus options
[ 1152.123569][T18489] autofs4:pid:18489:autofs_fill_super: called with bogus options
[ 1152.996578][T18495] autofs4:pid:18495:autofs_fill_super: called with bogus options
[ 1153.878718][    C1] hrtimer: interrupt took 69039 ns
[ 1163.419309][T18613] loop7: detected capacity change from 0 to 128
[ 1163.564752][T18613] EXT4-fs warning (device loop7): ext4_fill_super:3982: metadata_csum and uninit_bg are redundant flags; please run fsck.
[ 1163.578888][T18613] EXT4-fs (loop7): Encoding requested by superblock is unknown
[ 1165.550805][T18647] loop7: detected capacity change from 0 to 32768
[ 1165.711809][T18647] XFS (loop7): Mounting V5 Filesystem
[ 1166.625201][T18647] XFS (loop7): Ending clean mount
[ 1166.638330][T18647] XFS (loop7): Quotacheck needed: Please wait.
[ 1166.752994][T18647] XFS (loop7): Quotacheck: Done.
[ 1168.017977][T12841] XFS (loop7): Unmounting Filesystem
[ 1172.427014][T18709] loop7: detected capacity change from 0 to 32768
[ 1172.789993][T18709] XFS (loop7): Mounting V5 Filesystem
[ 1173.012709][T18709] XFS (loop7): Ending clean mount
[ 1173.033210][T18709] XFS (loop7): Quotacheck needed: Please wait.
[ 1173.743414][T18709] XFS (loop7): Quotacheck: Done.
[ 1173.774670][T12841] XFS (loop7): Unmounting Filesystem
[ 1177.389296][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.397565][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 1184.709281][T18827] loop7: detected capacity change from 0 to 32768
[ 1190.154773][T18897] loop7: detected capacity change from 0 to 32768
[ 1195.277022][T18970] loop7: detected capacity change from 0 to 32768
[ 1195.916956][T18970] XFS (loop7): Mounting V5 Filesystem
[ 1196.237476][T18988] autofs4:pid:18988:autofs_fill_super: called with bogus options
[ 1196.245791][T18970] XFS (loop7): Ending clean mount
[ 1196.255720][T18970] XFS (loop7): Quotacheck needed: Please wait.
[ 1196.460230][T18970] XFS (loop7): Quotacheck: Done.
[ 1197.980513][T12841] XFS (loop7): Unmounting Filesystem
[ 1200.471212][T19029] autofs4:pid:19029:autofs_fill_super: called with bogus options
[ 1209.879867][T19152] autofs4:pid:19152:autofs_fill_super: called with bogus options
[ 1211.216351][T19157] autofs4:pid:19157:autofs_fill_super: called with bogus options
[ 1212.703925][T19179] autofs4:pid:19179:autofs_fill_super: called with bogus options
[ 1213.059549][T19180] autofs4:pid:19180:autofs_fill_super: called with bogus options
[ 1213.794384][T19188] loop7: detected capacity change from 0 to 32768
[ 1214.549373][T19188] XFS (loop7): Mounting V5 Filesystem
[ 1215.340505][T19188] XFS (loop7): Ending clean mount
[ 1215.351212][T19188] XFS (loop7): Quotacheck needed: Please wait.
[ 1215.649104][T19188] XFS (loop7): Quotacheck: Done.
[ 1216.208169][T19222] autofs4:pid:19222:autofs_fill_super: called with bogus options
[ 1216.758296][T12841] XFS (loop7): Unmounting Filesystem
[ 1227.401594][T19341] autofs4:pid:19341:autofs_fill_super: called with bogus options
[ 1231.002813][T19371] autofs4:pid:19371:autofs_fill_super: called with bogus options
[ 1233.554489][T19387] autofs4:pid:19387:autofs_fill_super: called with bogus options
[ 1239.051526][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.057896][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 1243.062070][T19489] autofs4:pid:19489:autofs_fill_super: called with bogus options
[ 1245.739361][T19515] autofs4:pid:19515:autofs_fill_super: called with bogus options
[ 1248.689398][T19540] autofs4:pid:19540:autofs_fill_super: called with bogus options
[ 1250.537588][T19570] autofs4:pid:19570:autofs_fill_super: called with bogus options
[ 1252.765438][T19585] loop7: detected capacity change from 0 to 32768
[ 1253.053368][T19594] autofs4:pid:19594:autofs_fill_super: called with bogus options
[ 1253.327751][T19597] autofs4:pid:19597:autofs_fill_super: called with bogus options
[ 1254.365857][T19606] autofs4:pid:19606:autofs_fill_super: called with bogus options
[ 1254.739699][T19585] XFS (loop7): Mounting V5 Filesystem
[ 1255.369816][T19585] XFS (loop7): Ending clean mount
[ 1255.377595][T19585] XFS (loop7): Quotacheck needed: Please wait.
[ 1257.538739][T19585] XFS (loop7): Quotacheck: Done.
[ 1257.738015][T12841] XFS (loop7): Unmounting Filesystem
[ 1260.753296][T19674] autofs4:pid:19674:autofs_fill_super: called with bogus options
[ 1261.319025][T19687] autofs4:pid:19687:autofs_fill_super: called with bogus options
[ 1262.684707][T19704] autofs4:pid:19704:autofs_fill_super: called with bogus options
[ 1263.049911][T19707] autofs4:pid:19707:autofs_fill_super: called with bogus options
[ 1263.557543][T19714] autofs4:pid:19714:autofs_fill_super: called with bogus options
[ 1264.500244][T19724] autofs4:pid:19724:autofs_fill_super: called with bogus options
[ 1264.567168][T19728] autofs4:pid:19728:autofs_fill_super: called with bogus options
[ 1268.141721][T19757] autofs4:pid:19757:autofs_fill_super: called with bogus options
[ 1268.399160][T19760] autofs4:pid:19760:autofs_fill_super: called with bogus options
[ 1269.754488][T19774] autofs4:pid:19774:autofs_fill_super: called with bogus options
[ 1271.164123][T19790] autofs4:pid:19790:autofs_fill_super: called with bogus options
[ 1272.603504][T19809] autofs4:pid:19809:autofs_fill_super: called with bogus options
[ 1274.256195][T19827] autofs4:pid:19827:autofs_fill_super: called with bogus options
[ 1274.775422][T19839] autofs4:pid:19839:autofs_fill_super: called with bogus options
[ 1278.258217][T19866] autofs4:pid:19866:autofs_fill_super: called with bogus options
[ 1280.386228][T19876] autofs4:pid:19876:autofs_fill_super: called with bogus options
[ 1281.549861][T19887] autofs4:pid:19887:autofs_fill_super: called with bogus options
[ 1294.394978][T19993] loop7: detected capacity change from 0 to 512
[ 1294.977659][T19993] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1295.599212][T19993] EXT4-fs (loop7): 1 truncate cleaned up
[ 1295.724751][T19993] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1297.187750][T20026] loop7: detected capacity change from 0 to 512
[ 1297.287359][T20027] autofs4:pid:20027:autofs_fill_super: called with bogus options
[ 1297.625592][T20026] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1298.323102][T20026] EXT4-fs (loop7): 1 truncate cleaned up
[ 1298.342721][T20026] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1300.241878][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.248270][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 1302.125248][T20055] loop7: detected capacity change from 0 to 512
[ 1302.390876][T20055] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1304.214086][T20055] EXT4-fs (loop7): 1 truncate cleaned up
[ 1304.219996][T20055] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1306.093324][T20095] autofs4:pid:20095:autofs_fill_super: called with bogus options
[ 1306.774795][T20102] autofs4:pid:20102:autofs_fill_super: called with bogus options
[ 1314.280245][T20152] autofs4:pid:20152:autofs_fill_super: called with bogus options
[ 1324.344735][T20229] autofs4:pid:20229:autofs_fill_super: called with bogus options
[ 1326.044821][T20242] autofs4:pid:20242:autofs_fill_super: called with bogus options
[ 1326.471673][T20244] lo speed is unknown, defaulting to 1000
[ 1326.678615][    C1] ------------[ cut here ]------------
[ 1326.684741][    C1] refcount_t: addition on 0; use-after-free.
[ 1326.686043][ T4342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1326.691259][    C1] WARNING: CPU: 1 PID: 20228 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0
[ 1326.710774][    C1] Modules linked in:
[ 1326.714710][    C1] CPU: 1 PID: 20228 Comm: syz.7.4703 Not tainted 5.15.185-syzkaller #0
[ 1326.723052][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1326.733177][    C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0
[ 1326.739421][    C1] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59
[ 1326.759110][    C1] RSP: 0018:ffffc90000dd0848 EFLAGS: 00010246
[ 1326.765217][    C1] RAX: f4608a0ec8176c00 RBX: 0000000000000002 RCX: ffff8880212e8000
[ 1326.773275][    C1] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000
[ 1326.781310][    C1] RBP: ffffc90000dd09b0 R08: dffffc0000000000 R09: fffffbfff1ff3652
[ 1326.789379][    C1] R10: fffffbfff1ff3652 R11: 1ffffffff1ff3651 R12: ffff888024e59a80
[ 1326.797389][    C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000
[ 1326.805442][    C1] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[ 1326.814466][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1326.821108][    C1] CR2: 000020000024c030 CR3: 000000000be8e000 CR4: 00000000003506e0
[ 1326.829163][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1326.837162][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1326.839111][    C0] ------------[ cut here ]------------
[ 1326.845204][    C1] Call Trace:
[ 1326.850693][    C0] refcount_t: saturated; leaking memory.
[ 1326.853964][    C1]  <IRQ>
[ 1326.860073][    C0] WARNING: CPU: 0 PID: 20234 at lib/refcount.c:22 refcount_warn_saturate+0x153/0x1a0
[ 1326.862456][    C1]  tipc_crypto_xmit+0x1949/0x2560
[ 1326.871927][    C0] Modules linked in:
[ 1326.876958][    C1]  ? tipc_crypto_do_cmd+0xd60/0xd60
[ 1326.880864][    C0] CPU: 0 PID: 20234 Comm: syz.4.4706 Not tainted 5.15.185-syzkaller #0
[ 1326.886059][    C1]  tipc_bearer_xmit_skb+0x228/0x3c0
[ 1326.894302][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1326.899516][    C1]  ? tipc_bearer_min_mtu+0x190/0x190
[ 1326.909612][    C0] RIP: 0010:refcount_warn_saturate+0x153/0x1a0
[ 1326.914901][    C1]  tipc_disc_timeout+0x568/0x6b0
[ 1326.921068][    C0] Code: 09 01 48 c7 c7 20 6a 59 8a e8 89 27 bb 05 0f 0b eb 8c e8 b0 41 9c fd c6 05 59 8f 79 09 01 48 c7 c7 20 6a 59 8a e8 6d 27 bb 05 <0f> 0b e9 6d ff ff ff e8 91 41 9c fd c6 05 3e 8f 79 09 01 48 c7 c7
[ 1326.926011][    C1]  ? tipc_disc_create+0x920/0x920
[ 1326.945678][    C0] RSP: 0018:ffffc90000007848 EFLAGS: 00010246
[ 1326.950737][    C1]  ? tipc_disc_create+0x920/0x920
[ 1326.956848][    C0] RAX: 437b93e420945e00 RBX: 0000000000000001 RCX: ffff88801ada8000
[ 1326.961931][    C1]  call_timer_fn+0x16c/0x530
[ 1326.970058][    C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[ 1326.974659][    C1]  ? tipc_disc_create+0x920/0x920
[ 1326.982664][    C0] RBP: ffffc900000079b0 R08: dffffc0000000000 R09: fffffbfff1ff3652
[ 1326.987679][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1326.995675][    C0] R10: fffffbfff1ff3652 R11: 1ffffffff1ff3651 R12: ffff888024e59a80
[ 1327.001666][    C1]  ? __run_timers+0x7c0/0x7c0
[ 1327.009661][    C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 00000000c0000000
[ 1327.014333][    C1]  ? rcu_is_watching+0x11/0xa0
[ 1327.022315][    C0] FS:  00007f1ff5d8c6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[ 1327.027066][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1327.036026][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1327.041246][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1327.047827][    C0] CR2: 0000200000284030 CR3: 0000000063629000 CR4: 00000000003506f0
[ 1327.053033][    C1]  ? tipc_disc_create+0x920/0x920
[ 1327.061040][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1327.066058][    C1]  __run_timers+0x525/0x7c0
[ 1327.074224][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1327.078747][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1327.086704][    C0] Call Trace:
[ 1327.086716][    C0]  <IRQ>
[ 1327.091395][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1327.094818][    C0]  tipc_crypto_xmit+0x1949/0x2560
[ 1327.097680][    C1]  ? sched_clock_cpu+0x15/0x3c0
[ 1327.103727][    C0]  ? tipc_crypto_do_cmd+0xd60/0xd60
[ 1327.108743][    C1]  ? ktime_get_real_ts64+0x420/0x420
[ 1327.113612][    C0]  tipc_bearer_xmit_skb+0x228/0x3c0
[ 1327.118822][    C1]  run_timer_softirq+0x63/0xf0
[ 1327.124107][    C0]  ? tipc_bearer_min_mtu+0x190/0x190
[ 1327.129324][    C1]  handle_softirqs+0x328/0x820
[ 1327.134098][    C0]  tipc_disc_timeout+0x568/0x6b0
[ 1327.139389][    C1]  ? __irq_exit_rcu+0x12f/0x220
[ 1327.144152][    C0]  ? tipc_disc_create+0x920/0x920
[ 1327.149106][    C1]  ? do_softirq+0x200/0x200
[ 1327.153958][    C0]  ? tipc_disc_create+0x920/0x920
[ 1327.159016][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[ 1327.163527][    C0]  call_timer_fn+0x16c/0x530
[ 1327.168586][    C1]  __irq_exit_rcu+0x12f/0x220
[ 1327.173796][    C0]  ? tipc_disc_create+0x920/0x920
[ 1327.178404][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1327.183130][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1327.188160][    C1]  irq_exit_rcu+0x5/0x20
[ 1327.192679][    C0]  ? __run_timers+0x7c0/0x7c0
[ 1327.198699][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1327.202942][    C0]  ? rcu_is_watching+0x11/0xa0
[ 1327.207690][    C1]  </IRQ>
[ 1327.213338][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1327.218082][    C1]  <TASK>
[ 1327.221049][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1327.226413][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1327.229498][    C0]  ? tipc_disc_create+0x920/0x920
[ 1327.234681][    C1] RIP: 0010:lock_acquire+0x1f2/0x3f0
[ 1327.240683][    C0]  __run_timers+0x525/0x7c0
[ 1327.245691][    C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
[ 1327.251008][    C0]  ? detach_timer+0x2b0/0x2b0
[ 1327.255485][    C1] RSP: 0018:ffffc9000334f2e0 EFLAGS: 00000206
[ 1327.275129][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1327.279819][    C1] 
[ 1327.279828][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f4608a0ec8176c00
[ 1327.285901][    C0]  ? sched_clock_cpu+0x15/0x3c0
[ 1327.291922][    C1] RDX: 0000000000000000 RSI: ffffffff8a0b2460 RDI: ffffffff8a59a740
[ 1327.294259][    C0]  ? ktime_get_real_ts64+0x420/0x420
[ 1327.302249][    C1] RBP: ffffc9000334f400 R08: dffffc0000000000 R09: fffffbfff1ff3619
[ 1327.307113][    C0]  run_timer_softirq+0x63/0xf0
[ 1327.315128][    C1] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: ffffffff8c11bfa0
[ 1327.320445][    C0]  handle_softirqs+0x328/0x820
[ 1327.328405][    C1] R13: 1ffff92000669e68 R14: 0000000000000246 R15: dffffc0000000000
[ 1327.333201][    C0]  ? __irq_exit_rcu+0x12f/0x220
[ 1327.341224][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1327.345969][    C0]  ? do_softirq+0x200/0x200
[ 1327.354267][    C1]  rcu_lock_acquire+0x20/0x30
[ 1327.359155][    C0]  __irq_exit_rcu+0x12f/0x220
[ 1327.364514][    C1]  ? __page_memcg+0x140/0x140
[ 1327.369048][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1327.373712][    C1]  lock_page_memcg+0xa9/0x410
[ 1327.378396][    C0]  irq_exit_rcu+0x5/0x20
[ 1327.383079][    C1]  ? mem_cgroup_get_oom_group+0x350/0x350
[ 1327.387573][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1327.392278][    C1]  ? workingset_activation+0x606/0x760
[ 1327.396509][    C0]  </IRQ>
[ 1327.402238][    C1]  page_remove_rmap+0x2a/0x10f0
[ 1327.407864][    C0]  <TASK>
[ 1327.413341][    C1]  unmap_page_range+0xfbc/0x2520
[ 1327.416303][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1327.421186][    C1]  ? uprobe_munmap+0x165/0x3f0
[ 1327.424103][    C0] RIP: 0010:scm_recv+0x434/0x540
[ 1327.429112][    C1]  unmap_vmas+0x11b/0x230
[ 1327.435083][    C0] Code: 02 de 4a ff eb 05 e8 2b f1 f6 f8 48 c7 44 24 20 0e 36 e0 45 48 8b 44 24 18 4a c7 04 28 00 00 00 00 4a c7 44 28 08 00 00 00 00 <65> 48 8b 04 25 28 00 00 00 48 3b 84 24 a0 00 00 00 75 56 48 8d 65
[ 1327.439862][    C1]  ? uprobe_clear_state+0x4f/0x460
[ 1327.444801][    C0] RSP: 0018:ffffc9000391f660 EFLAGS: 00000246
[ 1327.449154][    C1]  ? unmap_page_range+0x2520/0x2520
[ 1327.468788][    C0] 
[ 1327.468797][    C0] RAX: 1ffff92000723ed0 RBX: ffffc9000391f800 RCX: 0000000000080000
[ 1327.473900][    C1]  ? __mutex_lock_common+0x431/0x2390
[ 1327.479997][    C0] RDX: ffffc9000ea5a000 RSI: 000000000007ffff RDI: 0000000000080000
[ 1327.485219][    C1]  ? memset+0x1e/0x40
[ 1327.487538][    C0] RBP: ffffc9000391f750 R08: dffffc0000000000 R09: ffffed1009401182
[ 1327.495539][    C1]  exit_mmap+0x38f/0x5f0
[ 1327.500927][    C0] R10: ffffed1009401182 R11: 1ffff11009401181 R12: ffffc9000391f808
[ 1327.508918][    C1]  ? vm_brk+0x20/0x20
[ 1327.508957][    C1]  ? uprobe_clear_state+0x2f6/0x460
[ 1327.508978][    C1]  ? mm_update_next_owner+0x5e1/0x640
[ 1327.509004][    C1]  __mmput+0x115/0x3b0
[ 1327.509028][    C1]  exit_mm+0x567/0x6c0
[ 1327.513085][    C0] R13: dffffc0000000000 R14: ffffc9000391f808 R15: ffff88804a008c08
[ 1327.521079][    C1]  ? xacct_add_tsk+0x4b0/0x4b0
[ 1327.525344][    C0]  ? __unix_dgram_recvmsg+0xd50/0xd50
[ 1327.533316][    C1]  ? do_exit+0x20a0/0x20a0
[ 1327.537292][    C0]  ? skb_copy_datagram_iter+0x1f0/0x1f0
[ 1327.542505][    C1]  ? taskstats_exit+0x439/0xab0
[ 1327.547886][    C0]  ? skb_copy_datagram_iter+0xad/0x1f0
[ 1327.551956][    C1]  ? mm_trace_rss_stat+0x81/0x1c0
[ 1327.556021][    C0]  ? pid_vnr+0xfb/0x1d0
[ 1327.564013][    C1]  ? sync_mm_rss+0x211/0x350
[ 1327.568806][    C0]  __unix_dgram_recvmsg+0x9bf/0xd50
[ 1327.574164][    C1]  do_exit+0x599/0x20a0
[ 1327.578597][    C0]  ? lock_chain_count+0x20/0x20
[ 1327.584136][    C1]  ? put_task_struct+0x80/0x80
[ 1327.589181][    C0]  ? unix_unhash+0x10/0x10
[ 1327.594650][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1327.599705][    C0]  ? mark_lock+0x94/0x320
[ 1327.603846][    C1]  ? lock_chain_count+0x20/0x20
[ 1327.608428][    C0]  ? unix_dgram_recvmsg+0xb2/0xd0
[ 1327.613643][    C1]  ? _raw_spin_lock_irq+0xab/0xe0
[ 1327.617794][    C0]  ? unix_dgram_sendmsg+0x1890/0x1890
[ 1327.622681][    C1]  do_group_exit+0x12e/0x300
[ 1327.627452][    C0]  ____sys_recvmsg+0x291/0x580
[ 1327.631898][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1327.637892][    C0]  ? __sys_recvmsg_sock+0x40/0x40
[ 1327.642237][    C1]  get_signal+0x6ca/0x12c0
[ 1327.647095][    C0]  ? import_iovec+0x6f/0xa0
[ 1327.652237][    C1]  arch_do_signal_or_restart+0xc1/0x1300
[ 1327.657244][    C0]  ___sys_recvmsg+0x1af/0x4f0
[ 1327.662647][    C1]  ? futex_exit_release+0x1c0/0x1c0
[ 1327.667233][    C0]  ? __sys_recvmsg+0x250/0x250
[ 1327.672025][    C1]  ? get_sigframe_size+0x10/0x10
[ 1327.677244][    C0]  ? __lock_acquire+0x7c60/0x7c60
[ 1327.682311][    C1]  ? exit_to_user_mode_loop+0x3b/0x130
[ 1327.686740][    C0]  ? __might_fault+0xb3/0x110
[ 1327.691251][    C1]  exit_to_user_mode_loop+0x9e/0x130
[ 1327.696900][    C0]  do_recvmmsg+0x344/0x7a0
[ 1327.701723][    C1]  exit_to_user_mode_prepare+0xb1/0x140
[ 1327.706958][    C0]  ? __sys_recvmmsg+0x280/0x280
[ 1327.711766][    C1]  syscall_exit_to_user_mode+0x16/0x40
[ 1327.716768][    C0]  ? __lock_acquire+0x7c60/0x7c60
[ 1327.721803][    C1]  do_syscall_64+0x58/0xa0
[ 1327.727289][    C0]  __x64_sys_recvmmsg+0x18d/0x240
[ 1327.731995][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1327.737284][    C0]  ? do_recvmmsg+0x7a0/0x7a0
[ 1327.741712][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1327.741738][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1327.747445][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1327.752314][    C1] RIP: 0033:0x7ff391b18929
[ 1327.757789][    C0]  do_syscall_64+0x4c/0xa0
[ 1327.762826][    C1] Code: Unable to access opcode bytes at RIP 0x7ff391b188ff.
[ 1327.762840][    C1] RSP: 002b:00007ff38f95f0e8 EFLAGS: 00000246
[ 1327.767240][    C0]  ? clear_bhb_loop+0x30/0x80
[ 1327.772415][    C1]  ORIG_RAX: 00000000000000ca
[ 1327.772428][    C1] RAX: fffffffffffffe00 RBX: 00007ff391d40088 RCX: 00007ff391b18929
[ 1327.777117][    C0]  ? clear_bhb_loop+0x30/0x80
[ 1327.781810][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff391d40088
[ 1327.781826][    C1] RBP: 00007ff391d40080 R08: 0000000000000000 R09: 0000000000000000
[ 1327.781839][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff391d4008c
[ 1327.786523][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1327.792422][    C1] R13: 0000000000000000 R14: 00007ffcee1a5740 R15: 00007ffcee1a5828
[ 1327.797716][    C0] RIP: 0033:0x7f1ff7f45929
[ 1327.802161][    C1]  </TASK>
[ 1327.806788][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1327.814221][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1327.820328][    C0] RSP: 002b:00007f1ff5d8c038 EFLAGS: 00000246
[ 1327.824975][    C1] CPU: 1 PID: 20228 Comm: syz.7.4703 Not tainted 5.15.185-syzkaller #0
[ 1327.829686][    C0]  ORIG_RAX: 000000000000012b
[ 1327.837612][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1327.842319][    C0] RAX: ffffffffffffffda RBX: 00007f1ff816d080 RCX: 00007f1ff7f45929
[ 1327.850251][    C1] Call Trace:
[ 1327.850263][    C1]  <IRQ>
[ 1327.850275][    C1]  dump_stack_lvl+0x168/0x230
[ 1327.858410][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1327.866406][    C1]  ? show_regs_print_info+0x20/0x20
[ 1327.866437][    C1]  ? load_image+0x3b0/0x3b0
[ 1327.866471][    C1]  panic+0x2c9/0x7f0
[ 1327.872552][    C0] RBP: 00007f1ff7fc7b39 R08: 0000000000000000 R09: 0000000000000000
[ 1327.880594][    C1]  ? bpf_jit_dump+0xd0/0xd0
[ 1327.880638][    C1]  ? refcount_warn_saturate+0xff/0x1a0
[ 1327.885036][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[ 1327.888073][    C1]  __warn+0x248/0x2b0
[ 1327.907744][    C0] R13: 0000000000000000 R14: 00007f1ff816d080 R15: 00007fffb5670118
[ 1327.914970][    C1]  ? refcount_warn_saturate+0xff/0x1a0
[ 1327.915004][    C1]  report_bug+0x1b7/0x2e0
[ 1327.921105][    C0]  </TASK>
[ 1327.929303][    C1]  handle_bug+0x3a/0x70
[ 1327.929330][    C1]  exc_invalid_op+0x16/0x40
[ 1327.934049][    C0] irq event stamp: 101932
[ 1327.944118][    C1]  asm_exc_invalid_op+0x16/0x20
[ 1327.944142][    C1] RIP: 0010:refcount_warn_saturate+0xff/0x1a0
[ 1327.952160][    C0] hardirqs last  enabled at (101944): [<ffffffff89c00d06>] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1327.955411][    C1] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59
[ 1327.958342][    C0] hardirqs last disabled at (101951): [<ffffffff815f1fae>] console_unlock+0x9ee/0x1200
[ 1327.963010][    C1] RSP: 0018:ffffc90000dd0848 EFLAGS: 00010246
[ 1327.963032][    C1] RAX: f4608a0ec8176c00 RBX: 0000000000000002 RCX: ffff8880212e8000
[ 1327.963048][    C1] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000
[ 1327.971038][    C0] softirqs last  enabled at (93884): [<ffffffff81486e9f>] __irq_exit_rcu+0x12f/0x220
[ 1327.976205][    C1] RBP: ffffc90000dd09b0 R08: dffffc0000000000 R09: fffffbfff1ff3652
[ 1327.980741][    C0] softirqs last disabled at (100787): [<ffffffff81486e9f>] __irq_exit_rcu+0x12f/0x220
[ 1327.984607][    C1] R10: fffffbfff1ff3652 R11: 1ffffffff1ff3651 R12: ffff888024e59a80
[ 1327.992608][    C0] ---[ end trace 7167d16c33e1ecdd ]---
[ 1327.997071][    C1] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000
[ 1328.002576][    C0] ------------[ cut here ]------------
[ 1328.010519][    C1]  ? refcount_warn_saturate+0xff/0x1a0
[ 1328.014512][    C0] refcount_t: underflow; use-after-free.
[ 1328.022620][    C1]  tipc_crypto_xmit+0x1949/0x2560
[ 1328.022673][    C1]  ? tipc_crypto_do_cmd+0xd60/0xd60
[ 1328.028685][    C0] WARNING: CPU: 0 PID: 20234 at lib/refcount.c:28 refcount_warn_saturate+0x11b/0x1a0
[ 1328.032696][    C1]  tipc_bearer_xmit_skb+0x228/0x3c0
[ 1328.035859][    C0] Modules linked in:
[ 1328.040027][    C1]  ? tipc_bearer_min_mtu+0x190/0x190
[ 1328.040072][    C1]  tipc_disc_timeout+0x568/0x6b0
[ 1328.044597][    C0] CPU: 0 PID: 20234 Comm: syz.4.4706 Tainted: G        W         5.15.185-syzkaller #0
[ 1328.048939][    C1]  ? tipc_disc_create+0x920/0x920
[ 1328.048983][    C1]  ? tipc_disc_create+0x920/0x920
[ 1328.053816][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1328.059879][    C1]  call_timer_fn+0x16c/0x530
[ 1328.059908][    C1]  ? tipc_disc_create+0x920/0x920
[ 1328.070782][    C0] RIP: 0010:refcount_warn_saturate+0x11b/0x1a0
[ 1328.090444][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1328.090485][    C1]  ? __run_timers+0x7c0/0x7c0
[ 1328.100130][    C0] Code: 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 0f 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59 8a e8 a5 27 bb 05 <0f> 0b eb a8 e8 cc 41 9c fd c6 05 74 8f 79 09 01 48 c7 c7 20 6a 59
[ 1328.106162][    C1]  ? rcu_is_watching+0x11/0xa0
[ 1328.114159][    C0] RSP: 0018:ffffc90000007848 EFLAGS: 00010246
[ 1328.122444][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1328.122489][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1328.122512][    C1]  ? tipc_disc_create+0x920/0x920
[ 1328.132084][    C0] 
[ 1328.140028][    C1]  __run_timers+0x525/0x7c0
[ 1328.140071][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1328.149618][    C0] RAX: 437b93e420945e00 RBX: 0000000000000003 RCX: ffff88801ada8000
[ 1328.157558][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1328.163048][    C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000
[ 1328.170988][    C1]  ? sched_clock_cpu+0x15/0x3c0
[ 1328.171014][    C1]  ? ktime_get_real_ts64+0x420/0x420
[ 1328.176454][    C0] RBP: ffffc900000079b0 R08: dffffc0000000000 R09: fffffbfff1ff3652
[ 1328.181917][    C1]  run_timer_softirq+0x63/0xf0
[ 1328.181945][    C1]  handle_softirqs+0x328/0x820
[ 1328.187559][    C0] R10: fffffbfff1ff3652 R11: 1ffffffff1ff3651 R12: 00000000c0000000
[ 1328.192577][    C1]  ? __irq_exit_rcu+0x12f/0x220
[ 1328.192608][    C1]  ? do_softirq+0x200/0x200
[ 1328.197796][    C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888024e59a80
[ 1328.207246][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[ 1328.207275][    C1]  __irq_exit_rcu+0x12f/0x220
[ 1328.212515][    C0] FS:  00007f1ff5d8c6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[ 1328.216817][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1328.222128][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1328.227047][    C1]  irq_exit_rcu+0x5/0x20
[ 1328.236677][    C0] CR2: 0000200000284030 CR3: 0000000063629000 CR4: 00000000003506f0
[ 1328.241676][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1328.241707][    C1]  </IRQ>
[ 1328.246897][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1328.256965][    C1]  <TASK>
[ 1328.256983][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1328.257012][    C1] RIP: 0010:lock_acquire+0x1f2/0x3f0
[ 1328.261645][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1328.266639][    C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
[ 1328.272906][    C0] Call Trace:
[ 1328.278845][    C1] RSP: 0018:ffffc9000334f2e0 EFLAGS: 00000206
[ 1328.278871][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: f4608a0ec8176c00
[ 1328.283571][    C0]  <IRQ>
[ 1328.303165][    C1] RDX: 0000000000000000 RSI: ffffffff8a0b2460 RDI: ffffffff8a59a740
[ 1328.303183][    C1] RBP: ffffc9000334f400 R08: dffffc0000000000 R09: fffffbfff1ff3619
[ 1328.303199][    C1] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: ffffffff8c11bfa0
[ 1328.308058][    C0]  tipc_crypto_xmit+0x1a8e/0x2560
[ 1328.314145][    C1] R13: 1ffff92000669e68 R14: 0000000000000246 R15: dffffc0000000000
[ 1328.314197][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1328.319466][    C0]  ? tipc_crypto_do_cmd+0xd60/0xd60
[ 1328.324642][    C1]  rcu_lock_acquire+0x20/0x30
[ 1328.329723][    C0]  tipc_bearer_xmit_skb+0x228/0x3c0
[ 1328.331997][    C1]  ? __page_memcg+0x140/0x140
[ 1328.336535][    C0]  ? tipc_bearer_min_mtu+0x190/0x190
[ 1328.336568][    C0]  tipc_disc_timeout+0x568/0x6b0
[ 1328.341240][    C1]  lock_page_memcg+0xa9/0x410
[ 1328.341266][    C1]  ? mem_cgroup_get_oom_group+0x350/0x350
[ 1328.349478][    C0]  ? tipc_disc_create+0x920/0x920
[ 1328.355447][    C1]  ? workingset_activation+0x606/0x760
[ 1328.363535][    C0]  ? tipc_disc_create+0x920/0x920
[ 1328.368311][    C1]  page_remove_rmap+0x2a/0x10f0
[ 1328.373643][    C0]  call_timer_fn+0x16c/0x530
[ 1328.381706][    C1]  unmap_page_range+0xfbc/0x2520
[ 1328.381750][    C1]  ? uprobe_munmap+0x165/0x3f0
[ 1328.386504][    C0]  ? tipc_disc_create+0x920/0x920
[ 1328.391274][    C1]  unmap_vmas+0x11b/0x230
[ 1328.391297][    C1]  ? uprobe_clear_state+0x4f/0x460
[ 1328.399315][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1328.404233][    C1]  ? unmap_page_range+0x2520/0x2520
[ 1328.408761][    C0]  ? __run_timers+0x7c0/0x7c0
[ 1328.416697][    C1]  ? __mutex_lock_common+0x431/0x2390
[ 1328.421953][    C0]  ? rcu_is_watching+0x11/0xa0
[ 1328.426621][    C1]  ? memset+0x1e/0x40
[ 1328.435579][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1328.440087][    C1]  exit_mmap+0x38f/0x5f0
[ 1328.440118][    C1]  ? vm_brk+0x20/0x20
[ 1328.446702][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1328.450976][    C1]  ? uprobe_clear_state+0x2f6/0x460
[ 1328.451001][    C1]  ? mm_update_next_owner+0x5e1/0x640
[ 1328.458991][    C0]  ? tipc_disc_create+0x920/0x920
[ 1328.464699][    C1]  __mmput+0x115/0x3b0
[ 1328.467636][    C0]  __run_timers+0x525/0x7c0
[ 1328.475614][    C1]  exit_mm+0x567/0x6c0
[ 1328.475640][    C1]  ? xacct_add_tsk+0x4b0/0x4b0
[ 1328.478620][    C0]  ? detach_timer+0x2b0/0x2b0
[ 1328.484622][    C1]  ? do_exit+0x20a0/0x20a0
[ 1328.489939][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1328.497904][    C1]  ? taskstats_exit+0x439/0xab0
[ 1328.517652][    C0]  ? sched_clock_cpu+0x15/0x3c0
[ 1328.520891][    C1]  ? mm_trace_rss_stat+0x81/0x1c0
[ 1328.520918][    C1]  ? sync_mm_rss+0x211/0x350
[ 1328.526999][    C0]  ? ktime_get_real_ts64+0x420/0x420
[ 1328.535059][    C1]  do_exit+0x599/0x20a0
[ 1328.535092][    C1]  ? put_task_struct+0x80/0x80
[ 1328.537943][    C0]  run_timer_softirq+0x63/0xf0
[ 1328.545937][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1328.545969][    C1]  ? lock_chain_count+0x20/0x20
[ 1328.554064][    C0]  handle_softirqs+0x328/0x820
[ 1328.562001][    C1]  ? _raw_spin_lock_irq+0xab/0xe0
[ 1328.562034][    C1]  do_group_exit+0x12e/0x300
[ 1328.567055][    C0]  ? __irq_exit_rcu+0x12f/0x220
[ 1328.575017][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1328.575048][    C1]  get_signal+0x6ca/0x12c0
[ 1328.580626][    C0]  ? do_softirq+0x200/0x200
[ 1328.585810][    C1]  arch_do_signal_or_restart+0xc1/0x1300
[ 1328.590509][    C0]  __irq_exit_rcu+0x12f/0x220
[ 1328.595672][    C1]  ? futex_exit_release+0x1c0/0x1c0
[ 1328.600389][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1328.605647][    C1]  ? get_sigframe_size+0x10/0x10
[ 1328.610636][    C0]  irq_exit_rcu+0x5/0x20
[ 1328.615278][    C1]  ? exit_to_user_mode_loop+0x3b/0x130
[ 1328.620998][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1328.625991][    C1]  exit_to_user_mode_loop+0x9e/0x130
[ 1328.631473][    C0]  </IRQ>
[ 1328.636457][    C1]  exit_to_user_mode_prepare+0xb1/0x140
[ 1328.641435][    C0]  <TASK>
[ 1328.645988][    C1]  syscall_exit_to_user_mode+0x16/0x40
[ 1328.650951][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1328.655764][    C1]  do_syscall_64+0x58/0xa0
[ 1328.660812][    C0] RIP: 0010:scm_recv+0x434/0x540
[ 1328.665114][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1328.670278][    C0] Code: 02 de 4a ff eb 05 e8 2b f1 f6 f8 48 c7 44 24 20 0e 36 e0 45 48 8b 44 24 18 4a c7 04 28 00 00 00 00 4a c7 44 28 08 00 00 00 00 <65> 48 8b 04 25 28 00 00 00 48 3b 84 24 a0 00 00 00 75 56 48 8d 65
[ 1328.676221][    C1]  ? clear_bhb_loop+0x30/0x80
[ 1328.681448][    C0] RSP: 0018:ffffc9000391f660 EFLAGS: 00000246
[ 1328.686098][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1328.691498][    C0] 
[ 1328.696241][    C1] RIP: 0033:0x7ff391b18929
[ 1328.700255][    C0] RAX: 1ffff92000723ed0 RBX: ffffc9000391f800 RCX: 0000000000080000
[ 1328.705411][    C1] Code: Unable to access opcode bytes at RIP 0x7ff391b188ff.
[ 1328.709686][    C0] RDX: ffffc9000ea5a000 RSI: 000000000007ffff RDI: 0000000000080000
[ 1328.713624][    C1] RSP: 002b:00007ff38f95f0e8 EFLAGS: 00000246
[ 1328.718862][    C0] RBP: ffffc9000391f750 R08: dffffc0000000000 R09: ffffed1009401182
[ 1328.724050][    C1]  ORIG_RAX: 00000000000000ca
[ 1328.729447][    C0] R10: ffffed1009401182 R11: 1ffff11009401181 R12: ffffc9000391f808
[ 1328.734463][    C1] RAX: fffffffffffffe00 RBX: 00007ff391d40088 RCX: 00007ff391b18929
[ 1328.738561][    C0] R13: dffffc0000000000 R14: ffffc9000391f808 R15: ffff88804a008c08
[ 1328.743026][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff391d40088
[ 1328.747237][    C0]  ? __unix_dgram_recvmsg+0xd50/0xd50
[ 1328.752099][    C1] RBP: 00007ff391d40080 R08: 0000000000000000 R09: 0000000000000000
[ 1328.752118][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff391d4008c
[ 1328.752131][    C1] R13: 0000000000000000 R14: 00007ffcee1a5740 R15: 00007ffcee1a5828
[ 1328.752161][    C1]  </TASK>
[ 1328.756927][    C0]  ? skb_copy_datagram_iter+0x1f0/0x1f0
[ 1328.761610][    C1] Kernel Offset: disabled
[ 1329.096297][    C1] Rebooting in 86400 seconds..