last executing test programs:

20.34591001s ago: executing program 4 (id=151):
socket(0x1d, 0x2, 0x6)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180))
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
ftruncate(0xffffffffffffffff, 0x51a9497)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00001ce000/0x4000)=nil, 0x3000})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003004a15"], 0x12c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x0)

16.819006427s ago: executing program 4 (id=163):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x24, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}]}, 0x24}}, 0x40c0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='erofs_fill_inode\x00', r1}, 0x10)
fstat(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x810410, &(0x7f0000002700)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYBLOB="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", @ANYRESDEC=r4, @ANYRES8=r3], 0x2, 0x1e3, &(0x7f0000000600)="$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")

15.186157715s ago: executing program 4 (id=170):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x4c, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c726f6469722c757466383d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c00117e9a6bae7e4a53f24b35a03ae1b23111c9bfb2565752883487dcce6ec8d299157ce3b3555eb28e4598a7f1dee2736a66441b4c387e2669be3ae6ea8ce0f971001a61edbcf2e962b6f8753be291a7ca79e41945e83c279c7dfa"], 0x0, 0x2a8, &(0x7f0000000d00)="$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")
pipe(&(0x7f00000001c0))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

11.343132837s ago: executing program 3 (id=174):
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
iopl(0x1)
r0 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x165080)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000240))
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket(0x29, 0x2, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x119, 0x22, 0x0, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

10.63896448s ago: executing program 4 (id=176):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x7b, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0)

9.182704056s ago: executing program 0 (id=179):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000084)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r3, 0x4b40, 0x0)

9.094823117s ago: executing program 4 (id=180):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
futex(&(0x7f0000004000), 0x4, 0x0, 0x0, &(0x7f0000004000), 0x30004000)
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
dup3(r1, r2, 0x80000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x70, 0x1, 0x7, 0x1, 0x2, 0xf5, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x81, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0xdb, 0x6}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x3, 0x4, 0x6, 0xff, 0x99}, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f2d00030a10030001000006090014ff01000000000000f001000f00000000c000000a100302080004070400"], 0x6, [{0x54, &(0x7f0000000200)=@string={0x54, 0x3, "1a3fc75348770656d72e066d6de635ca6d2c717135333994b997f139622992e5aa369c628a4fdcff4aecb6b1f54f407d0073130415ec96992681146bcb9f85391480df1e46e0d220a2a24bd6cb990cb5a705"}}, {0xe7, &(0x7f0000000280)=@string={0xe7, 0x3, "4d0ebcadbb68b76cb339205f655eed05b638ce973ec27b2af083465e305b43d898b75963fca9d0834831f370cee6a08e57f6bb738b19c50ef53cc00008f4d0e6e1025a379218b2968934a71ea22a0529385b2e620e685395244c7b8b48a934a0ba9b827646f752c277b4ab0fa3cb78f40a9d8716d4755d17bfce8e8ef28811ca0d79594f286db1b0fe0cdf772f8abea190c590afb53bb8d1afa86edc39844c161eb3ce4ee122575f5b86e780de91b4916684acb54040c6873e8fc613835f084865fa1c5cde03392b17f381d959e84e325be09e6ae6615418787003c2c260846580c0b4967d"}}, {0x52, &(0x7f0000000380)=@string={0x52, 0x3, "3b413b4a6070102238b930168fa9ce749675989e4077f5a2b0f11de080a29a7f2f3f0dc7d50b639c2db53856fb2240a473900a0b14dc3e9724a8b437e169e3bc5984b5d96192ff8c795e1db19e131dae"}}, {0x1e, &(0x7f0000000400)=@string={0x1e, 0x3, "59601fa8adfedee1d6d3198939474744647917a849c4565fcfea53d8"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x407}}]})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000940)={0x40, 0x1f}, 0x0, 0x0})

8.96135857s ago: executing program 1 (id=181):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r1, &(0x7f0000000000))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x9c}}, 0x0)
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x12000a0, &(0x7f0000000240)={'trans=virtio,', {[{@mmap}, {@privport}, {@noextend}, {@access_client}, {@privport}, {@access_any}, {@cache_none}, {@privport}], [{@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'$'}}, {@dont_measure}, {@euid_lt={'euid<', r1}}, {@uid_lt={'uid<', r1}}, {@obj_user={'obj_user', 0x3d, '\\::-]+![/$-'}}]}})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180f251"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

8.465898857s ago: executing program 0 (id=182):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc802, &(0x7f0000000040)=ANY=[], 0x1, 0x679, &(0x7f0000000640)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000006900010028bd7000fcdbdf25000000000000000008000180"], 0x58}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0xfecc)

8.118097331s ago: executing program 1 (id=183):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x1005, &(0x7f0000002500)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x4}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000180)=0x2fb, 0x4)
sendto$inet6(r8, &(0x7f00000000c0)="a0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r10, 0x1, 0x2f, &(0x7f0000000040), 0x3b)
r11 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@union={0x2, 0x6, 0x0, 0x5, 0x1, 0xe8d1, [{0xe, 0x4, 0x15}, {0x4, 0x1, 0x10}, {0xf, 0x2, 0x241}, {0x10, 0x2, 0x3e}, {0xf, 0x2, 0xefc7}, {0x0, 0x2}]}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$key(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020a09063e"], 0x1f0}}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r4, 0x2dee, 0x5ba9, 0x12, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

8.103609706s ago: executing program 2 (id=184):
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0x0)
syz_clone3(&(0x7f00000002c0)={0x7000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r1], 0x1}, 0x58)

7.153107355s ago: executing program 3 (id=185):
r0 = memfd_create(&(0x7f0000000380)='fuse\x00', 0xf)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x12, 0x0, 0xd, "fbdbf978590aa1b88c44306d20"}})
lseek(r0, 0x9, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="6401ac1414aa0000000005000000e00000020000209bbdc2877e91347ae15e376f57cc0b7bcbb6c90e383e718301c702fd43d7d61b2e7a2d186c824cf9e71d4ee99c67cf076a3c774a8ac64f72bdb7548934fea781931b31394ccf2ec3811a410829b7052150516bc34a02ece44f97945cdf5b1423aabda0cae1920f0000794671bb86187230c014054e5837fdee52a32a304e12e78b2d76616476cb8a0ff20c2b4753e9425a528c1ec175784d52181b9029cff44a7761209f0f8a71358a40aa0aca"], 0x14)

7.041994947s ago: executing program 1 (id=186):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x4c, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c726f6469722c757466383d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c00117e9a6bae7e4a53f24b35a03ae1b23111c9bfb2565752883487dcce6ec8d299157ce3b3555eb28e4598a7f1dee2736a66441b4c387e2669be3ae6ea8ce0f971001a61edbcf2e962b6f8753be291a7ca79e41945e83c279c7dfa"], 0x0, 0x2a8, &(0x7f0000000d00)="$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")
pipe(&(0x7f00000001c0))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

7.041477187s ago: executing program 2 (id=187):
r0 = socket(0xa, 0x1, 0x1)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8)
sendto$inet(r1, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r1, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0)
close(r1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x178, 0xc, 0x1c0, 0x178, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6bfc1134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xc450}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @private2, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_hsr\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0200000057767e3c79d4c6359a6ccde6be040000d491fbe7c876c6988f48b1a0958914ed675792c54a31c9af6ff472ae00fdfd02000000ca84d45887bee9be8a88b1887fb8fe63bdb0d4e9", @ANYRES8=r0, @ANYBLOB="dc2a848a4be5fdc9c90f456e1b2455791448909e9a86ad3101f3555b1136375d0c30d9769ae1e2244c955d089e124c7400f3545d57311908d1141730b699e5cd3bff0507e531f365b5e70ec10fa078cffe66464e638b5ed697ca73a4e1fa2d6a719b739c20868ac456828b2fe248f3e1fa3e9f03ec1dd600"/130, @ANYRES64=r2, @ANYRES32, @ANYBLOB="000000000000000037e4084300"/43, @ANYRES16=r1, @ANYRES64=r2, @ANYBLOB="8f79c17bcb0673737afbd47b0df06f7735b93de9df0772c8c6a463df629e47a05292050bc0a3a56376786e494d41cdfc4833e7d76871e432f431f57c4cdea188aff701d418a3c8e368093811f1930a458ec6fedca390d87131b2657cd0c65edca4f79a5d2182856565adcbbf2206cab72d8053a495f2885967f2127456721fe276605f53b7163f01826cc11a6d0320a803ea092d6a0f85184c20e9fb6af22d24e5e2d85410b155ed14c4c55202a342fc2d5318e78fd853b273bd0b2ea75438ed0a4b09b607b31360f0015c841fc5ff1723fc394b525fbf0e4519e4d78dbd0fa11410ac792240655edfbe2d3c2de49c483cf76d0212c484db860d9620eb5e96ea8bacd035f382ed5a1de4f563668639aa88624d017f278aef843e155733cda73ec34fdf5a8e3910b31cebc8167d1324f2e80e5af6059f993fc723f96614a5471d761cd4ca4da46aa3aad2b7270b69cbdb25e7e4fde713a095beb61b8cb1c65497fee0d0a6cd1b7228363a9e95099c8e6ab3765e224436009ff7b368595d271d6b2f987bf4df93a5925d67f4f9d286e5a0cb26e2da176546484ea9ecbd3d2ffd7e4b93182be45aa87ce57f8cc8d3fd6fbf5576806a040cd4ccb9354980028d5ef4552d9fff7d0ea415bf442437ed3954426470cfd96655baded5046614c4ffc2ea76402931025bff6fd8aaa55888574dd184903e657685fb6c57b75e23eac264443b8dd93f0f7ab6879a08833b61dade7a5a1d07c0fe2f9cebc481fd7b08765703614b242e468b36356ac0b2f7f1836c175324b64e0ca168bf31cafd09180cf8bebe5e064b6b611501800852e9e52ef39a0dbc504a24867ff245fffab20fe8845a55e763af035b861a919331287d203e8a503bcaafad3fe439cc99190033513de0fdb8811fc5e99a761766fdb69b2a24669e1770e365c3c59ac352e340d7730e9497ccfbfa7ee048ae5187bade5047758b454a70bbbbbdcbda2f4afc5d8f32d913b6efd4a1ed8a71397985f56b87cc448b74a9d135f205670b08d1b97baa0c1ccaa2c3c486f0a6563c4b961ed318e5a7c6d57f6e934087744c90c1a60f4ab67c32b45de44f17cc7210311c0961c62dbe929754756917632c2944a5372b8f99c8e8c663d30f7311908dec20051c41078d7b009a96768e05997c4f4f9840b501258027ff9dd88f7100487d5f062bedb45434b62c61180ff03d9c0e16293d487b197f46ddf144cc11e19cd73b62603949930cbda3e8e2d78d4a0b59a6eb65f5245f02d9309658e9bef3002595b09614584425ee57af86be5f29619a10cc115be2489a8272e1bd88cf67706c7b7aefa9a34f347c7cc9e20e1e7507656c136ca4a5df736c16f13dd72ee50114cee006fa1d9c8d89151118d7ed2968ede1df5292a5377424f09db1c99798c473fcca8c0190ace7f1859edbeb36eea5e638545c031564f35aedaa52ede90459cb1c8a790dba75d1a934c8e95beb982c457a9d0cee242114bf3753f277bc79eb6e69dd2465e4dc2c59953c3a642df065915235ca1b03f204bb29cc98d28e747126f4a7219802d2a9116665135e8ade58ffdb82f1ed51f88fc2906b7192c677d7a492518a1826f6739c4e9df07369fda51dd5b76bd6904df457e2d12f6d0ec3b5cc0c9ddce9623cb326907ea2fa517e25cb229ec8a30c170284f4a21be8d460a96aecfab23f4f7d5557d3bc064408c2ad6f662d8ad72efda41bdf2bcd3d9539069a9695908ce32f2fae36c69e7dbc67b29b2dce135737fd99460b35d702716441cfea987a7db70bd58b94d403748e325b17563ca2ff102544b4ec801cbb33e5402ca016a5a478a1a93dcaa96510b9c433a4c77a19abe6ce2cc07dd5b574cc2512b13be625d833b096bd916d46f8dec781bd27e4873181ae7ef01d1c2de1ba693cfcb0264eafc3cac78329bc0d2046db0533cc04f2d714358706f6b57cdfd09b1075093c491eabe390e337f982d4bfefbc7ddcbee124e10fbdd6705d100203f7eac623f2f873640b4d8fee586034078a1204644d53dd0ee263b2c4690d14fb9afb84d24d8c7cf741cd2ee50db20b26706fc0932a422e59cec4334917891726a59ae8d2c666d46a3abb4704c2025b88a093ad85fb8ab5ece50960448faf5d71bc8d474bc4e36c9c5decf1f691f4372bd3fe519bfbf35dc5518e486d525cd3dcfe9ed69245e6464f44a1c07dcf8e3b313b4aad400cbb4a83eb0ec02e088193f5bad80184cd743647745841d296ada29d3512f4908d79ca10a8d5865b4236dd90a33b7e88b3e518dd69a0048ef80863cf604f74500d296414b624b52d7caaf624a0a621bd4511ac4de5debbcedf106878fde18b12152b6e40bfa3c7372a703e4eaa5d255b0123c5000d685313aac13ef268893cfbed0efc6568c7765b862befa978b007ac86e555b0b7f3c917d8c798f3539ad707c33bde7587035d9956a07883fe1502111e436925cc6b12d0398af215cbc36f9f3d9df6215e929d193330101f3d6ca04b62e4edf19f0c99dee78a01db9688afe61467ef839ee1e0931179c897d53eeb4c4d3b43da1ba8610473976595896d05041c1c1443f46081ec4b0d237438d5e142d0999e79b39a4486cd853dfba85606d09825ac34e1bb6377aa981f06de04fc8c0b0a30d6e634695b5eb7c410ecbb91bb2ab3f63d221d8c84aab43c49108df08af5b1a105bef4ee5e938c63bb58446e9cd6f1f87b79a65c918353dd8e8aae1c7138ee5f1fd77d35357d224f06cf678509e332a4747ffd8570408c7ca82f6539634a9dd1c62decf03368a671caaeac7d0b9f5ef98a37bee97f94b8983403c8a31351e1e6c2066b3b571c2b5f673f7bf1c0f3432478e2a2db6fe13b8eeaff92e66198b102026fed80f67a68389b3241d1ed9e40f3cf5552d002ecfc869bd71b5afd72915f3151cdc6ee461d9f380795d2158f7b95129e4ef1788d8bbd0a307240cc6af0874fff3c6444efa795c408e55bdccd8686838313dfd4352bf7f988f0a1cab404c20920d3b1f46be1c4f30530a0f88068d081642ea1bcb73293c3afc34dd7a171033bdee39b5b12e5e67794becdfd4540358d147e23f6df26821e9459c93c100d396cd3bb79f23f26f113a07e3fa9ea02ff07f45ed8776b5bb3f3414eef38effb0f0e14838b7e78a35bddf7a3b5478daeb187eae2196dde5fcb1271d069c31c4cabdf69f38cc990fd3095158edbb93fc022a665cda366c75b7909c565d6f2e3b94432e035b68631202ef7733c8ed46f94176ac9e64907216912b14b39ed58d2f4f0aac31f6aa9c985f0d935ae231d395107e635ae671d8ebea09d4e09a7f159f8a0617db11f2b0380a189ce9f117d6a6112e6e29d56987500c6d231a831bdc1ba7726901cf2c75f36078e8138d6b632a38761ea0167c26e33799931f07cee34c343eb2ac63215541dc81d31b4c769f4b6b4f79b60cfe769365a1e4d75009d97e3b9e8275904f07c1c222a749a2a6162bc411b283632238b5e2dcf189d0a4ab41bd9e53b5eb9372f306ba0aed3091aece538322ba1073632b5ed6c6ae82eabf82eb46f7bd941acf9411a2356df6d40b414c72585c584101d6d8cba44310014a89edff9239a032188176149714a6eba24882ec42f66a6f612adc85d5cad9fd871415a4456ba19b1ae9334c15dc8448cb6cb7e2768ad9eff6161baf3a2d9c275ff1f130d5270068448ed26e0193fca9b347d71830459200066926aa01cb401aa2f6c6381d46393d001ad9bf8130295cffdb48acc78601edfc3e5d2deaadc36494791d5d82eb1efaddf0e6c802f04060c6ac9d5e1391b3ec0a11228f88f7181315a7b05b43300a5be8efefa6304a852ce231d673cfc062d391c7416aa1a1665de6524c662eed92b9d054f5232ffb8968ab3849c3d14dd1b7069c3f31b63fcaaaa8bef211715c7fd1a1b192c822a37e673eb2dbcc8ed9ed021d37c5fae7d1f1c7e4eed819ae0ffb8c4360e812d3984dbeb17a7a5d457fc126e7c3c0aa39761835db534964247bbe41e9a6e8abf0112f42c8622c845277027f71079a5a592c78b61d861aae81bf5772ffd91f7cf827e93013521c678dbf5d6cedfc1f7ec45f032ae5479af52b9badf51219589dddcaa88713e46d72d671d6ab43a135ee631015a68c3ee5f4eece20ae865b4bf078ccdfa6f9a4e770a8796ce7d6c80acba8ad6f55f050b2b539359464240429bf698a1efeb936c61e8518a991abe54d02b0c356614889b44f759eece8c70230298e3f1cc9782ec85b063559c9ad17ee984227ca6cb4ef670c70346f26f8e31e125cf2a659e6040e7bd77e4ae665176377af72bd57d57a516e421f28f4c3ef5a6d348a8817e3a9008a9d11323432363de99ca43cf8f06f08ce1331034429ee8dcb976a07b6f43ed67c2e44ff217d387dbf5a82fbeed5b3a92431e691d21392a9cfb85ff084075a08630ada005959d894c3b0083923ba0141aea13de165fe5400a6936b4aa5736823ddfb85fb0f2ffe9f3e68a7c82fab2998b2ee781ce18476fd4bbaf768e10334216c8fc8ae26b4a1fa861e14e42fa8fad5cca7b8d1a176b9361c5fa55712adc768e2facb35aadd5aae2b7ab9a4b1e57f6ee364be55b9ac75a4de42ea10564c91368bc5878ce92714201ac741a3b142857c5b36252037ca83dff18882988119524d8aae242079481b6297096505cc01966f51bbe1da33c644bd93c224af9f99bbfe212ea4e2cabc055a0c1eaad86e6a201f2f783fcb128937595dd5161ce8214a32da1bf4e819d06920440b5214a075f65047c89e16a0d300009062d8ea3aa1b180280e2ee8bf19d99d81a1ba27d562df73a672f65643ba31eb685c0db6fa9e246e972e7264c939cf0e4a1caba125f8ccdc5849b9d7d4a618aa8f4f97ea8081d7bdeb29e0f79de92ec1567833bd76772de2a31bd73b9dffc41ee2be07450781b562637bf515bf9d8637fa7b52c03c6a38cc947ea8c057b435e87bf62340b8a642e235653b69a95ae26417ee6890ac9522861549f62603346304a8e7a6f89d6639f624c4a31d06ffc54f889ef7e888e1cc0776b03298547d61dadc212853bf02d7b4e46a5573762913577e572895f8295dfb73b01b9db9ccfc3ed84b3b64409d328b1564c209782a67cfab85af82d1d79846a31e8b1be0fcfe7b7d36b1bbfab4846227c613748bb84687a0131020bfb4f31fc2372723bc9e7446d21c29c20b8e736a10b7b52a9879f81b781c98f6b759a6f271c821b68eb7c79aa5b42452a564df38fa9d48db451d23c7f5124b76b0443afbffd1cbc30b2092ee89b668b7b4d07f90ed8d1c3095668497defae73b0f08d36403a15d6b1413ae3ccb65b60843a48e06c81a79a7e04643645113be42ebe23ef5c0bd722cee20583e2f0f475993d0b68f15edf81ceab52ee922bddbd691983bf6addda64483b035d1af2df60a86504abef231f5dd75af1b9d5585c5ea493e61cb29a2c00f1ffbcde1aa58778ed2896fd9c10b4cf4b4ddfd170629eeecb6d6198dc14a8509c3fbfa59583e1e309c241522e4d73ef463fc6f9584d24c8dcd9123d61e0990574ad075da49d4c2bfca7ba3144e7729e1efc1e880557cf4983c3b9d92e24082c7a3cfd355f09e298117f19c711e66b03b96e7d80b95f7c8d4d89bb516f198b3e9be552dc42addfc761861c462fa1eca7adce4be249043de4e2a94442603e3e36feac751ecf3dcb1d1d933676a82860626a4e311e8596716ebf10080d65071f25e5df8f0d2b3e90e4ed4b3a02a2fb1b510060cf1aea652ccbdc0c1b3699aed29960caed411973a02d35846faaf6292f35"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='thermal_temperature\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42802, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0, 0xfffffffffffffff4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000a80), 0xfe, 0x55f, &(0x7f0000000480)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000))
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x581081, 0x0)

6.928756007s ago: executing program 0 (id=188):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x34, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x34}}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x7, &(0x7f0000000000), 0x4)
syz_clone(0x41000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xe)
shutdown(r0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fchdir(r5)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000010201cc16183c00000000800a000000060007"], 0x58}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}]}, &(0x7f0000000440)=0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902120001000020000904"], 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4)
setsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000000)=0x2, 0x4)
mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x9)
r8 = syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x2000)
ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f00000001c0)=""/153)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

6.370464731s ago: executing program 3 (id=189):
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000040)='./file0\x00', 0x2)

5.370785228s ago: executing program 1 (id=190):
r0 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000100)=""/41, 0x29)
getdents64(r1, 0xfffffffffffffffe, 0x29)
recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001040)=[{0x0}, {&(0x7f0000001280)=""/149, 0x95}], 0x2}}], 0x2, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x2}], 0xf}], 0x49249249249261c, 0x0)
sendmmsg$unix(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=")
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0)
fallocate(r4, 0x0, 0x0, 0x9000f4)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r5 = syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r6 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRESDEC=r5, @ANYBLOB="000000000000000000000050b23890087424cbc6", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES64=r0], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r7}, &(0x7f0000001340), &(0x7f0000001380)='%pI4   \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r7}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x600)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, 0x0, 0x0)
fcntl$setstatus(r8, 0x4, 0x0)
dup(r8)
syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x509002)

5.153179081s ago: executing program 2 (id=191):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x294, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x24c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x17c, 0x6, [@m_connmark={0xc0, 0x0, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0xb8, 0x800, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xffffffffffffffff}}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}]}, {0x15, 0x6, "83bbbc78bf132de93c8b8a54d084fdc1e4"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xbc, 0x6, [@m_nat={0xb8, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x3d, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1926ea4833cb4d1c8b7635b"}, {0xc}, {0xc}}}]}]}}]}, 0x294}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

5.102037802s ago: executing program 3 (id=192):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x800)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000800)={'\x00', 0x11, 0x8, 0x9ff2, 0x2000003}) (async)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x800) (async, rerun: 64)
r4 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040), 0x4)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0046686, 0xffffffffffffffff) (async, rerun: 32)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x1000848, &(0x7f00000015c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c7379735f696d6d757461626c652c756e695f786c6174653d312c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f636861727365743d6d61636761656c69632c756e695f786c6174653d312c64656275672c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c00765951898d8d221b19e1a2ffba549e66dc3e46698a9c2fe46460faf0ff29a68c04dfd74a8a4a75d249abf2c6442933dc3131ed0478aa9a20ee72b682544b75de4d", @ANYRES8], 0x1, 0x384, &(0x7f0000001d00)="$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") (async, rerun: 32)
truncate(&(0x7f0000000080)='./file1\x00', 0xc00) (async)
truncate(&(0x7f0000000180)='./file0\x00', 0xfffd) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0xb4}}, 0x14) (async)
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$eJzs3c9qE1EUx/HfnaRttKVO/4ggrqoFV9LWjbgpSN/AjStRmwjFUEErqKvqWnwA976CD+DSlbgW3LnyAbKL3DM3ZpJmMnFoOkn6/UBC0rln5tzMnd57ppQIwLl1b+/X59u//cNJFVUk3ZUiSTWpKumyrtReHR4dHDUb9WE7qliEfzglke5Em/3DxqBQH2cRQezfVbWU/hnGo/ZTx2XngPLZ1T9AJC2Eq9O21848s/E474PetdTSay2XnQcAoFxh/o/CPL8U1u9RJG2Gab93/p/yCbRVdgJj9jVne2r+tyqr7fz5vWSbuvWelXB+e9SpEovkMq9kZPUsMF1eVWm5RBeeHjQbt/afN+uR3ms3mOs2W7fnejJ0O9LZvju5640BtekQxfu+aH2Y833YSeefarJ2ukfM57657+6hi/VJ9X/rv2rb+dNkZyruO1NJ/lvZe7RezstaZfRyxQ5yNRwhGNrLijIqEnVG1Ip6bxDEeXla1GpfVNK77ZyotYFROzlR6/1R3dGcHTlu7qN74Db0R1+0l1r/R/7T3tQoV6ZvYy3DyBjan6q1jG0+CVfd8bWBLaOiPUIBH/REd7T88s3bZ4+bzcaLmX3hr8QJSGOiXnQGwaTkM7Mv/IdcytE7807x/ZT2mwlnqHvS/zOQv83MCr/uckn9l6pXtmyx5p/i3nX6Qjq2nbfz1B63M2qDVXu+mF3B9XB262Exu4Ibtea6flO6McoRE3HIc/LsFglye/qhR9z/BwAAAAAAAAAAAAAAAAAAmDan9y8HNWVtKruPAAAAAAAAAAAAAAAAAAAAAABMu4n7/t/7St7x/b/A2P0NAAD//1Bodro=") (async)
close(0xffffffffffffffff)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f00000000c0), 0xfea7)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0xfffffffffffffe5e, 0xfa00, {0x0, 0x0}}, 0x20) (async)
syz_usb_connect(0x1, 0x11c, &(0x7f0000000100)=ANY=[@ANYRESHEX], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

4.603145541s ago: executing program 4 (id=193):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="23c0b20549f256d243dd1e6e529ba2088912ee3ddcef92159aa51b4d33b49f40d5e2848a34f2dab91221c3b524db3d0f8a45bf7eef19853cd744e1fb8283db651fb8093b9dc7f6410930d213db0460bf83102a16fe5ce87f1368b582c9b56e8d0bf5c5e2302eb3f5b1123ca439e1db370a809c941c30aea7442e5be2e642c7a4dc19d1debbb8b71a7c3c11d4f42613427483adbbc83b19a727302f0f805e01572d77f6e9f572219972826dddf9d9d844d56ce5406092efb7f4d9a031fe448e974f27bf108037d9449df85aa43a5be20614", 0xd1}], 0x1}}], 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000032c0)={'sit0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmsg$tipc(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="2f3ca1be71d0", 0xfffffffffffffd8c}], 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

4.304296949s ago: executing program 2 (id=194):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @void}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map, 0xffffffffffffffff, 0x1e, 0x1, 0x0, @void, @value}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2)
write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0xff9d)
sendfile(r0, r1, &(0x7f0000000100), 0x2)
fcntl$addseals(r1, 0x409, 0x8)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'})
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00')
sendfile(0xffffffffffffffff, r3, &(0x7f0000000140)=0xc00000, 0x2)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f00000000c0)=""/43, 0x2b)
getdents(r4, 0xfffffffffffffffd, 0x58)
getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}], 0x10)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@private=0xa010100, 0x4e20, 0xfff7, 0x4e21, 0x0, 0x2, 0x20, 0x20, 0x8, 0x0, r5}, {0x5, 0xbd4, 0x8, 0x9, 0x80000001, 0x6, 0x8, 0x3}, {0x5, 0x5, 0x5, 0x7}, 0x1, 0x6e6bbf, 0x2, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0xff}, 0x2, @in6=@mcast2, 0x3503, 0x2, 0x1, 0x1, 0xa, 0x7fff, 0x80000000}}, 0xe8)

4.21772034s ago: executing program 1 (id=195):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
acct(&(0x7f0000000140)='./file0\x00')
r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x7fffffffffffffff, 0x22000)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000200)=0x3, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20200, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x301, &(0x7f0000001080))
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000100)={0x1f, @none}, 0x8)
sendmmsg$unix(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="f58dacff", 0x4}], 0x1}}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61a, &(0x7f0000000700)="$eJzs3U1rXFUfAPD/nbwnz2PSIGpdaEC0BW3SpK0UEbQIrkqp4kJw49ikpXb6QhPR1EpTqBtB3LgQXLmwLvwOWhBc+QVcuHEllSLSjVJ05E7ujNNkbjITMzNt5veDcc6552bOuSb/njNnzrkTQM+aSv9TiNgdEReSiMm6sv7ICqdWz7v9++UT6SOJ8kD8lsTlK8lK/Wsl2fNYRKQFf41H8n1ETPatr3dx+dKZYqm0cDHLzyydvTCzuHxp3+mzxVMLpxbOzT07d/jQwUOHZ/fX/dTJl1u9vl116aPX3n53/KNjb3z5+Z1k9qufjiXxYq0sva5WX3szUzEV5Uz98fT/6+HtrqxL+mp/J/9K1h5Y66U2NoiWVH9/AxHxcIxHX91vczw+fKWrjQPaqpxErY8Cek0i/qFHVccB1ff2zb0PHmzzqATohFtHIp6qxf9ARFTjv391bjCGK3MDo7eTu+Z5kojYvw31p3X88N2xa+kj2jQPBzS2cnUom7df2/8nldiciOFKbvR24a74L2TTuBPZ/OGrG1cznlcwtSaf1T+01esBmrdyNSIeaTT+3zz+38ye0+NvbbH+nPgHAAAAAAAAtuDGkYh4ptHnf4Xa+p/BBut/xiLqds9t3eaf/xVubkM1QAO3jkQ833D9b6F6ykRflvt/ZT3AQHLydGlhf0Q8EBF7Y2Aozc/Wv+jXdT8dEfs+nvwsr/769X/pI62/uhYwa8fN/jWrgeaLS8VtuHToebeuRjzan7/+J+3/kwb9fxrfF5qsY/LJ68fzyjaPf6Bdyl9E7GnY/ye1c5KN788xUxkPzFRHBes99v4n3+TVL/6he9L+f3Tj+B9K6u/Xs9ja6w9GxIHl/nJe+VbH/4PJa31RtxPxveLS0sXZiMHk6Prjc621Ge4nw82f+kFEVOKhGi9p/O99YuP5v9r4vy4OR7J7fDXjob/Hfs4r0/9D96TxP79x/z9xd//femLu+sS3efUfb6r/P1jp0/dmR8z/wcaaDdButxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7keFiPhfJIXpWrpQmJ6OGIuIB2O0UDq/uPT0yfPvnJtPyyrf/1+oftPv+Go+qX7//0Rdfm5N/kBE7IqIT/tGKvnpE+dL892+eAAAAAAAAAAAAAAAAAAAALhHjK0+rdv/n/qlr6tNAzqhP3sW79B7+rvdAKBrxD/0LvEPvSs//v+4U67oaHOADmq2/y9faXNDgI7b4vjfxwWwA3j/D71qoLnThtvdDqAb9P8AAAAAALCj7Hr8xo9JRKw8N1J5pAazstoHgyPdah3QToW8gqHOtgPoPGt4oXdZ+gO9q8nFv8AOltRSfzbc7J+/+j9pT4MAAAAAAAAAAAAAgHX27G5i/z+wI+Xu/wd2vA32/zfa2ON2AbCD2P8PvcttvoDqYD/vm/7t/wcAAAAAAAAAAACAe8DwpTPFUmnh4uJy04krrZz83xO/Rl7RC51sxnYlVor3RDPuh8RARKwpKo+v/tmeKZZej862pxoxnahrsIN15SS69O8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwzj8BAAD//1p2Jt8=")
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "2c98d613"}]}}, 0x0}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000000240)={0x3, [0x101, 0xb2d1, 0x0]})

3.686920209s ago: executing program 3 (id=196):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)

2.893345284s ago: executing program 3 (id=197):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3})
ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000440))
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df40010010902"], 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000180))
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000640)=0x1)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000007740006080002000000000014000300ff070064778647f4d1f5da000000000a"], 0x30}, 0x1, 0xffffffff00000003}, 0x0)

2.640710578s ago: executing program 0 (id=198):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_procfs(r0, &(0x7f0000000340)='net/route\x00')
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000))
r2 = inotify_init()
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x34)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x39)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x34)
dup2(r5, r6)
inotify_add_watch(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='kmem_cache_free\x00'}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0xf0ff1f00000000)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={&(0x7f00000004c0)="5376866eab8761918dbc421f77e239efa5a6ada1eebe37166d7d23efc6da199bf8257499f8010bebb6dbc8f875434f6206e0fe1b685782012eae77e88f6c96f54790aa545a56fa6f5e815ef756f306000742f213a9c5c3761fdb3b7055433d9bf02b1f570ed10489e185ff7d138289d3e682753886c530effade38aff42fa3276a6795763f12802e5adfc662b3583e1c2f0f530663088e053c9d0265ef9b7850279f61bba9018ffd91f9434bf051ebd18dd0f88900903a89193a48fb2b00ae4226ccf3ec02063422085f30b3ef705776cf6584a5653fd9dcc86e9293dead8afb84cf512a22", &(0x7f00000006c0)=""/216, &(0x7f00000001c0)="e8be7a26c88571", &(0x7f0000000380)="fe00f596f2155bc27ef11b2032930abe337772f24e0d3db3d61746e5f09bf8681483016ef2b639629a398e61f351d1c515021be3c23ceba4ba6c8709fd42337100e09b3bc629de555511f508475c22dfc79019b81e34088f73c3fea3cba2c7c0579eb71cedca3d3aaca3748a736ed27965abe6f8f88d633a60f3fbabd78fbaa87bf48f4249d85b02c01816edfbe41c553f3cd835e7b24caebb2d1481f53dc39bc4cd222c7a7b9dddd59767ac31d660a08df067e4be5705aa8363f46e01", 0x2, r9, 0x4}, 0x38)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)
r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d0}})
ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000005c0)={0x1, @win={{0x3ff, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0}})
fchdir(r1)

2.399027876s ago: executing program 2 (id=199):
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x9)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0xa)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x19)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0x13)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x632, &(0x7f0000001840)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x8e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x24)
r4 = syz_open_procfs(r0, &(0x7f00000001c0)='net/tcp6\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x0, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r5, 0x40045109, &(0x7f0000002240))
setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f00000000c0)=0x5, 0x4)
lseek(r4, 0x141, 0xfe)
ptrace$getregs(0xe, r0, 0x5, &(0x7f0000000180))

1.712025953s ago: executing program 0 (id=200):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x4c, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c726f6469722c757466383d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c00117e9a6bae7e4a53f24b35a03ae1b23111c9bfb2565752883487dcce6ec8d299157ce3b3555eb28e4598a7f1dee2736a66441b4c387e2669be3ae6ea8ce0f971001a61edbcf2e962b6f8753be291a7ca79e41945e83c279c7dfa"], 0x0, 0x2a8, &(0x7f0000000d00)="$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")
pipe(&(0x7f00000001c0))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

998.27834ms ago: executing program 0 (id=201):
r0 = socket(0xa, 0x1, 0x1)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x3}, 0x8)
sendto$inet(r1, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r1, &(0x7f0000000080)='\x00', 0x1, 0xc840, 0x0, 0x0)
close(r1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x178, 0xc, 0x1c0, 0x178, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6bfc1134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xc450}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @private2, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_hsr\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000bc0)=ANY=[], 0x154}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0200000057767e3c79d4c6359a6ccde6be040000d491fbe7c876c6988f48b1a0958914ed675792c54a31c9af6ff472ae00fdfd02000000ca84d45887bee9be8a88b1887fb8fe63bdb0d4e9", @ANYRES8=r0, @ANYBLOB="dc2a848a4be5fdc9c90f456e1b2455791448909e9a86ad3101f3555b1136375d0c30d9769ae1e2244c955d089e124c7400f3545d57311908d1141730b699e5cd3bff0507e531f365b5e70ec10fa078cffe66464e638b5ed697ca73a4e1fa2d6a719b739c20868ac456828b2fe248f3e1fa3e9f03ec1dd600"/130, @ANYRES64=r2, @ANYRES32, @ANYBLOB="000000000000000037e4084300"/43, @ANYRES16=r1, @ANYRES64=r2, @ANYBLOB="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"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='thermal_temperature\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42802, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0, 0xfffffffffffffff4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000a80), 0xfe, 0x55f, &(0x7f0000000480)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNF1Gk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvlZvedNmatGma2Wz5fOBu59x7k3NPzv2enpOTkAAG1nj2TyHi1Yj4Nok40nRsOPKD4+vnrT66MZNtSaytffZXEkm+r3F+kv8/mmdeiYjfvo44VdhcbnV5Zb5UjrFGfqK2cHWiurxy+vJCaS6dS69MTU+ffWd66v333u1ZXd+88M8Pn9776Ow3J1a//+XB0TtJnIvD+bHmeuzCzebMeIznr8lInHvqxMkeFNZPkr2+ALoylMf5SGR9wJEYyqMeePF9FRFrwIBKxD8MqMY4oDG379E8+Lnx8MP1CdDm+g+vvzcSB+pzo0OryRMzo2y+O9aD8rMyfv3z7p1si969DwGwrZu3IuLM8PDm/i/J+7/unengnKfL2GH/t7bDSwKa3MvGP2+1Gv8UNsY/0WL8M9oidruxffwXHvSgmLay8d8HLce/G4tWY0N57qX6mG8kuXS5nGZ928sRcTJG9mf5rdZzzq7eb9tPNY//si0rvzEWzK/jwfD+Jx8zW6qVdlPnZg9vRbzWcvybbLR/0qL9s9fjQodlHE/vvt7u2Pb1f7bWfo54o2X7P17RSrZen5yo3w8Tjbtis79vH/+9Xfl7Xf+s/Q9tXf+xZGO9tpwuVndexk8H/k3bHev2/t+XfF5P78v3XS/VaouTEfuSTzbvn3r82Ea+cX5W/5Mntu7/Wt3/ByPiiw7rf/vY7ban9kP7z+6o/XeeuP/xlz+2K7+z9n+7njqZ7+mk/+v0Anfz2gEAAAAAAEC/KUTE4UgKxY10oVAsrn++41gcKpQr1dqpS5WlK7NR/67sWIwUGivdo02fh5jMPw/byE89lZ+OiKMR8d3QwXq+OFMpz+515QEAAAAAAAAAAAAAAAAAAKBPjLb5/n/mj6G9vjrgmfOT3zC4to3/XvzSE9CX/P2HwSX+YXCJfxhc4h8Gl/iHwSX+YXCJfxhc4h8AAAAAAAAAAAAAAAAAAAAAAAAAAAB66sL589m2tvroxkyWn722vDRfuXZ6Nq3OFxeWZoozlcWrxblKZa6cFmcqC9s9X7lSuTo5FUvXJ2pptTZRXV65uFBZulK7eHmhNJdeTEf+l1oBAAAAAAAAAAAAAAAAAADA86W6vDJfKpfTRQmJrhLD/XEZL0aisOvnaQR2vieJbp9wb/slAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2XwAAAP//DdMzow==")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000))
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x581081, 0x0)

351.206094ms ago: executing program 1 (id=202):
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000040)='./file0\x00', 0x2)

0s ago: executing program 2 (id=203):
socket(0x1d, 0x2, 0x6)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180))
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
ftruncate(0xffffffffffffffff, 0x51a9497)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00001ce000/0x4000)=nil, 0x3000})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003004a15"], 0x12c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.233' (ED25519) to the list of known hosts.
[  170.244470][ T5165] cgroup: Unknown subsys name 'net'
[  170.412803][ T5165] cgroup: Unknown subsys name 'cpuset'
[  170.428095][ T5165] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  224.126177][ T1240] ieee802154 phy0 wpan0: encryption failed: -22
[  224.133015][ T1240] ieee802154 phy1 wpan1: encryption failed: -22
[  224.824789][ T5165] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  230.117895][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.173891][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.226394][ T5186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  230.243159][ T5186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.252585][ T5186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  230.263783][ T5186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  230.283350][ T5186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.311186][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  230.324281][ T5186] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  230.341887][ T5186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  230.350785][ T5186] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  230.362864][ T5186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  230.371267][ T5189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  230.384573][ T4559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  230.404803][ T4559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.422168][ T4559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  230.431169][ T5192] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.449288][ T5192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.465844][ T5189] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  230.467761][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.477793][ T5189] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  230.489350][ T5183] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  230.495617][ T5189] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  230.498948][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  230.548726][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  230.565408][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  230.575900][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  230.591274][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  230.682648][ T5183] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  230.716797][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  232.106256][ T5193] chnl_net:caif_netlink_parms(): no params data found
[  232.397758][ T5195] chnl_net:caif_netlink_parms(): no params data found
[  232.420809][ T5185] chnl_net:caif_netlink_parms(): no params data found
[  232.520440][ T5194] Bluetooth: hci0: command tx timeout
[  232.590621][ T5194] Bluetooth: hci2: command tx timeout
[  232.596314][ T5194] Bluetooth: hci1: command tx timeout
[  232.602959][ T5194] Bluetooth: hci3: command tx timeout
[  232.698762][ T5182] chnl_net:caif_netlink_parms(): no params data found
[  232.724542][ T5190] chnl_net:caif_netlink_parms(): no params data found
[  232.838023][ T5189] Bluetooth: hci4: command tx timeout
[  233.489766][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.500290][ T5193] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.508119][ T5193] bridge_slave_0: entered allmulticast mode
[  233.517545][ T5193] bridge_slave_0: entered promiscuous mode
[  233.544843][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.554832][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.562922][ T5195] bridge_slave_0: entered allmulticast mode
[  233.572391][ T5195] bridge_slave_0: entered promiscuous mode
[  233.607658][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.615599][ T5193] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.623601][ T5193] bridge_slave_1: entered allmulticast mode
[  233.632952][ T5193] bridge_slave_1: entered promiscuous mode
[  233.686163][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.694103][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.703427][ T5195] bridge_slave_1: entered allmulticast mode
[  233.713007][ T5195] bridge_slave_1: entered promiscuous mode
[  233.923922][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.931881][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.939623][ T5185] bridge_slave_0: entered allmulticast mode
[  233.948849][ T5185] bridge_slave_0: entered promiscuous mode
[  234.117413][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.126759][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.134855][ T5190] bridge_slave_0: entered allmulticast mode
[  234.144243][ T5190] bridge_slave_0: entered promiscuous mode
[  234.166958][ T5193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.186582][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.194977][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.203011][ T5185] bridge_slave_1: entered allmulticast mode
[  234.212536][ T5185] bridge_slave_1: entered promiscuous mode
[  234.271447][ T5195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.299008][ T5193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.317992][ T5195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.328266][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.337581][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.345750][ T5190] bridge_slave_1: entered allmulticast mode
[  234.354061][ T5190] bridge_slave_1: entered promiscuous mode
[  234.394553][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.402488][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.410472][ T5182] bridge_slave_0: entered allmulticast mode
[  234.419774][ T5182] bridge_slave_0: entered promiscuous mode
[  234.590467][ T5189] Bluetooth: hci0: command tx timeout
[  234.671389][ T5189] Bluetooth: hci3: command tx timeout
[  234.671863][ T5194] Bluetooth: hci1: command tx timeout
[  234.676978][ T5189] Bluetooth: hci2: command tx timeout
[  234.693430][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.702171][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.709746][ T5182] bridge_slave_1: entered allmulticast mode
[  234.719389][ T5182] bridge_slave_1: entered promiscuous mode
[  234.734958][ T5193] team0: Port device team_slave_0 added
[  234.781337][ T5195] team0: Port device team_slave_0 added
[  234.835013][ T5190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.854412][ T5185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.873464][ T5190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.889913][ T5193] team0: Port device team_slave_1 added
[  234.906658][ T5185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.930300][ T5189] Bluetooth: hci4: command tx timeout
[  234.956884][ T5195] team0: Port device team_slave_1 added
[  234.974933][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.128960][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.257534][ T5193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.265032][ T5193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.291455][ T5193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.376600][ T5190] team0: Port device team_slave_0 added
[  235.390466][ T5182] team0: Port device team_slave_0 added
[  235.404115][ T5185] team0: Port device team_slave_0 added
[  235.421882][ T5190] team0: Port device team_slave_1 added
[  235.434456][ T5193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.442033][ T5193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.468453][ T5193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.483941][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.491454][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.517859][ T5195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.534714][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.542254][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.568645][ T5195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.589079][ T5185] team0: Port device team_slave_1 added
[  235.617946][ T5182] team0: Port device team_slave_1 added
[  235.773619][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.780929][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.807419][ T5190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.855460][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.862850][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.889402][ T5185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.973798][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.981641][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.007953][ T5190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.052600][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.059805][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.086336][ T5185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.100931][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.108095][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.135909][ T5182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.254665][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.262059][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.288602][ T5182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.313066][ T5193] hsr_slave_0: entered promiscuous mode
[  236.324838][ T5193] hsr_slave_1: entered promiscuous mode
[  236.350052][ T5195] hsr_slave_0: entered promiscuous mode
[  236.360022][ T5195] hsr_slave_1: entered promiscuous mode
[  236.368653][ T5195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.377551][ T5195] Cannot create hsr debugfs directory
[  236.677434][ T5189] Bluetooth: hci0: command tx timeout
[  236.751479][ T5189] Bluetooth: hci1: command tx timeout
[  236.753187][ T5183] Bluetooth: hci2: command tx timeout
[  236.757082][ T5194] Bluetooth: hci3: command tx timeout
[  236.807170][ T5182] hsr_slave_0: entered promiscuous mode
[  236.818022][ T5182] hsr_slave_1: entered promiscuous mode
[  236.827129][ T5182] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.835165][ T5182] Cannot create hsr debugfs directory
[  236.855288][ T5190] hsr_slave_0: entered promiscuous mode
[  236.866380][ T5190] hsr_slave_1: entered promiscuous mode
[  236.875222][ T5190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.883229][ T5190] Cannot create hsr debugfs directory
[  236.901666][ T5185] hsr_slave_0: entered promiscuous mode
[  236.911829][ T5185] hsr_slave_1: entered promiscuous mode
[  236.920375][ T5185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.928186][ T5185] Cannot create hsr debugfs directory
[  236.991012][ T5194] Bluetooth: hci4: command tx timeout
[  238.199075][ T5193] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  238.242421][ T5195] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  238.277383][ T5193] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  238.317135][ T5193] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  238.338588][ T5195] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  238.372633][ T5195] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  238.423324][ T5193] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  238.446218][ T5195] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  238.687649][ T5185] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  238.728462][ T5190] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  238.750647][ T5194] Bluetooth: hci0: command tx timeout
[  238.787542][ T5190] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  238.830677][ T5194] Bluetooth: hci2: command tx timeout
[  238.843095][ T5194] Bluetooth: hci3: command tx timeout
[  238.848799][ T5189] Bluetooth: hci1: command tx timeout
[  238.857306][ T5185] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  238.918859][ T5190] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  238.945642][ T5190] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  238.967262][ T5185] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  239.029447][ T5185] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  239.085603][ T5189] Bluetooth: hci4: command tx timeout
[  239.110815][ T5182] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  239.150339][ T5182] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  239.250838][ T5182] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  239.286618][ T5182] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  240.256123][ T5193] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.284522][ T5195] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.467249][ T5185] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.575680][ T5195] 8021q: adding VLAN 0 to HW filter on device team0
[  240.625666][ T5193] 8021q: adding VLAN 0 to HW filter on device team0
[  240.695846][ T5190] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.729380][ T2565] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.737199][ T2565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.791694][ T5185] 8021q: adding VLAN 0 to HW filter on device team0
[  240.892094][ T2565] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.899855][ T2565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.004218][ T5190] 8021q: adding VLAN 0 to HW filter on device team0
[  241.042016][ T2565] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.049822][ T2565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.067186][ T2565] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.075116][ T2565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.091741][ T2565] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.099485][ T2565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.122776][ T2565] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.130596][ T2565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.245171][ T2565] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.253025][ T2565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.301296][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.465104][ T5182] 8021q: adding VLAN 0 to HW filter on device team0
[  241.518782][ T2565] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.526771][ T2565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.673648][ T5193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  241.716335][ T2565] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.724207][ T2565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.747382][ T2565] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.755225][ T2565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.011255][ T5185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.075540][ T5195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.245344][ T5182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  243.874288][ T5193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.336630][ T5185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.372003][ T5195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.398209][ T5182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.473101][ T5190] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.050754][ T5195] veth0_vlan: entered promiscuous mode
[  245.124510][ T5182] veth0_vlan: entered promiscuous mode
[  245.145515][ T5185] veth0_vlan: entered promiscuous mode
[  245.220459][ T5190] veth0_vlan: entered promiscuous mode
[  245.268381][ T5195] veth1_vlan: entered promiscuous mode
[  245.318851][ T5182] veth1_vlan: entered promiscuous mode
[  245.359080][ T5185] veth1_vlan: entered promiscuous mode
[  245.405025][ T5190] veth1_vlan: entered promiscuous mode
[  245.779992][ T5182] veth0_macvtap: entered promiscuous mode
[  245.848935][ T5195] veth0_macvtap: entered promiscuous mode
[  245.906893][ T5182] veth1_macvtap: entered promiscuous mode
[  245.929706][ T5185] veth0_macvtap: entered promiscuous mode
[  245.985193][ T5195] veth1_macvtap: entered promiscuous mode
[  246.028854][ T5190] veth0_macvtap: entered promiscuous mode
[  246.084649][ T5190] veth1_macvtap: entered promiscuous mode
[  246.115193][ T5185] veth1_macvtap: entered promiscuous mode
[  246.231662][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.240912][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.252710][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.267683][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.354929][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.387768][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.398724][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.409004][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.419830][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.437411][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.458209][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.469797][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.480384][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.491240][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.501499][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.512376][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.527933][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.539507][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.550604][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.566103][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.593959][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.605621][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.615894][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.626692][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.643303][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.729792][ T5195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.739819][ T5195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.749299][ T5195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.758791][ T5195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.803304][ T5182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.812553][ T5182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.821720][ T5182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.833206][ T5182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.864713][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.876762][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.887059][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.897992][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.908194][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.922744][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.938774][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.985181][ T5190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.995756][ T5190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.005055][ T5190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.014240][ T5190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.113567][ T5185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.122947][ T5185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.132220][ T5185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.141442][ T5185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.655577][ T5193] veth0_vlan: entered promiscuous mode
[  247.789809][ T5193] veth1_vlan: entered promiscuous mode
[  248.221733][ T5193] veth0_macvtap: entered promiscuous mode
[  248.327588][ T5193] veth1_macvtap: entered promiscuous mode
[  248.541449][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.552365][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.562740][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.573575][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.583859][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.595483][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.606177][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.618726][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.634564][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.736244][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.747125][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.759313][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.770952][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.781239][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.792110][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.802371][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.813188][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.828555][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.103116][ T5193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.112458][ T5193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.121822][ T5193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.130957][ T5193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.863814][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.872093][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.200998][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.209122][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.385188][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.393512][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.465123][ T2565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.473329][ T2565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.579092][ T5195] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  254.647207][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.655761][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.732735][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.740945][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.783044][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.791700][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.906327][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.916635][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.278185][ T5364] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  255.342400][ T5364] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  255.650991][   T29] audit: type=1326 audit(1727056640.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f757def9 code=0x7fc00000
[  255.735562][   T29] audit: type=1326 audit(1727056640.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f60f757def9 code=0x7fc00000
[  255.808161][ T5370] loop1: detected capacity change from 0 to 512
[  255.863043][ T5370] EXT4-fs: Ignoring removed bh option
[  255.868846][ T5370] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  255.937046][ T5372] loop3: detected capacity change from 0 to 1024
[  256.232761][ T5372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.245765][ T5372] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.325080][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.333329][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.475101][ T5378] loop1: detected capacity change from 0 to 256
[  256.484929][ T5378] vfat: Unknown parameter 'uheck'
[  256.537659][ T5378] loop1: detected capacity change from 0 to 128
[  256.556989][ T5378] =======================================================
[  256.556989][ T5378] WARNING: The mand mount option has been deprecated and
[  256.556989][ T5378]          and is ignored by this kernel. Remove the mand
[  256.556989][ T5378]          option from the mount to silence this warning.
[  256.556989][ T5378] =======================================================
[  256.594155][ T5378] udf: Unknown parameter 'ˆ7^]AVŃîmÁÅW’É$c’~-Öµøû’·Ï¼Ïû13$Ó!yóìùè\š�Ëׯ_‹¹¹JTÏ?|>nT¢YvbRmJ'
[  256.785622][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.794257][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.977395][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'.
[  258.182574][ T5387] Zero length message leads to an empty skb
[  258.208125][   T29] audit: type=1326 audit(1727056643.190:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f757def9 code=0x7fc00000
[  259.861289][ T5244] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  260.068241][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10'.
[  260.181466][ T5244] usb 2-1: config 0 has an invalid interface number: 156 but max is 1
[  260.189999][ T5244] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  260.207735][ T5244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  260.219198][ T5244] usb 2-1: config 0 has no interface number 0
[  260.225805][ T5244] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  260.236254][ T5244] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  260.247853][ T5244] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  260.361625][ T5185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.655555][   T60] Bluetooth: hci5: Frame reassembly failed (-84)
[  260.671453][ T5244] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  260.681334][ T5244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21
[  260.689737][ T5244] usb 2-1: SerialNumber: syz
[  260.877877][ T5244] usb 2-1: config 0 descriptor??
[  260.978847][ T5244] gspca_main: spca561-2.14.0 probing abcd:cdee
[  261.239166][ T5409] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  261.307212][ T5412] xt_l2tp: v2 doesn't support IP mode
[  261.548512][ T5244] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[  261.560499][ T5244] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  261.567795][ T5244] usb 2-1: MIDIStreaming interface descriptor not found
[  261.801565][ T5235] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  261.825194][ T5417] loop3: detected capacity change from 0 to 512
[  261.911258][ T5417] EXT4-fs (loop3): orphan cleanup on readonly fs
[  261.963210][ T5417] EXT4-fs error (device loop3): ext4_quota_enable:7053: inode #31: comm syz.3.15: iget: special inode unallocated
[  261.972456][ T5235] usb 1-1: Using ep0 maxpacket: 8
[  261.999543][ T5417] EXT4-fs error (device loop3): ext4_quota_enable:7056: comm syz.3.15: Bad quota inode: 31, type: 2
[  262.026736][ T5235] usb 1-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=c4.6d
[  262.036509][ T5235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.046867][ T5235] usb 1-1: Product: syz
[  262.052050][ T5235] usb 1-1: Manufacturer: syz
[  262.056943][ T5235] usb 1-1: SerialNumber: syz
[  262.078211][ T5235] usb 1-1: config 0 descriptor??
[  262.097425][ T5235] gspca_main: sonixj-2.14.0 probing 0c45:6100
[  262.105413][ T5244] usb 2-1: USB disconnect, device number 2
[  262.121081][ T5417] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-117, ino=31). Please run e2fsck to fix.
[  262.175090][ T5417] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  262.185953][ T5417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  262.324499][ T5383] udevd[5383]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  262.432820][ T5189] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  262.749005][ T5235] gspca_sonixj: reg_r err -71
[  262.755725][ T5235] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  262.819802][ T5235] usb 1-1: USB disconnect, device number 2
[  262.975624][ T5427] loop4: detected capacity change from 0 to 64
[  263.324491][ T5436] Trying to free block not in datazone
[  263.420954][ T5436] minix_free_block (loop4:21): bit already cleared
[  263.485902][ T5436] syz.4.17: attempt to access beyond end of device
[  263.485902][ T5436] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64
[  263.499569][ T5436] Buffer I/O error on dev loop4, logical block 512, async page read
[  263.508321][ T5436] syz.4.17: attempt to access beyond end of device
[  263.508321][ T5436] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64
[  263.522297][ T5436] Buffer I/O error on dev loop4, logical block 56576, async page read
[  263.615438][ T5435] loop0: detected capacity change from 0 to 1024
[  263.676032][ T5435] hfsplus: unable to parse mount options
[  263.778942][ T5442] loop1: detected capacity change from 0 to 64
[  263.839428][ T5435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'.
[  263.962757][ T5442] Trying to free block not in datazone
[  263.969300][ T5442] Trying to free block not in datazone
[  263.975586][ T5442] Trying to free block not in datazone
[  263.981441][ T5442] Trying to free block not in datazone
[  263.994928][ T5442] Trying to free block not in datazone
[  264.003112][ T5442] minix_free_block (loop1:6): bit already cleared
[  264.009840][ T5442] Trying to free block not in datazone
[  264.015738][ T5442] Trying to free block not in datazone
[  264.777174][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.787540][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.822168][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.830410][ T5449] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.839362][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.847347][ T5449] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.869225][ T5449] team0: Port device bridge0 added
[  264.996490][ T5456] bridge_slave_1: left allmulticast mode
[  265.002558][ T5456] bridge_slave_1: left promiscuous mode
[  265.022278][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.161764][ T5456] bridge_slave_0: left allmulticast mode
[  265.167757][ T5456] bridge_slave_0: left promiscuous mode
[  265.174890][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.474007][ T5457] loop1: detected capacity change from 0 to 1024
[  265.651239][ T5456] team0: Port device bridge0 removed
[  265.696456][ T5457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.715286][ T5185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.774623][ T5235] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  266.002501][ T5463] loop0: detected capacity change from 0 to 512
[  266.288528][ T5235] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  266.301654][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  266.313383][ T5235] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  266.327496][ T5235] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  266.338349][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.514033][ T5235] usb 5-1: config 0 descriptor??
[  266.579695][ T5235] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  266.660578][ T5471] FAULT_INJECTION: forcing a failure.
[  266.660578][ T5471] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  266.674390][ T5471] CPU: 1 UID: 0 PID: 5471 Comm: syz.2.29 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  266.684905][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  266.695263][ T5471] Call Trace:
[  266.698769][ T5471]  <TASK>
[  266.701930][ T5471]  dump_stack_lvl+0x216/0x2d0
[  266.706982][ T5471]  dump_stack+0x1e/0x30
[  266.711467][ T5471]  should_fail_ex+0x748/0x7f0
[  266.716508][ T5471]  should_fail+0x2a/0x40
[  266.721084][ T5471]  should_fail_usercopy+0x2e/0x40
[  266.726479][ T5471]  _copy_to_user+0x33/0x110
[  266.731360][ T5471]  simple_read_from_buffer+0x199/0x340
[  266.737175][ T5471]  proc_fail_nth_read+0x1e5/0x2c0
[  266.742564][ T5471]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  266.748454][ T5471]  vfs_read+0x29b/0xf60
[  266.752953][ T5471]  ? kmsan_get_metadata+0x13e/0x1c0
[  266.758554][ T5471]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  266.765303][ T5471]  ksys_read+0x20f/0x4c0
[  266.769909][ T5471]  __x64_sys_read+0x93/0xe0
[  266.774767][ T5471]  x64_sys_call+0x3055/0x3ba0
[  266.779811][ T5471]  do_syscall_64+0xcd/0x1e0
[  266.784658][ T5471]  ? clear_bhb_loop+0x25/0x80
[  266.789698][ T5471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.795929][ T5471] RIP: 0033:0x7f60f757c93c
[  266.800599][ T5471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  266.820506][ T5471] RSP: 002b:00007f60f8426030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  266.829248][ T5471] RAX: ffffffffffffffda RBX: 00007f60f7735f80 RCX: 00007f60f757c93c
[  266.837466][ T5471] RDX: 000000000000000f RSI: 00007f60f84260a0 RDI: 0000000000000003
[  266.845679][ T5471] RBP: 00007f60f8426090 R08: 0000000000000000 R09: 0000000000000000
[  266.853899][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.862114][ T5471] R13: 0000000000000000 R14: 00007f60f7735f80 R15: 00007fff26b9e458
[  266.870361][ T5471]  </TASK>
[  267.014690][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.131553][ T5463] EXT4-fs: Ignoring removed mblk_io_submit option
[  267.196745][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'.
[  267.201090][ T5463] EXT4-fs (loop0): bad s_want_extra_isize: 11962
[  267.253905][ T5478] loop2: detected capacity change from 0 to 16
[  267.284540][ T5478] erofs: (device loop2): mounted with root inode @ nid 36.
[  267.386973][ T5480] 9pnet_fd: Insufficient options for proto=fd
[  267.651193][ T5463] cgroup: Unknown subsys name 'cpuset'
[  268.070908][ T5489] loop0: detected capacity change from 0 to 128
[  268.166423][ T5489] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  268.464406][ T5493] loop3: detected capacity change from 0 to 1024
[  268.578933][ T5493] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  268.662322][ T5493] JBD2: no valid journal superblock found
[  268.668495][ T5493] EXT4-fs (loop3): Could not load journal inode
[  268.922030][ T5235] usb 5-1: USB disconnect, device number 2
[  269.171005][ T5499] warning: `syz.0.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  269.578011][ T5501] loop0: detected capacity change from 0 to 64
[  269.715713][ T5499] block device autoloading is deprecated and will be removed.
[  269.864953][ T5501] hfs: bad allocation block size 0
[  269.870637][ T5501] hfs: can't find a HFS filesystem on dev loop0
[  270.973129][ T5497] loop1: detected capacity change from 0 to 4096
[  271.604210][ T5513] vivid-001: disconnect
[  271.744719][ T5512] syzkaller0: entered allmulticast mode
[  271.746633][ T5504] loop2: detected capacity change from 0 to 32768
[  271.864892][ T5511] vivid-001: reconnect
[  272.326098][ T5521] loop3: detected capacity change from 0 to 1024
[  272.336180][ T5521] EXT4-fs: Ignoring removed orlov option
[  272.342735][ T5521] EXT4-fs: Ignoring removed bh option
[  272.349509][ T5504] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  272.349814][ T5504] (syz.2.40,5504,1):ocfs2_initialize_super:2283 ERROR: status = -12
[  272.370413][ T5504] (syz.2.40,5504,1):ocfs2_fill_super:1178 ERROR: status = -12
[  272.545894][ T5523] loop1: detected capacity change from 0 to 512
[  272.649606][ T5523] ext4: Unknown parameter 'noacl'
[  272.781672][ T5525] netlink: 3 bytes leftover after parsing attributes in process `syz.4.46'.
[  272.947515][ T5523] loop1: detected capacity change from 0 to 64
[  273.176257][ T5523] hfs: unable to parse mount options
[  273.266903][ T5521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.559442][ T5520] dccp_close: ABORT with 38 bytes unread
[  273.736741][ T5533] loop0: detected capacity change from 0 to 512
[  273.791477][ T5532] loop1: detected capacity change from 0 to 2048
[  273.848604][ T5533] EXT4-fs (loop0): Test dummy encryption mode enabled
[  273.855871][ T5533] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  273.869818][ T5533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  273.963131][ T5532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.981165][ T5533] EXT4-fs (loop0): 1 truncate cleaned up
[  273.989069][ T5533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.191785][ T5533] EXT4-fs error (device loop0): ext4_search_dir:1505: inode #2: block 13: comm syz.0.48: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0
[  274.224092][ T5185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.254482][ T5533] EXT4-fs (loop0): Remounting filesystem read-only
[  274.661760][ T5182] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.763113][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'.
[  274.778022][ T5546] loop4: detected capacity change from 0 to 64
[  274.968787][ T5546] hfs: bad allocation block size 0
[  274.974506][ T5546] hfs: can't find a HFS filesystem on dev loop4
[  275.076703][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.328817][ T5571] loop3: detected capacity change from 0 to 64
[  276.338538][ T5571] hfs: unable to parse mount options
[  277.575869][ T5587] loop2: detected capacity change from 0 to 1024
[  277.623189][ T5587] hfsplus: unable to parse mount options
[  279.113302][ T5613] FAULT_INJECTION: forcing a failure.
[  279.113302][ T5613] name failslab, interval 1, probability 0, space 0, times 1
[  279.126602][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz.4.70 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  279.137110][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  279.147455][ T5613] Call Trace:
[  279.150966][ T5613]  <TASK>
[  279.154118][ T5613]  dump_stack_lvl+0x216/0x2d0
[  279.159146][ T5613]  dump_stack+0x1e/0x30
[  279.163629][ T5613]  should_fail_ex+0x748/0x7f0
[  279.168703][ T5613]  should_failslab+0x17f/0x210
[  279.173872][ T5613]  __kmalloc_noprof+0x175/0xf30
[  279.179086][ T5613]  ? memcg_list_lru_alloc+0x3cb/0x15b0
[  279.184923][ T5613]  ? kmsan_get_metadata+0x13e/0x1c0
[  279.190504][ T5613]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  279.196716][ T5613]  memcg_list_lru_alloc+0x3cb/0x15b0
[  279.202358][ T5613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.208776][ T5613]  ? kmsan_get_metadata+0x13e/0x1c0
[  279.214357][ T5613]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  279.220575][ T5613]  __memcg_slab_post_alloc_hook+0x44d/0x1540
[  279.226887][ T5613]  ? kmsan_get_metadata+0x13e/0x1c0
[  279.232463][ T5613]  ? kmsan_get_metadata+0x13e/0x1c0
[  279.238056][ T5613]  kmem_cache_alloc_lru_noprof+0x6f3/0xb30
[  279.244218][ T5613]  ? __d_alloc+0x69/0x9c0
[  279.248880][ T5613]  __d_alloc+0x69/0x9c0
[  279.253348][ T5613]  ? kmsan_get_metadata+0x13e/0x1c0
[  279.258918][ T5613]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  279.265131][ T5613]  d_alloc_pseudo+0x3e/0x1a0
[  279.270065][ T5613]  alloc_file_pseudo+0xfb/0x340
[  279.275261][ T5613]  hugetlb_file_setup+0x656/0xa40
[  279.280640][ T5613]  __se_sys_memfd_create+0x93a/0x1260
[  279.286347][ T5613]  ? kmsan_get_metadata+0x13e/0x1c0
[  279.291945][ T5613]  __x64_sys_memfd_create+0x6c/0xa0
[  279.297492][ T5613]  x64_sys_call+0x31cf/0x3ba0
[  279.302556][ T5613]  do_syscall_64+0xcd/0x1e0
[  279.307409][ T5613]  ? clear_bhb_loop+0x25/0x80
[  279.312443][ T5613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.318688][ T5613] RIP: 0033:0x7fb406f7def9
[  279.323391][ T5613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  279.343353][ T5613] RSP: 002b:00007fb407cf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  279.352136][ T5613] RAX: ffffffffffffffda RBX: 00007fb407135f80 RCX: 00007fb406f7def9
[  279.360474][ T5613] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000020000380
[  279.368717][ T5613] RBP: 00007fb407cf9090 R08: 0000000000000000 R09: 0000000000000000
[  279.376963][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  279.385212][ T5613] R13: 0000000000000001 R14: 00007fb407135f80 R15: 00007fffaeeefce8
[  279.393496][ T5613]  </TASK>
[  279.722828][ T5609] loop3: detected capacity change from 0 to 2048
[  279.976752][ T5614] capability: warning: `syz.2.71' uses deprecated v2 capabilities in a way that may be insecure
[  280.049952][ T5614] loop2: detected capacity change from 0 to 512
[  280.134055][ T5611] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  280.503292][   T29] audit: type=1326 audit(1727056665.420:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5607 comm="syz.2.71" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60f757def9 code=0x0
[  280.672516][ T5616] loop2: detected capacity change from 0 to 512
[  280.674845][ T5616] EXT4-fs: Ignoring removed nomblk_io_submit option
[  280.840446][ T5616] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  280.901112][ T5609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.914161][ T5609] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.182212][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.204073][ T5616] EXT4-fs (loop2): 1 truncate cleaned up
[  281.212105][ T5616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.357802][ T5611] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.2.71: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  281.438034][ T5611] EXT4-fs (loop2): Remounting filesystem read-only
[  281.446925][ T5611] EXT4-fs warning (device loop2): ext4_rename_delete:3733: inode #2: comm syz.2.71: Deleting old file: nlink 4, error=-117
[  281.910317][ T5620] loop0: detected capacity change from 0 to 32768
[  282.071495][ T5620] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  282.235703][ T5195] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.366099][ T5638] fuse: Bad value for 'user_id'
[  283.371650][ T5638] fuse: Bad value for 'user_id'
[  283.853896][ T5182] ocfs2: Unmounting device (7,0) on (node local)
[  284.442376][ T5643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.78'.
[  284.863718][ T5634] loop1: detected capacity change from 0 to 32768
[  285.113126][ T5634] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  285.590786][ T1240] ieee802154 phy0 wpan0: encryption failed: -22
[  285.598628][ T1240] ieee802154 phy1 wpan1: encryption failed: -22
[  286.030834][   T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  286.270570][   T44] usb 5-1: Using ep0 maxpacket: 32
[  286.538054][ T5657] FAULT_INJECTION: forcing a failure.
[  286.538054][ T5657] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  286.551704][ T5657] CPU: 1 UID: 0 PID: 5657 Comm: syz.0.81 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  286.562255][ T5657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  286.572772][ T5657] Call Trace:
[  286.576404][ T5657]  <TASK>
[  286.579630][ T5657]  dump_stack_lvl+0x216/0x2d0
[  286.584670][ T5657]  dump_stack+0x1e/0x30
[  286.589153][ T5657]  should_fail_ex+0x748/0x7f0
[  286.594323][ T5657]  should_fail+0x2a/0x40
[  286.598926][ T5657]  should_fail_usercopy+0x2e/0x40
[  286.604385][ T5657]  _copy_from_user+0x33/0x160
[  286.609445][ T5657]  ___sys_sendmsg+0x120/0x3c0
[  286.614469][ T5657]  ? kmsan_get_metadata+0x13e/0x1c0
[  286.620115][ T5657]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  286.626331][ T5657]  ? __rcu_read_unlock+0x7b/0xe0
[  286.631648][ T5657]  ? __fget_files+0x4f5/0x5c0
[  286.636775][ T5657]  ? kmsan_get_metadata+0x13e/0x1c0
[  286.642379][ T5657]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  286.648611][ T5657]  __x64_sys_sendmsg+0x301/0x490
[  286.653963][ T5657]  ? kmsan_get_metadata+0x13e/0x1c0
[  286.659538][ T5657]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  286.665742][ T5657]  x64_sys_call+0x2da0/0x3ba0
[  286.668311][ T5190] ocfs2: Unmounting device (7,1) on (node local)
[  286.670684][ T5657]  do_syscall_64+0xcd/0x1e0
[  286.670844][ T5657]  ? clear_bhb_loop+0x25/0x80
[  286.671035][ T5657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.671227][ T5657] RIP: 0033:0x7fd692b7def9
[  286.671344][ T5657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.671483][ T5657] RSP: 002b:00007fd6925ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.671652][ T5657] RAX: ffffffffffffffda RBX: 00007fd692d35f80 RCX: 00007fd692b7def9
[  286.734899][ T5657] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  286.743146][ T5657] RBP: 00007fd6925ff090 R08: 0000000000000000 R09: 0000000000000000
[  286.751396][ T5657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.759642][ T5657] R13: 0000000000000000 R14: 00007fd692d35f80 R15: 00007fffae8d79c8
[  286.767922][ T5657]  </TASK>
[  286.794915][   T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.806408][   T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.816653][   T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  286.829941][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.891669][ T5664] loop2: detected capacity change from 0 to 128
[  286.989616][ T5659] bond1: entered promiscuous mode
[  286.995291][ T5659] bond1: entered allmulticast mode
[  287.001918][ T5659] 8021q: adding VLAN 0 to HW filter on device bond1
[  287.037025][   T44] usb 5-1: config 0 descriptor??
[  287.123069][   T44] hub 5-1:0.0: USB hub found
[  287.399079][   T44] hub 5-1:0.0: 1 port detected
[  288.131743][   T44] hub 5-1:0.0: activate --> -90
[  288.989925][ T5666] loop0: detected capacity change from 0 to 2048
[  289.011361][ T5674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'.
[  289.149037][ T5678] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  289.209301][ T5666] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=255
[  289.269292][ T5666] Remounting filesystem read-only
[  289.354007][ T5679] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=255
[  289.706249][   T44] usb 5-1-port1: over-current condition
[  289.713374][   T44] usb 5-1-port1: config error
[  289.844018][ T5682] fuse: Bad value for 'user_id'
[  289.849391][ T5682] fuse: Bad value for 'user_id'
[  290.012327][ T5649] loop4: detected capacity change from 0 to 256
[  290.259882][ T5687] FAULT_INJECTION: forcing a failure.
[  290.259882][ T5687] name failslab, interval 1, probability 0, space 0, times 0
[  290.277016][ T5687] CPU: 1 UID: 0 PID: 5687 Comm: syz.3.94 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  290.287542][ T5687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  290.297886][ T5687] Call Trace:
[  290.301516][ T5687]  <TASK>
[  290.304770][ T5687]  dump_stack_lvl+0x216/0x2d0
[  290.309882][ T5687]  dump_stack+0x1e/0x30
[  290.314357][ T5687]  should_fail_ex+0x748/0x7f0
[  290.319397][ T5687]  should_failslab+0x17f/0x210
[  290.324528][ T5687]  __kmalloc_noprof+0x175/0xf30
[  290.329746][ T5687]  ? tomoyo_encode+0x5f8/0xa40
[  290.334836][ T5687]  ? kmsan_get_metadata+0x13e/0x1c0
[  290.340436][ T5687]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  290.346648][ T5687]  tomoyo_encode+0x5f8/0xa40
[  290.351581][ T5687]  tomoyo_realpath_from_path+0x9dd/0xaa0
[  290.357566][ T5687]  tomoyo_path_number_perm+0x1d9/0x8f0
[  290.363386][ T5687]  ? kmsan_get_metadata+0x13e/0x1c0
[  290.368983][ T5687]  ? kmsan_get_metadata+0x13e/0x1c0
[  290.374565][ T5687]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  290.380803][ T5687]  tomoyo_file_ioctl+0x3f/0x50
[  290.385973][ T5687]  security_file_ioctl+0x145/0x590
[  290.391498][ T5687]  __se_sys_ioctl+0xd3/0x450
[  290.396435][ T5687]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  290.402653][ T5687]  __x64_sys_ioctl+0x96/0xe0
[  290.407592][ T5687]  x64_sys_call+0x18bf/0x3ba0
[  290.412651][ T5687]  do_syscall_64+0xcd/0x1e0
[  290.417479][ T5687]  ? clear_bhb_loop+0x25/0x80
[  290.422523][ T5687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.428793][ T5687] RIP: 0033:0x7f77c277def9
[  290.433508][ T5687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.453464][ T5687] RSP: 002b:00007f77c350c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  290.462249][ T5687] RAX: ffffffffffffffda RBX: 00007f77c2935f80 RCX: 00007f77c277def9
[  290.470606][ T5687] RDX: 00000000200005c0 RSI: 000000008008700b RDI: 0000000000000005
[  290.478970][ T5687] RBP: 00007f77c350c090 R08: 0000000000000000 R09: 0000000000000000
[  290.488469][ T5687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.496818][ T5687] R13: 0000000000000000 R14: 00007f77c2935f80 R15: 00007ffe2959ffe8
[  290.505111][ T5687]  </TASK>
[  290.523380][ T5687] ERROR: Out of memory at tomoyo_realpath_from_path.
[  290.542203][   T29] audit: type=1804 audit(1727056675.500:6): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.96" name="/newroot/18/bus/bus" dev="overlay" ino=130 res=1 errno=0
[  290.599707][ T5690] evm: overlay not supported
[  290.752561][   T44] usb 5-1-port1: cannot disable (err = -32)
[  290.763633][   T44] hub 5-1:0.0: hub_ext_port_status failed (err = -32)
[  290.770783][   T44] usb 5-1-port1: connect-debounce failed
[  290.803691][ T5690] Malformed UNC in devname
[  290.803691][ T5690] 
[  290.810945][ T5690] CIFS: VFS: Malformed UNC in devname
[  290.876924][ T5689] Invalid ELF header magic: != ELF
[  290.913029][   T44] usb 5-1-port1: cannot disable (err = -32)
[  291.505919][   T44] usb 5-1: USB disconnect, device number 3
[  292.767807][ T5700] loop3: detected capacity change from 0 to 4096
[  292.809822][ T5718] netlink: 'syz.0.104': attribute type 4 has an invalid length.
[  292.817947][ T5718] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.104'.
[  292.842543][ T5700] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  292.969694][ T5711] loop1: detected capacity change from 0 to 2048
[  293.059146][ T5711] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  293.153855][ T5711] syz.1.102: attempt to access beyond end of device
[  293.153855][ T5711] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  293.171912][ T5723] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.264061][ T5700] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  293.367034][ T5700] FAULT_INJECTION: forcing a failure.
[  293.367034][ T5700] name failslab, interval 1, probability 0, space 0, times 0
[  293.383705][ T5700] CPU: 1 UID: 0 PID: 5700 Comm: syz.3.99 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  293.394226][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  293.404561][ T5700] Call Trace:
[  293.408069][ T5700]  <TASK>
[  293.411234][ T5700]  dump_stack_lvl+0x216/0x2d0
[  293.416252][ T5700]  dump_stack+0x1e/0x30
[  293.420677][ T5700]  should_fail_ex+0x748/0x7f0
[  293.425678][ T5700]  should_failslab+0x17f/0x210
[  293.430796][ T5700]  __kmalloc_cache_noprof+0xbf/0xb00
[  293.436467][ T5700]  ? indx_read+0x290/0x17b0
[  293.441261][ T5700]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  293.447429][ T5700]  indx_read+0x290/0x17b0
[  293.452035][ T5700]  ? kmsan_get_metadata+0x13e/0x1c0
[  293.457558][ T5700]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  293.463719][ T5700]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  293.469876][ T5700]  ntfs_readdir+0xe07/0x1a10
[  293.474823][ T5700]  ? __pfx_ntfs_readdir+0x10/0x10
[  293.480174][ T5700]  iterate_dir+0x5b3/0x9e0
[  293.484877][ T5700]  ? mutex_lock+0x38/0x60
[  293.489540][ T5700]  __se_sys_getdents64+0x169/0x530
[  293.494997][ T5700]  ? __pfx_filldir64+0x10/0x10
[  293.500188][ T5700]  __x64_sys_getdents64+0x96/0xe0
[  293.505574][ T5700]  x64_sys_call+0x3430/0x3ba0
[  293.510599][ T5700]  do_syscall_64+0xcd/0x1e0
[  293.515398][ T5700]  ? clear_bhb_loop+0x25/0x80
[  293.520393][ T5700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.526599][ T5700] RIP: 0033:0x7f77c277def9
[  293.531256][ T5700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.551156][ T5700] RSP: 002b:00007f77c350c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  293.559888][ T5700] RAX: ffffffffffffffda RBX: 00007f77c2935f80 RCX: 00007f77c277def9
[  293.568108][ T5700] RDX: 0000000000001000 RSI: 0000000020000f80 RDI: 0000000000000007
[  293.576313][ T5700] RBP: 00007f77c350c090 R08: 0000000000000000 R09: 0000000000000000
[  293.584523][ T5700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.592731][ T5700] R13: 0000000000000000 R14: 00007f77c2935f80 R15: 00007ffe2959ffe8
[  293.600974][ T5700]  </TASK>
[  293.881614][ T5725] tmpfs: Unknown parameter 'nr_iq±'
[  294.282515][ T5728] fuse: Bad value for 'fd'
[  295.548992][ T5746] tap0: tun_chr_ioctl cmd 1074025677
[  295.555591][ T5746] tap0: linktype set to 825
[  295.595214][ T5744] openvswitch: netlink: Missing key (keys=400040, expected=200000)
[  296.188965][ T5753] loop1: detected capacity change from 0 to 512
[  296.288298][ T5755] loop0: detected capacity change from 0 to 512
[  296.347594][ T5755] EXT4-fs: Ignoring removed i_version option
[  296.354275][ T5755] EXT4-fs: Ignoring removed nobh option
[  296.401089][ T5755] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  296.416334][ T5757] loop3: detected capacity change from 0 to 512
[  296.556131][ T5753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.569454][ T5753] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.595880][ T5734] loop4: detected capacity change from 0 to 4096
[  296.634174][ T5755] EXT4-fs (loop0): 1 truncate cleaned up
[  296.674225][ T5753] FAULT_INJECTION: forcing a failure.
[  296.674225][ T5753] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  296.687946][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz.1.116 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  296.698536][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  296.708951][ T5753] Call Trace:
[  296.712440][ T5753]  <TASK>
[  296.715559][ T5753]  dump_stack_lvl+0x216/0x2d0
[  296.720526][ T5753]  dump_stack+0x1e/0x30
[  296.724941][ T5753]  should_fail_ex+0x748/0x7f0
[  296.729933][ T5753]  should_fail+0x2a/0x40
[  296.734565][ T5753]  should_fail_usercopy+0x2e/0x40
[  296.739896][ T5753]  _copy_from_user+0x33/0x160
[  296.744885][ T5753]  __sys_bpf+0x2dc/0xd90
[  296.749460][ T5753]  __x64_sys_bpf+0xa0/0xe0
[  296.754183][ T5753]  x64_sys_call+0x2cce/0x3ba0
[  296.759178][ T5753]  do_syscall_64+0xcd/0x1e0
[  296.763959][ T5753]  ? clear_bhb_loop+0x25/0x80
[  296.768944][ T5753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.775154][ T5753] RIP: 0033:0x7f11ce37def9
[  296.779816][ T5753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.799716][ T5753] RSP: 002b:00007f11cf0c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  296.808440][ T5753] RAX: ffffffffffffffda RBX: 00007f11ce535f80 RCX: 00007f11ce37def9
[  296.816667][ T5753] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000002
[  296.824875][ T5753] RBP: 00007f11cf0c0090 R08: 0000000000000000 R09: 0000000000000000
[  296.833096][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.841304][ T5753] R13: 0000000000000000 R14: 00007f11ce535f80 R15: 00007ffe7bab5a48
[  296.849538][ T5753]  </TASK>
[  296.861658][ T5734] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  296.963829][ T5755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.075035][ T5755] overlay: ./file1 is not a directory
[  297.327654][ T5766] FAULT_INJECTION: forcing a failure.
[  297.327654][ T5766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  297.341327][ T5766] CPU: 1 UID: 0 PID: 5766 Comm: syz.2.119 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  297.351935][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  297.362271][ T5766] Call Trace:
[  297.365778][ T5766]  <TASK>
[  297.368930][ T5766]  dump_stack_lvl+0x216/0x2d0
[  297.373949][ T5766]  dump_stack+0x1e/0x30
[  297.378417][ T5766]  should_fail_ex+0x748/0x7f0
[  297.383462][ T5766]  should_fail+0x2a/0x40
[  297.388008][ T5766]  should_fail_usercopy+0x2e/0x40
[  297.393356][ T5766]  _copy_to_user+0x33/0x110
[  297.398168][ T5766]  simple_read_from_buffer+0x199/0x340
[  297.403923][ T5766]  proc_fail_nth_read+0x1e5/0x2c0
[  297.409254][ T5766]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  297.415128][ T5766]  vfs_read+0x29b/0xf60
[  297.419579][ T5766]  ? kmsan_get_metadata+0x13e/0x1c0
[  297.425104][ T5766]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  297.431783][ T5766]  ksys_read+0x20f/0x4c0
[  297.436315][ T5766]  __x64_sys_read+0x93/0xe0
[  297.441112][ T5766]  x64_sys_call+0x3055/0x3ba0
[  297.446099][ T5766]  do_syscall_64+0xcd/0x1e0
[  297.450874][ T5766]  ? clear_bhb_loop+0x25/0x80
[  297.455848][ T5766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.462048][ T5766] RIP: 0033:0x7f60f757c93c
[  297.466725][ T5766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  297.486652][ T5766] RSP: 002b:00007f60f8426030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  297.495384][ T5766] RAX: ffffffffffffffda RBX: 00007f60f7735f80 RCX: 00007f60f757c93c
[  297.503610][ T5766] RDX: 000000000000000f RSI: 00007f60f84260a0 RDI: 0000000000000004
[  297.511814][ T5766] RBP: 00007f60f8426090 R08: 0000000000000000 R09: 0000000000000000
[  297.520018][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.528248][ T5766] R13: 0000000000000000 R14: 00007f60f7735f80 R15: 00007fff26b9e458
[  297.536491][ T5766]  </TASK>
[  297.567142][ T5734] ntfs3: loop4: Failed to read $UpCase (-4).
[  297.681776][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.716325][ T5182] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.787901][ T5768] loop3: detected capacity change from 0 to 512
[  297.966561][ T5770] loop0: detected capacity change from 0 to 512
[  298.088136][ T5773] fuse: Bad value for 'fd'
[  298.263963][ T5768] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.122: corrupted in-inode xattr: invalid ea_ino
[  298.310878][ T5770] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.121: corrupted in-inode xattr: invalid ea_ino
[  298.412690][ T5770] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.121: couldn't read orphan inode 15 (err -117)
[  298.441649][ T5768] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.122: couldn't read orphan inode 15 (err -117)
[  298.532141][ T5768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.553757][ T5770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.609735][ T5768] FAULT_INJECTION: forcing a failure.
[  298.609735][ T5768] name failslab, interval 1, probability 0, space 0, times 0
[  298.623226][ T5768] CPU: 0 UID: 0 PID: 5768 Comm: syz.3.122 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  298.633810][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  298.644102][ T5768] Call Trace:
[  298.647570][ T5768]  <TASK>
[  298.650688][ T5768]  dump_stack_lvl+0x216/0x2d0
[  298.655653][ T5768]  dump_stack+0x1e/0x30
[  298.660070][ T5768]  should_fail_ex+0x748/0x7f0
[  298.665076][ T5768]  should_failslab+0x17f/0x210
[  298.670197][ T5768]  kmem_cache_alloc_node_noprof+0xeb/0xb80
[  298.676324][ T5768]  ? __alloc_skb+0x1e9/0x7b0
[  298.681234][ T5768]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  298.687377][ T5768]  __alloc_skb+0x1e9/0x7b0
[  298.692110][ T5768]  netlink_alloc_large_skb+0x1b4/0x280
[  298.697914][ T5768]  netlink_sendmsg+0xa96/0x11e0
[  298.703069][ T5768]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.708644][ T5768]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.714219][ T5768]  __sock_sendmsg+0x30f/0x380
[  298.719202][ T5768]  ____sys_sendmsg+0x877/0xb60
[  298.724262][ T5768]  ___sys_sendmsg+0x28d/0x3c0
[  298.729205][ T5768]  ? kmsan_get_metadata+0x13e/0x1c0
[  298.734742][ T5768]  ? __rcu_read_unlock+0x7b/0xe0
[  298.739975][ T5768]  ? __fget_files+0x4f5/0x5c0
[  298.744972][ T5768]  ? kmsan_get_metadata+0x13e/0x1c0
[  298.750498][ T5768]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  298.756638][ T5768]  __x64_sys_sendmsg+0x301/0x490
[  298.761858][ T5768]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  298.768003][ T5768]  x64_sys_call+0x2da0/0x3ba0
[  298.773011][ T5768]  do_syscall_64+0xcd/0x1e0
[  298.777795][ T5768]  ? clear_bhb_loop+0x25/0x80
[  298.782777][ T5768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.788979][ T5768] RIP: 0033:0x7f77c277def9
[  298.793644][ T5768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.813547][ T5768] RSP: 002b:00007f77c350c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.822267][ T5768] RAX: ffffffffffffffda RBX: 00007f77c2935f80 RCX: 00007f77c277def9
[  298.830491][ T5768] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004
[  298.838693][ T5768] RBP: 00007f77c350c090 R08: 0000000000000000 R09: 0000000000000000
[  298.846904][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.855103][ T5768] R13: 0000000000000000 R14: 00007f77c2935f80 R15: 00007ffe2959ffe8
[  298.863346][ T5768]  </TASK>
[  299.296449][ T5185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.350823][ T5182] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.103727][ T5792] netlink: 'syz.0.127': attribute type 29 has an invalid length.
[  300.176686][ T5794] netlink: 'syz.0.127': attribute type 29 has an invalid length.
[  300.444170][ T5799] loop1: detected capacity change from 0 to 512
[  300.491199][ T5799] EXT4-fs: Ignoring removed i_version option
[  300.497551][ T5799] EXT4-fs: Ignoring removed nobh option
[  300.580982][ T5799] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  300.693869][ T5799] EXT4-fs (loop1): 1 truncate cleaned up
[  300.702986][ T5799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.956661][ T5810] loop0: detected capacity change from 0 to 128
[  301.019341][ T5799] overlay: ./file1 is not a directory
[  301.933914][ T5820] dccp_invalid_packet: P.Data Offset(80) too large
[  302.040908][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.460644][   T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  302.701553][   T44] usb 4-1: Using ep0 maxpacket: 16
[  302.776588][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  302.865936][   T44] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  302.875514][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.884020][   T44] usb 4-1: Product: syz
[  302.888460][   T44] usb 4-1: Manufacturer: syz
[  302.893439][   T44] usb 4-1: SerialNumber: syz
[  302.906879][   T44] usb 4-1: config 0 descriptor??
[  302.993104][ T5824] netlink: 'syz.0.138': attribute type 25 has an invalid length.
[  303.004416][ T5824] netlink: 'syz.0.138': attribute type 8 has an invalid length.
[  303.131852][ T5820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  303.139461][ T5820] IPv6: NLM_F_CREATE should be set when creating new route
[  303.299111][ T5838] loop3: detected capacity change from 0 to 128
[  303.329291][ T5838] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  303.369240][   T44] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  303.398652][ T5838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  303.706850][ T5820] netlink: 'syz.3.137': attribute type 27 has an invalid length.
[  304.370274][ T1582] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  304.447016][ T3635] usb 4-1: Failed to submit usb control message: -110
[  304.454357][ T3635] usb 4-1: unable to send the bmi data to the device: -110
[  304.462120][ T3635] usb 4-1: unable to get target info from device
[  304.468792][ T3635] usb 4-1: could not get target info (-110)
[  304.475190][ T3635] usb 4-1: could not probe fw (-110)
[  304.611528][ T1582] usb 1-1: Using ep0 maxpacket: 16
[  304.650785][ T1582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.662394][ T1582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.672691][ T1582] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  304.682285][ T1582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.787708][ T5843] loop4: detected capacity change from 0 to 1024
[  304.846748][ T1582] usb 1-1: config 0 descriptor??
[  304.887839][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.898114][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.237078][ T5843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.338032][ T1582] gembird 0003:11FF:3331.0001: unknown main item tag 0xd
[  305.347322][ T1582] gembird 0003:11FF:3331.0001: unexpected long global item
[  305.359601][   T29] audit: type=1400 audit(1727056690.360:7): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=5850 comm="syz.2.144"
[  305.473219][ T1582] gembird 0003:11FF:3331.0001: probe with driver gembird failed with error -22
[  305.493920][ T5854] loop0: detected capacity change from 0 to 1024
[  305.533255][ T5854] EXT4-fs: Ignoring removed nomblk_io_submit option
[  305.572226][ T5854] EXT4-fs (loop0): Test dummy encryption mode enabled
[  305.628416][ T5837] coredump: 84(syz.1.136): interrupted: fatal signal pending
[  305.636694][ T5837] coredump: 84(syz.1.136): Error writing out the process memory
[  305.645378][ T5837] coredump: 84(syz.1.136): written to core: VMAs: 36, size 99647488; core: 3847222 bytes, pos 4415488
[  305.826200][ T5854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.986235][ T5193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.018154][ T5857] loop2: detected capacity change from 0 to 128
[  306.132937][ T5857] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  306.178391][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.272039][ T5820] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.760891][ T5848] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  307.014453][    T8] usb 1-1: USB disconnect, device number 3
[  307.168210][ T5820] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.178516][ T5820] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.187981][ T5820] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.200677][ T5820] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.562151][   T44] usb 4-1: USB disconnect, device number 2
[  307.712362][ T5182] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.089584][ T5874] FAULT_INJECTION: forcing a failure.
[  308.089584][ T5874] name failslab, interval 1, probability 0, space 0, times 0
[  308.103844][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: syz.1.148 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  308.114467][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  308.124799][ T5874] Call Trace:
[  308.128317][ T5874]  <TASK>
[  308.131546][ T5874]  dump_stack_lvl+0x216/0x2d0
[  308.136551][ T5874]  dump_stack+0x1e/0x30
[  308.141016][ T5874]  should_fail_ex+0x748/0x7f0
[  308.146070][ T5874]  should_failslab+0x17f/0x210
[  308.151234][ T5874]  kmem_cache_alloc_noprof+0xe2/0xb20
[  308.156969][ T5874]  ? io_submit_one+0x1c1/0x3280
[  308.162225][ T5874]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  308.168436][ T5874]  io_submit_one+0x1c1/0x3280
[  308.173491][ T5874]  ? kmsan_get_metadata+0x13e/0x1c0
[  308.179080][ T5874]  ? kmsan_get_metadata+0x13e/0x1c0
[  308.184659][ T5874]  ? kmsan_get_metadata+0x13e/0x1c0
[  308.190226][ T5874]  ? kmsan_report+0x261/0x2d0
[  308.195267][ T5874]  __se_sys_io_submit+0x275/0x700
[  308.200673][ T5874]  __x64_sys_io_submit+0x96/0xe0
[  308.205972][ T5874]  x64_sys_call+0x2370/0x3ba0
[  308.211017][ T5874]  do_syscall_64+0xcd/0x1e0
[  308.215846][ T5874]  ? clear_bhb_loop+0x25/0x80
[  308.220875][ T5874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.227110][ T5874] RIP: 0033:0x7f11ce37def9
[  308.231839][ T5874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.251792][ T5874] RSP: 002b:00007f11cf0c0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  308.260564][ T5874] RAX: ffffffffffffffda RBX: 00007f11ce535f80 RCX: 00007f11ce37def9
[  308.268835][ T5874] RDX: 0000000020000040 RSI: 0000000000000001 RDI: 00007f11cf08f000
[  308.277097][ T5874] RBP: 00007f11cf0c0090 R08: 0000000000000000 R09: 0000000000000000
[  308.285372][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.293639][ T5874] R13: 0000000000000000 R14: 00007f11ce535f80 R15: 00007ffe7bab5a48
[  308.301921][ T5874]  </TASK>
[  309.417174][ T5884] loop0: detected capacity change from 0 to 512
[  309.471996][ T5887] netlink: 76 bytes leftover after parsing attributes in process `syz.2.155'.
[  309.695150][ T5891] loop2: detected capacity change from 0 to 128
[  309.731009][ T5891] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  309.802196][ T5884] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.154: corrupted in-inode xattr: invalid ea_ino
[  310.225157][ T5884] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.154: couldn't read orphan inode 15 (err -117)
[  310.314798][ T5884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.525401][ T5884] netlink: 72 bytes leftover after parsing attributes in process `syz.0.154'.
[  310.584173][ T5895] loop3: detected capacity change from 0 to 1024
[  310.714858][ T5895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.759846][ T5182] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.133726][ T5185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.891556][ T5916] loop2: detected capacity change from 0 to 256
[  311.900778][ T5916] exfat: Deprecated parameter 'utf8'
[  311.906561][ T5916] exfat: Deprecated parameter 'namecase'
[  311.916240][ T5916] exfat: Deprecated parameter 'namecase'
[  311.923014][ T5916] exfat: Deprecated parameter 'utf8'
[  312.089715][ T5916] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d)
[  312.221357][ T5916] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  312.314736][ T5920] loop4: detected capacity change from 0 to 16
[  312.568902][ T5920] erofs: (device loop4): erofs_read_inode: unsupported chunk format 400 of nid 36
[  312.593274][ T5924] loop1: detected capacity change from 0 to 1024
[  312.791696][ T5925] loop0: detected capacity change from 0 to 512
[  312.799678][ T5924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.167'.
[  312.869762][ T5925] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  313.039407][ T5925] EXT4-fs (loop0): 1 truncate cleaned up
[  313.047850][ T5925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.263822][ T5922] fscrypt (loop0, inode 18): Unsupported encryption flags (0xc5)
[  313.360730][ T3635] hfsplus: b-tree write err: -5, ino 4
[  313.702625][ T5931] netlink: 'syz.2.169': attribute type 10 has an invalid length.
[  313.805392][ T5931] team0: Device hsr_slave_1 failed to register rx_handler
[  313.843562][ T5182] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.141048][ T5934] loop4: detected capacity change from 0 to 128
[  314.313106][ T5935] loop1: detected capacity change from 0 to 512
[  314.342980][ T5934] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  314.442673][ T5935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.456635][ T5935] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.787023][ T5935] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2976: inode #15: comm syz.1.171: corrupted xattr block 33: invalid ea_ino
[  314.970728][ T5935] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117)
[  315.064379][ T5927] loop3: detected capacity change from 0 to 32768
[  315.175691][ T5927] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  316.190464][ T5941] loop0: detected capacity change from 0 to 1024
[  316.652394][ T5189] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  316.662357][ T5189] Bluetooth: hci0: Injecting HCI hardware error event
[  316.679868][ T5194] Bluetooth: hci0: hardware error 0x00
[  316.855912][ T5941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.081391][ T5185] ocfs2: Unmounting device (7,3) on (node local)
[  317.304359][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.683438][ T5572] coredump: 37(syz.4.57): written to core: VMAs: 34, size 99516416; core: 62137286 bytes, pos 99524608
[  317.942290][ T5182] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.736339][ T5238] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  318.832156][ T5194] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  318.951258][ T5238] usb 4-1: Using ep0 maxpacket: 16
[  319.116563][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  319.128440][ T5238] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  319.138106][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.410379][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.181'.
[  319.425334][ T5238] usb 4-1: config 0 descriptor??
[  319.865580][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.882409][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.904408][ T5235] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  319.971332][ T5238] hid (null): nested delimiters
[  319.976498][ T5238] hid (null): nested delimiters
[  319.982341][ T5238] hid (null): nested delimiters
[  319.988229][ T5238] hid (null): bogus close delimiter
[  319.995767][ T5238] hid (null): unknown global tag 0x83
[  320.001913][ T5238] hid (null): unknown global tag 0xc
[  320.114151][ T5238] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1
[  320.122530][ T5238] hid-generic 0003:0158:0100.0002: unexpected long global item
[  320.140030][ T5235] usb 5-1: Using ep0 maxpacket: 16
[  320.160474][ T5235] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  320.172482][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  320.206089][ T5238] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22
[  320.250792][ T5978] loop0: detected capacity change from 0 to 1024
[  320.330988][ T5235] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  320.340685][ T5235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.349007][ T5235] usb 5-1: Product: syz
[  320.353721][ T5235] usb 5-1: Manufacturer: syz
[  320.358618][ T5235] usb 5-1: SerialNumber: syz
[  320.437443][ T5980] Bluetooth: MGMT ver 1.23
[  320.463280][ T5235] usb 5-1: config 0 descriptor??
[  320.500981][ T5980] input: syz0 as /devices/virtual/input/input6
[  320.504804][ T5235] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  320.517210][ T5235] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  320.933704][    T8] usb 4-1: USB disconnect, device number 3
[  321.486370][ T5992] loop1: detected capacity change from 0 to 128
[  321.506178][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.531586][ T5235] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  321.607684][ T5992] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  321.672830][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.745363][ T5996] IPv6: NLM_F_CREATE should be specified when creating new route
[  321.863891][ T5991] loop2: detected capacity change from 0 to 1024
[  322.035470][ T5235] em28xx 5-1:0.0: Config register raw data: 0x41
[  322.282304][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.352275][ T6003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.188'.
[  322.393386][ T5235] usb 5-1: USB disconnect, device number 4
[  322.401571][ T5235] em28xx 5-1:0.0: Disconnecting em28xx
[  322.499819][ T5235] em28xx 5-1:0.0: Freeing device
[  322.946742][ T6011] loop1: detected capacity change from 0 to 256
[  322.950645][ T5238] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  323.068755][ T5195] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.088102][ T6011] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  323.101923][ T6011] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  323.133501][ T5238] usb 1-1: device descriptor read/64, error -71
[  323.294528][ T6011] trusted_key: syz.1.190 sent an empty control message without MSG_MORE.
[  323.403357][ T5238] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  323.449878][   T29] audit: type=1800 audit(1727056708.410:8): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.190" name="bus" dev="loop1" ino=1048599 res=0 errno=0
[  323.540785][ T5238] usb 1-1: device descriptor read/64, error -71
[  323.652676][ T5238] usb usb1-port1: attempt power cycle
[  324.110842][ T5238] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  324.159881][ T5238] usb 1-1: device descriptor read/8, error -71
[  324.440509][ T5238] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  324.750664][ T5238] usb 1-1: device descriptor read/8, error -71
[  324.830679][ T6028] loop1: detected capacity change from 0 to 1024
[  324.842234][   T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  324.881333][ T5238] usb usb1-port1: unable to enumerate USB device
[  325.005133][ T6028] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  325.413083][   T44] usb 5-1: Using ep0 maxpacket: 32
[  325.461926][   T44] usb 5-1: config 0 has an invalid interface number: 9 but max is 0
[  325.470778][   T44] usb 5-1: config 0 has no interface number 0
[  325.542420][   T44] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  325.552593][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.561231][   T44] usb 5-1: Product: syz
[  325.565669][   T44] usb 5-1: Manufacturer: syz
[  325.570671][   T44] usb 5-1: SerialNumber: syz
[  325.616754][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'.
[  325.643040][ T5244] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  325.673401][   T44] usb 5-1: config 0 descriptor??
[  325.718714][   T44] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  325.859857][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.871877][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.882453][ T5244] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  325.892215][ T5244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.052019][ T6042] loop2: detected capacity change from 0 to 1024
[  326.055850][ T5244] usb 2-1: config 0 descriptor??
[  326.070234][    C1] hrtimer: interrupt took 194027 ns
[  326.295292][   T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  326.516507][   T25] usb 4-1: config 0 has no interfaces?
[  326.576079][   T25] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  326.586521][   T25] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  326.596346][   T25] usb 4-1: Manufacturer: syz
[  326.602139][   T25] usb 4-1: SerialNumber: syz
[  326.624534][   T25] usb 4-1: config 0 descriptor??
[  326.669994][ T5244] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0
[  326.723410][ T6044] loop0: detected capacity change from 0 to 128
[  326.745001][ T6044] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  326.856421][ T5244] usb 2-1: USB disconnect, device number 3
[  327.360261][   T25] usb 4-1: USB disconnect, device number 4
[  327.423543][   T44] gspca_topro: reg_r err -71
[  327.428431][   T44] gspca_topro: Sensor soi763a
[  327.498857][   T44] usb 5-1: USB disconnect, device number 5
[  327.920471][ T6049] loop0: detected capacity change from 0 to 1024
[  328.133854][ T5195] hfsplus: bad catalog entry type
[  328.186327][ T5195] =====================================================
[  328.193948][ T5195] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x821/0x2350
[  328.201989][ T5195]  hfsplus_uni2asc+0x821/0x2350
[  328.207106][ T5195]  hfsplus_readdir+0xbd7/0x18d0
[  328.212470][ T5195]  iterate_dir+0x5b3/0x9e0
[  328.217122][ T5195]  __se_sys_getdents64+0x169/0x530
[  328.222692][ T5195]  __x64_sys_getdents64+0x96/0xe0
[  328.227959][ T5195]  x64_sys_call+0x3430/0x3ba0
[  328.233161][ T5195]  do_syscall_64+0xcd/0x1e0
[  328.237873][ T5195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.244652][ T5195] 
[  328.247112][ T5195] Uninit was created at:
[  328.252002][ T5195]  __kmalloc_noprof+0x661/0xf30
[  328.257116][ T5195]  hfsplus_find_init+0x95/0x1d0
[  328.262554][ T5195]  hfsplus_readdir+0x1da/0x18d0
[  328.267637][ T5195]  iterate_dir+0x5b3/0x9e0
[  328.272528][ T5195]  __se_sys_getdents64+0x169/0x530
[  328.277884][ T5195]  __x64_sys_getdents64+0x96/0xe0
[  328.284783][ T5195]  x64_sys_call+0x3430/0x3ba0
[  328.289723][ T5195]  do_syscall_64+0xcd/0x1e0
[  328.294781][ T5195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.301073][ T5195] 
[  328.303530][ T5195] CPU: 0 UID: 0 PID: 5195 Comm: syz-executor Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  328.314541][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  328.325063][ T5195] =====================================================
[  328.332429][ T5195] Disabling lock debugging due to kernel taint
[  328.338743][ T5195] Kernel panic - not syncing: kmsan.panic set ...
[  328.345346][ T5195] CPU: 0 UID: 0 PID: 5195 Comm: syz-executor Tainted: G    B              6.11.0-syzkaller-08829-gaf9c191ac2a0 #0
[  328.357595][ T5195] Tainted: [B]=BAD_PAGE
[  328.361895][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  328.372132][ T5195] Call Trace:
[  328.375538][ T5195]  <TASK>
[  328.378589][ T5195]  dump_stack_lvl+0x216/0x2d0
[  328.383459][ T5195]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  328.389520][ T5195]  dump_stack+0x1e/0x30
[  328.393852][ T5195]  panic+0x4e2/0xcf0
[  328.397981][ T5195]  ? kmsan_get_metadata+0xc1/0x1c0
[  328.403363][ T5195]  kmsan_report+0x2c7/0x2d0
[  328.408096][ T5195]  ? kmsan_get_metadata+0x13e/0x1c0
[  328.413546][ T5195]  ? kmsan_get_metadata+0x13e/0x1c0
[  328.418981][ T5195]  ? __msan_warning+0x95/0x120
[  328.423967][ T5195]  ? hfsplus_uni2asc+0x821/0x2350
[  328.429216][ T5195]  ? hfsplus_readdir+0xbd7/0x18d0
[  328.434440][ T5195]  ? iterate_dir+0x5b3/0x9e0
[  328.439310][ T5195]  ? __se_sys_getdents64+0x169/0x530
[  328.444837][ T5195]  ? __x64_sys_getdents64+0x96/0xe0
[  328.450246][ T5195]  ? x64_sys_call+0x3430/0x3ba0
[  328.455317][ T5195]  ? do_syscall_64+0xcd/0x1e0
[  328.460188][ T5195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.466484][ T5195]  ? filter_irq_stacks+0x60/0x1a0
[  328.471748][ T5195]  ? kmsan_get_metadata+0x13e/0x1c0
[  328.477189][ T5195]  ? kmsan_get_metadata+0x13e/0x1c0
[  328.482621][ T5195]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  328.488674][ T5195]  ? hfsplus_bnode_read_u16+0x3e/0x2b0
[  328.494344][ T5195]  ? filter_irq_stacks+0x60/0x1a0
[  328.499634][ T5195]  ? kmsan_get_metadata+0x13e/0x1c0
[  328.505105][ T5195]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  328.511199][ T5195]  ? utf32_to_utf8+0x4b1/0x4e0
[  328.516216][ T5195]  ? kmsan_get_metadata+0x13e/0x1c0
[  328.521651][ T5195]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  328.527702][ T5195]  __msan_warning+0x95/0x120
[  328.532517][ T5195]  hfsplus_uni2asc+0x821/0x2350
[  328.537584][ T5195]  ? __msan_memcpy+0x108/0x1c0
[  328.542566][ T5195]  ? kmsan_get_metadata+0x13e/0x1c0
[  328.548015][ T5195]  ? __msan_memcpy+0x108/0x1c0
[  328.553012][ T5195]  hfsplus_readdir+0xbd7/0x18d0
[  328.558107][ T5195]  ? __rcu_read_unlock+0x7b/0xe0
[  328.563250][ T5195]  ? aa_file_perm+0x3de/0x1780
[  328.568199][ T5195]  ? kmsan_get_metadata+0x13e/0x1c0
[  328.573636][ T5195]  ? kmsan_get_metadata+0x13e/0x1c0
[  328.579070][ T5195]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  328.585630][ T5195]  ? kmsan_get_metadata+0x13e/0x1c0
[  328.591848][ T5195]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  328.597933][ T5195]  ? __pfx_hfsplus_readdir+0x10/0x10
[  328.603417][ T5195]  iterate_dir+0x5b3/0x9e0
[  328.608035][ T5195]  ? __pfx_hfsplus_readdir+0x10/0x10
[  328.613538][ T5195]  ? mutex_lock+0x38/0x60
[  328.618106][ T5195]  __se_sys_getdents64+0x169/0x530
[  328.623427][ T5195]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  328.629991][ T5195]  ? __pfx_filldir64+0x10/0x10
[  328.634980][ T5195]  __x64_sys_getdents64+0x96/0xe0
[  328.640223][ T5195]  x64_sys_call+0x3430/0x3ba0
[  328.645121][ T5195]  do_syscall_64+0xcd/0x1e0
[  328.649820][ T5195]  ? clear_bhb_loop+0x25/0x80
[  328.654715][ T5195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.660830][ T5195] RIP: 0033:0x7f60f75b0093
[  328.665400][ T5195] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  328.685240][ T5195] RSP: 002b:00007fff26b9c5c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  328.693858][ T5195] RAX: ffffffffffffffda RBX: 000055557cb1e600 RCX: 00007f60f75b0093
[  328.702004][ T5195] RDX: 0000000000008000 RSI: 000055557cb1e600 RDI: 0000000000000005
[  328.710157][ T5195] RBP: 000055557cb1e5d4 R08: 0000000000000000 R09: 0000000000000000
[  328.718294][ T5195] R10: 0000000000000100 R11: 0000000000000293 R12: ffffffffffffffa8
[  328.726428][ T5195] R13: 0000000000000016 R14: 000055557cb1e5d0 R15: 00007fff26b9e870
[  328.734586][ T5195]  </TASK>
[  328.737992][ T5195] Kernel Offset: disabled
[  328.742415][ T5195] Rebooting in 86400 seconds..