last executing test programs:

13m15.347965901s ago: executing program 1 (id=264):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)

13m14.487129542s ago: executing program 1 (id=267):
syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1002)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000100)=0x13302a6, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x804)
r2 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182)
ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x16)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/4077, 0xfed)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae0210000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000b42104802800018008000100666962001c000280080001400000001508000240000000030800034000000032882101800a0001006d6174636800000078210280090001"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800)
keyctl$join(0x1, 0x0)

13m9.463783319s ago: executing program 1 (id=276):
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000"], 0x44}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100))

13m2.711393793s ago: executing program 1 (id=289):
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x4008000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

13m1.871354487s ago: executing program 1 (id=292):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000380)={[{0x0, 0x6, 0x7, 0x9, 0x7, 0x8, 0x4, 0xfb, 0xf4, 0xff, 0x0, 0x36, 0xfffffffffffffffc}, {0x31, 0x4, 0x7, 0x5, 0x6, 0xb, 0x4, 0x6, 0x9, 0x4, 0xe3, 0x0, 0xfffffffffffffffa}, {0x1, 0x8, 0x5a, 0x0, 0x2, 0x3, 0xaf, 0x7, 0xff, 0x6, 0x2, 0x5, 0xe}], 0x1ff})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13m0.176180775s ago: executing program 1 (id=295):
socket$nl_generic(0x10, 0x3, 0x10)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x202)
listen(r0, 0x40000000)

12m44.618591181s ago: executing program 32 (id=295):
socket$nl_generic(0x10, 0x3, 0x10)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x202)
listen(r0, 0x40000000)

12m29.827874083s ago: executing program 4 (id=350):
pipe2$watch_queue(0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_io_uring_setup(0x4ee6, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x80, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r4 = fcntl$dupfd(r3, 0x0, r3)
write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d)

12m29.138901592s ago: executing program 4 (id=351):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3)

12m28.347050933s ago: executing program 4 (id=352):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0x0, &(0x7f00000002c0))
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80064d12, 0x0)

12m26.836255535s ago: executing program 4 (id=356):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0xb95a, &(0x7f0000017a80)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x185040, 0x0, 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80)
linkat(r3, &(0x7f0000000180)='./file1\x00', r3, &(0x7f00000001c0)='./file3\x00', 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x243082, 0x0, 0x1, 0x0, &(0x7f0000000000))

12m23.997388488s ago: executing program 4 (id=361):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3)

12m22.673732586s ago: executing program 4 (id=365):
timer_create(0x2, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0)

12m7.227194565s ago: executing program 33 (id=365):
timer_create(0x2, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0)

5m19.479998709s ago: executing program 2 (id=1968):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002340)=ANY=[], 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x0, 0x4}}, 0x50)
read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020)
r3 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000007c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r3, 0x4d10, 0x2, 0x2, 0x0, 0x0)

5m19.18869369s ago: executing program 2 (id=1972):
fsopen(&(0x7f0000000100)='proc\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000002500)={[{@errors_remount}, {@noload}, {@init_itable}, {@noblock_validity}, {@dax_never}, {@discard}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@norecovery}, {@grpjquota}, {@lazytime}], [{@euid_lt}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@euid_lt}, {@subj_user={'subj_user', 0x3d, '\xee^%]~-!'}}, {@seclabel}], 0x3d}, 0x66, 0x534, &(0x7f0000000980)="$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")
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x80}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)

5m18.088143575s ago: executing program 2 (id=1980):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c0400001000010400000000000000000048", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0)

5m16.49145091s ago: executing program 2 (id=1985):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
syz_open_dev$vim2m(0x0, 0x8, 0x2)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m15.498214415s ago: executing program 2 (id=1990):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file1\x00')

5m15.355803156s ago: executing program 2 (id=1993):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), 0x0}, 0x20)
quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0)

5m0.250756631s ago: executing program 34 (id=1993):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), 0x0}, 0x20)
quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0)

1m9.636090861s ago: executing program 0 (id=2994):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0})
write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2)

1m9.482898004s ago: executing program 0 (id=2996):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0)
openat$userio(0xffffffffffffff9c, 0x0, 0x20280, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
unshare(0x50040080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x20}}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000170900010073797a30000000000900020073797a32"], 0x590}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})

1m6.673459673s ago: executing program 0 (id=3008):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000008000480040003"], 0x40}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537"], 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m6.520568349s ago: executing program 6 (id=3010):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300))
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4})
mq_getsetattr(r1, &(0x7f0000000700)={0x800, 0x10, 0x9}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mq_timedreceive(r1, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0)
mq_timedreceive(r1, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0)

1m6.463950097s ago: executing program 0 (id=3011):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', <r0=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0xc, 0xfffffffe, 0x0, 0x1, 0x1, '\x00', r0, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r1)
mount$bpf(0x0, 0x0, 0x0, 0x80000, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001)

1m6.078357733s ago: executing program 0 (id=3014):
socket(0x1d, 0x2, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xc8}}, 0x0)
dup(0xffffffffffffffff)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, r6}, 0x50)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r7, 0x401870cb, &(0x7f0000000040))
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x40020000)

1m5.75586519s ago: executing program 0 (id=3015):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000005900330080200900080211000001080211000000"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

1m5.241479109s ago: executing program 35 (id=3015):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000005900330080200900080211000001080211000000"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

1m5.2260322s ago: executing program 6 (id=3019):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2582c5, 0x0)
write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES16, @ANYRES32=r1], 0xfffffeb7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffe91, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080), 0x4804, &(0x7f0000000700)=ANY=[@ANYBLOB="71756f7494966c0a5261b3c6c83993b467adbb16747048fb7d621db92ee73a340701face59a6b6990a6f967bcd65faa2abe9a8a3397dd9dcbce226fe05adf46c073a953d41e827e6608dd9428668b6b8a2682392af3e5092547e1f5163956734b60fddd8340e697f66d99864e525c5869d4d71ef154c664d5eae5b0d7633e950cc07c246199c8957053d96d6d11b90e0fe8fb5583f4afdc28059ec658cc1d20cdf035e5648fc2ddda1344715bebb21eadf1994f304d392a211440352170849bca8ef7bd63500"/211])
r5 = openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd)
quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000701, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000030700002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
umount2(&(0x7f0000000100)='./bus\x00', 0x8)
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@uuid_null}]})

1m4.147901644s ago: executing program 6 (id=3021):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x50, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
writev(r0, &(0x7f00000003c0), 0x100000000000022d)

1m3.944041314s ago: executing program 6 (id=3023):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', <r0=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0xc, 0xfffffffe, 0x0, 0x1, 0x1, '\x00', r0, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r1)
mount$bpf(0x0, 0x0, 0x0, 0x80000, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001)

1m3.18736315s ago: executing program 6 (id=3025):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x3, 0x560c, {0x802, 0x5d5}, {0xfff8, 0x6}, @cond=[{0x7060, 0x6, 0x9, 0x4, 0x54f9, 0xc51}, {0x2, 0x8000, 0x998b, 0x80, 0x5, 0xa89}]})

1m1.780030385s ago: executing program 6 (id=3033):
gettid()
madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000100)='./file1\x00', 0x1000, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x40080)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r2, 0x0, 0xfffffffffffffe33, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x800000, @empty, 0x9}, 0x1c)
pipe(&(0x7f0000000000))
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500))
pipe2(&(0x7f00000000c0), 0x0)
recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000000700)=""/205, 0xcd}], 0x4, &(0x7f0000000600)=""/103, 0x67}, 0x2}], 0x2, 0x2000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendto$packet(r1, &(0x7f0000000400)="205ae946", 0x4, 0x20008801, &(0x7f00000002c0)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)

1m1.327757049s ago: executing program 36 (id=3033):
gettid()
madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000100)='./file1\x00', 0x1000, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x40080)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r2, 0x0, 0xfffffffffffffe33, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x800000, @empty, 0x9}, 0x1c)
pipe(&(0x7f0000000000))
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500))
pipe2(&(0x7f00000000c0), 0x0)
recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000000700)=""/205, 0xcd}], 0x4, &(0x7f0000000600)=""/103, 0x67}, 0x2}], 0x2, 0x2000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendto$packet(r1, &(0x7f0000000400)="205ae946", 0x4, 0x20008801, &(0x7f00000002c0)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)

26.213320251s ago: executing program 3 (id=3110):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r1)
write$dsp(r0, 0x0, 0x0)

24.379867388s ago: executing program 3 (id=3111):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0))
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x5, 0x236, &(0x7f00000027c0)="$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")
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300))

22.459907315s ago: executing program 9 (id=3034):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', <r0=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0xc, 0xfffffffe, 0x0, 0x1, 0x1, '\x00', r0, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r1)
mount$bpf(0x0, 0x0, 0x0, 0x80000, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001)

22.308662505s ago: executing program 3 (id=3115):
dup(0xffffffffffffffff)
syz_io_uring_setup(0x49f, &(0x7f0000000180)={0x0, 0xe7a8, 0x400, 0x8000, 0x40024e}, &(0x7f0000000340)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r0, r1, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@delchain={0x154, 0x65, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xf}, {0xa, 0xe}, {0xc, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_POLICE={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @filter_kind_options=@f_basic={{0xa}, {0x104, 0x2, [@TCA_BASIC_ACT={0xfc, 0x3, [@m_bpf={0x64, 0x10, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS={0x4}]}, {0x6, 0x6, "5ec6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x5c, 0x1a, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x1f, 0x6, "8881a5f790c58e192d65ad9037d39ec38e8e81a0b38aa406044196"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x38, 0x13, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}, @TCA_BASIC_ACT={0x4}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40804}, 0x24000805)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)

22.20654657s ago: executing program 9 (id=3117):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000008000480040003"], 0x40}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537"], 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

21.668815913s ago: executing program 9 (id=3118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd700000000000"], 0x20}}, 0x84)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

21.135793482s ago: executing program 37 (id=3118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd700000000000"], 0x20}}, 0x84)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

19.346624396s ago: executing program 3 (id=3127):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', <r0=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0xc, 0xfffffffe, 0x0, 0x1, 0x1, '\x00', r0, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r1)
mount$bpf(0x0, 0x0, 0x0, 0x80000, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001)

18.850429246s ago: executing program 3 (id=3128):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000008000480040003"], 0x40}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537"], 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

17.007406052s ago: executing program 3 (id=3136):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = inotify_init()
close(0xffffffffffffffff)
inotify_add_watch(r3, 0x0, 0x8)
truncate(0x0, 0xf0ffff)
utimes(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000002480))
rmdir(&(0x7f0000000280)='./file2\x00')
write$FUSE_DIRENT(r1, &(0x7f0000000100)=ANY=[], 0x90)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}})

16.517177557s ago: executing program 38 (id=3136):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = inotify_init()
close(0xffffffffffffffff)
inotify_add_watch(r3, 0x0, 0x8)
truncate(0x0, 0xf0ffff)
utimes(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000002480))
rmdir(&(0x7f0000000280)='./file2\x00')
write$FUSE_DIRENT(r1, &(0x7f0000000100)=ANY=[], 0x90)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}})

8.465522703s ago: executing program 7 (id=3169):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

8.280072209s ago: executing program 7 (id=3170):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

8.214043137s ago: executing program 7 (id=3171):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

7.574396377s ago: executing program 5 (id=3172):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000040)=0xfffffffd)
r5 = socket(0x10, 0x3, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48})
r6 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x400)
ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000000)={0xa, {0x0, 0x11, 0xfffffffd, 0xc}})
r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x10000, 0x1000000})

6.236166183s ago: executing program 8 (id=3174):
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace_dev_match', 0x2000, 0x108)
read$FUSE(r1, &(0x7f0000003840)={0x2020}, 0x2020)

5.471431543s ago: executing program 8 (id=3175):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x100, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0xffffffffffffffff, 0x200000000000000})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d000000f90000000002000600"], 0x1c}}, 0x0)

5.134614523s ago: executing program 8 (id=3176):
r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6c733d63703835322c6e6f626172726965722c63726561746f723dbd3c66f52c626172726965722c706172743d3078303030303030303030303030303030322c756d61736b3d30303030303030303030303030303030303030363734352c00b08558549e3fb3af8feff2a5c10c825cef8ec0f1ddcd940f6058a48f0cc0887456a5b70061a195d3ed592d"], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=")
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x1b3000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket(0x10, 0x3, 0x0)
close_range(r1, r0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000800)=0x18, 0x4)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r5)

5.111658341s ago: executing program 5 (id=3177):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, 0x0, 0x30000091)
socketpair(0x25, 0x1, 0x0, &(0x7f0000000080))

5.011882948s ago: executing program 7 (id=3178):
socket(0x2, 0x3, 0x100000001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000100006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x7d1e02, 0x90)
sendfile(r3, r3, 0x0, 0x101)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x0, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff, 0x0, 0xff], 'syzkaller1\x00', 'hsr0\x00', {0xff}, {}, 0x3a, 0x4, 0x5, 0x46}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [], 0x0, 0x0, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x43}, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x100000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8)

3.673889699s ago: executing program 5 (id=3179):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

3.51277613s ago: executing program 7 (id=3180):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = userfaultfd(0x801)
getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, &(0x7f0000000280))
r4 = getpid()
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000fc100)={0x3, [], 0x8, "d7e210b12e2d45"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
read$msr(r1, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000040601020000000000000000050000010900020073797a3200000000050001000700000005000100070000000900020073797a30000000000900020073797a31000000000900020073797a3000000000311603667fe80aee72fc129b8045aa8cee463c57709c524b05d961a59d4001eed272baf1e8dd3f811a664fad1a9b604269c04b2b6cef8783ffce4073eb2fda48159aecbfd19fc8441a3b7ccb29d09052246b70fa3e1dd34c45ffe555373ca32f1212aaa9c681fc3903410fc6a74af5be650fc85367c1f72aaab58624b6cfc11210a66133ed9962e377390f7e9d7b69d0bc11639be116d16199cf07db9ae54d823d1fdc0c275992b21e27fb9c1d476ba908a9945d9eb56535074155ae1f82ff"], 0x54}, 0x1, 0x0, 0x0, 0x40018}, 0x800)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0xec, 0x3, 0x7e, 0x8, 0x9fb, 0xebbe, 0xd48d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x0, 0xf0, 0x9, [{{0x9, 0x4, 0xc0, 0x7, 0x1, 0x97, 0x78, 0x37, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x80, 0x7, 0x2}}]}}]}}]}}, 0x0)

3.161423653s ago: executing program 5 (id=3181):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd205e6d3d2099cf0100000000000000c1d9e9e9215b"], 0x10}, 0x8000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000)
r4 = socket$inet6(0xa, 0x80002, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x4001c00)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f00000000c0))

3.022932891s ago: executing program 8 (id=3182):
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000180), 0x0, 0x0, 0x0})
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, <r3=>0x0], &(0x7f0000000040), 0x3, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000340)})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.515146143s ago: executing program 8 (id=3183):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x22)
write(r5, &(0x7f0000000180)="e1c53cbc5f9b3b78e15976eb7bf81104660ee5a27901658d71d4498cd5a3e01b91928d0578356165231df80114fce0c5d3b01123bfcfb00261eb175cbebbcc8ae91bce47c5d53d7e2ad90cb37a0225b9e78b05b72acf826664db1d52a0f542528643ec7c62be8d7841e794e4fdb71d411d2e618106f698190779d98f55a87c3379aa1e9cd17273e4804423d04dfb7c769639b44bcdf1d8e7640872bf", 0x9c)

1.948297464s ago: executing program 7 (id=3184):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x100, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0xffffffffffffffff, 0x200000000000000})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d000000f90000000002000600"], 0x1c}}, 0x0)

1.370213673s ago: executing program 8 (id=3185):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000040)=0xfffffffd)
r5 = socket(0x10, 0x3, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48})
r6 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x400)
ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000000)={0xa, {0x0, 0x11, 0xfffffffd, 0xc}})
r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x10000, 0x1000000})

189.243858ms ago: executing program 5 (id=3186):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)

0s ago: executing program 5 (id=3187):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, 0x0, 0x30000091)
socketpair(0x25, 0x1, 0x0, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

                                                                                                                                                                                                                                                                                                                                                 "[15009]
[  758.269462][T15020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2524'.
[  761.626171][ T5993] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  762.158582][ T5993] usb 7-1: Using ep0 maxpacket: 8
[  762.171091][ T5993] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  762.194863][ T5993] usb 7-1: config 0 has no interface number 0
[  762.211532][ T5993] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  762.227478][T15101] autofs: Unknown parameter '0x0000000000000000'
[  762.247024][ T5993] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  762.288080][ T5993] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  762.329833][ T5993] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  762.368694][ T5993] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  762.391922][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.431791][ T5993] usb 7-1: config 0 descriptor??
[  762.462186][ T5993] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  762.730316][T15113] loop5: detected capacity change from 0 to 40427
[  762.794297][T15113] F2FS-fs (loop5): invalid crc value
[  762.823631][ T5993] usb 7-1: USB disconnect, device number 23
[  762.825211][    C0] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  762.836356][T15084] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19
[  762.883402][T15113] F2FS-fs (loop5): Start checkpoint disabled!
[  762.901144][T15113] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  762.918293][ T5993] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  762.967672][T15113] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  763.115638][ T6032] kworker/u8:9: attempt to access beyond end of device
[  763.115638][ T6032] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  763.197367][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  763.197384][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  763.197391][ T6032] Workqueue: writeback wb_workfn (flush-7:5)
[  763.197412][ T6032] Call Trace:
[  763.197417][ T6032]  <TASK>
[  763.197422][ T6032]  dump_stack_lvl+0x189/0x250
[  763.197442][ T6032]  ? __pfx_dump_stack_lvl+0x10/0x10
[  763.197455][ T6032]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  763.197467][ T6032]  ? __pfx_queue_work_on+0x10/0x10
[  763.197477][ T6032]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  763.197487][ T6032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  763.197499][ T6032]  ? f2fs_hw_is_readonly+0x39b/0x470
[  763.197514][ T6032]  f2fs_handle_critical_error+0x37c/0x540
[  763.197529][ T6032]  f2fs_write_end_io+0x495/0x810
[  763.197542][ T6032]  ? blkg_put+0x22/0x240
[  763.197562][ T6032]  __submit_merged_bio+0x27a/0x6a0
[  763.197577][ T6032]  __submit_merged_write_cond+0x255/0x530
[  763.197592][ T6032]  f2fs_write_data_pages+0x261d/0x3000
[  763.197623][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  763.197678][ T6032]  ? f2fs_write_meta_pages+0x357/0x450
[  763.197696][ T6032]  ? __lock_acquire+0xab9/0xd20
[  763.197713][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  763.197726][ T6032]  do_writepages+0x32b/0x550
[  763.197744][ T6032]  ? reacquire_held_locks+0x127/0x1d0
[  763.197752][ T6032]  ? writeback_sb_inodes+0x384/0x1010
[  763.197771][ T6032]  __writeback_single_inode+0x145/0xff0
[  763.197786][ T6032]  ? do_raw_spin_unlock+0x122/0x240
[  763.197799][ T6032]  writeback_sb_inodes+0x6c7/0x1010
[  763.197827][ T6032]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  763.197864][ T6032]  ? rcu_is_watching+0x15/0xb0
[  763.197888][ T6032]  wb_writeback+0x43b/0xaf0
[  763.197907][ T6032]  ? queue_io+0x371/0x590
[  763.197923][ T6032]  ? __pfx_wb_writeback+0x10/0x10
[  763.197941][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  763.197954][ T6032]  wb_workfn+0x409/0xef0
[  763.197975][ T6032]  ? __pfx_wb_workfn+0x10/0x10
[  763.197989][ T6032]  ? __lock_acquire+0xab9/0xd20
[  763.198008][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  763.198025][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  763.198035][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  763.198048][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  763.198062][ T6032]  process_scheduled_works+0xade/0x17b0
[  763.198092][ T6032]  ? __pfx_process_scheduled_works+0x10/0x10
[  763.198115][ T6032]  worker_thread+0x8a0/0xda0
[  763.198139][ T6032]  kthread+0x711/0x8a0
[  763.198152][ T6032]  ? __pfx_worker_thread+0x10/0x10
[  763.198166][ T6032]  ? __pfx_kthread+0x10/0x10
[  763.198177][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  763.198187][ T6032]  ? lockdep_hardirqs_on+0x9c/0x150
[  763.198199][ T6032]  ? __pfx_kthread+0x10/0x10
[  763.198210][ T6032]  ret_from_fork+0x3fc/0x770
[  763.198225][ T6032]  ? __pfx_ret_from_fork+0x10/0x10
[  763.198242][ T6032]  ? __switch_to_asm+0x39/0x70
[  763.198251][ T6032]  ? __switch_to_asm+0x33/0x70
[  763.198259][ T6032]  ? __pfx_kthread+0x10/0x10
[  763.198270][ T6032]  ret_from_fork_asm+0x1a/0x30
[  763.198289][ T6032]  </TASK>
[  763.198294][ T6032] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  763.536455][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  763.536483][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  763.536495][ T6032] Workqueue: writeback wb_workfn (flush-7:5)
[  763.536525][ T6032] Call Trace:
[  763.536532][ T6032]  <TASK>
[  763.536540][ T6032]  dump_stack_lvl+0x189/0x250
[  763.536573][ T6032]  ? __pfx_dump_stack_lvl+0x10/0x10
[  763.536595][ T6032]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  763.536616][ T6032]  ? __pfx_queue_work_on+0x10/0x10
[  763.536635][ T6032]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  763.536654][ T6032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  763.536676][ T6032]  ? f2fs_hw_is_readonly+0x39b/0x470
[  763.536704][ T6032]  f2fs_handle_critical_error+0x37c/0x540
[  763.536734][ T6032]  f2fs_write_end_io+0x495/0x810
[  763.536755][ T6032]  ? blkg_put+0x22/0x240
[  763.536795][ T6032]  __submit_merged_bio+0x27a/0x6a0
[  763.536823][ T6032]  __submit_merged_write_cond+0x255/0x530
[  763.536854][ T6032]  f2fs_write_data_pages+0x261d/0x3000
[  763.536919][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  763.537037][ T6032]  ? f2fs_write_meta_pages+0x357/0x450
[  763.537079][ T6032]  ? __lock_acquire+0xab9/0xd20
[  763.537108][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  763.537133][ T6032]  do_writepages+0x32b/0x550
[  763.537165][ T6032]  ? reacquire_held_locks+0x127/0x1d0
[  763.537181][ T6032]  ? writeback_sb_inodes+0x384/0x1010
[  763.537217][ T6032]  __writeback_single_inode+0x145/0xff0
[  763.537242][ T6032]  ? do_raw_spin_unlock+0x122/0x240
[  763.537268][ T6032]  writeback_sb_inodes+0x6c7/0x1010
[  763.537327][ T6032]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  763.537406][ T6032]  ? rcu_is_watching+0x15/0xb0
[  763.537441][ T6032]  wb_writeback+0x43b/0xaf0
[  763.537475][ T6032]  ? queue_io+0x371/0x590
[  763.537503][ T6032]  ? __pfx_wb_writeback+0x10/0x10
[  763.537539][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  763.537565][ T6032]  wb_workfn+0x409/0xef0
[  763.537607][ T6032]  ? __pfx_wb_workfn+0x10/0x10
[  763.537635][ T6032]  ? __lock_acquire+0xab9/0xd20
[  763.537671][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  763.537704][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  763.537722][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  763.537744][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  763.537771][ T6032]  process_scheduled_works+0xade/0x17b0
[  763.537834][ T6032]  ? __pfx_process_scheduled_works+0x10/0x10
[  763.537882][ T6032]  worker_thread+0x8a0/0xda0
[  763.537934][ T6032]  kthread+0x711/0x8a0
[  763.537958][ T6032]  ? __pfx_worker_thread+0x10/0x10
[  763.537982][ T6032]  ? __pfx_kthread+0x10/0x10
[  763.538005][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  763.538023][ T6032]  ? lockdep_hardirqs_on+0x9c/0x150
[  763.538041][ T6032]  ? __pfx_kthread+0x10/0x10
[  763.538063][ T6032]  ret_from_fork+0x3fc/0x770
[  763.538095][ T6032]  ? __pfx_ret_from_fork+0x10/0x10
[  763.538127][ T6032]  ? __switch_to_asm+0x39/0x70
[  763.538143][ T6032]  ? __switch_to_asm+0x33/0x70
[  763.538159][ T6032]  ? __pfx_kthread+0x10/0x10
[  763.538180][ T6032]  ret_from_fork_asm+0x1a/0x30
[  763.538220][ T6032]  </TASK>
[  763.538227][ T6032] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  765.587983][T15143] autofs: Unknown parameter '0x0000000000000000'
[  765.969268][T15151] loop6: detected capacity change from 0 to 40427
[  766.022769][T15151] F2FS-fs (loop6): invalid crc value
[  766.078729][T15151] F2FS-fs (loop6): Start checkpoint disabled!
[  766.087425][T15151] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  766.135075][T15151] F2FS-fs (loop6): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  766.231703][   T13] kworker/u8:1: attempt to access beyond end of device
[  766.231703][   T13] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  766.395286][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  766.395313][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  766.395325][   T13] Workqueue: writeback wb_workfn (flush-7:6)
[  766.395354][   T13] Call Trace:
[  766.395362][   T13]  <TASK>
[  766.395370][   T13]  dump_stack_lvl+0x189/0x250
[  766.395401][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  766.395424][   T13]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  766.395445][   T13]  ? __pfx_queue_work_on+0x10/0x10
[  766.395462][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  766.395481][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  766.395501][   T13]  ? f2fs_hw_is_readonly+0x39b/0x470
[  766.395528][   T13]  f2fs_handle_critical_error+0x37c/0x540
[  766.395558][   T13]  f2fs_write_end_io+0x495/0x810
[  766.395580][   T13]  ? blkg_put+0x22/0x240
[  766.395627][   T13]  __submit_merged_bio+0x27a/0x6a0
[  766.395657][   T13]  __submit_merged_write_cond+0x255/0x530
[  766.395688][   T13]  f2fs_write_data_pages+0x261d/0x3000
[  766.395751][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  766.395871][   T13]  ? f2fs_write_meta_pages+0x357/0x450
[  766.395907][   T13]  ? __lock_acquire+0xab9/0xd20
[  766.395936][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  766.395961][   T13]  do_writepages+0x32b/0x550
[  766.395993][   T13]  ? reacquire_held_locks+0x127/0x1d0
[  766.396009][   T13]  ? writeback_sb_inodes+0x384/0x1010
[  766.396046][   T13]  __writeback_single_inode+0x145/0xff0
[  766.396071][   T13]  ? do_raw_spin_unlock+0x122/0x240
[  766.396096][   T13]  writeback_sb_inodes+0x6c7/0x1010
[  766.396149][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  766.396219][   T13]  ? rcu_is_watching+0x15/0xb0
[  766.396254][   T13]  wb_writeback+0x43b/0xaf0
[  766.396288][   T13]  ? queue_io+0x371/0x590
[  766.396313][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  766.396348][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  766.396373][   T13]  wb_workfn+0x409/0xef0
[  766.396413][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  766.396442][   T13]  ? __lock_acquire+0xab9/0xd20
[  766.396476][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  766.396505][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  766.396520][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  766.396541][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  766.396565][   T13]  process_scheduled_works+0xade/0x17b0
[  766.396630][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  766.396675][   T13]  worker_thread+0x8a0/0xda0
[  766.396723][   T13]  kthread+0x711/0x8a0
[  766.396747][   T13]  ? __pfx_worker_thread+0x10/0x10
[  766.396769][   T13]  ? __pfx_kthread+0x10/0x10
[  766.396789][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  766.396806][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  766.396824][   T13]  ? __pfx_kthread+0x10/0x10
[  766.396838][   T13]  ret_from_fork+0x3fc/0x770
[  766.396858][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  766.396876][   T13]  ? __switch_to_asm+0x39/0x70
[  766.396885][   T13]  ? __switch_to_asm+0x33/0x70
[  766.396894][   T13]  ? __pfx_kthread+0x10/0x10
[  766.396905][   T13]  ret_from_fork_asm+0x1a/0x30
[  766.396927][   T13]  </TASK>
[  766.396932][   T13] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  766.725300][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  766.725327][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  766.725338][   T13] Workqueue: writeback wb_workfn (flush-7:6)
[  766.725368][   T13] Call Trace:
[  766.725375][   T13]  <TASK>
[  766.725383][   T13]  dump_stack_lvl+0x189/0x250
[  766.725414][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  766.725436][   T13]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  766.725457][   T13]  ? __pfx_queue_work_on+0x10/0x10
[  766.725475][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  766.725495][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  766.725516][   T13]  ? f2fs_hw_is_readonly+0x39b/0x470
[  766.725549][   T13]  f2fs_handle_critical_error+0x37c/0x540
[  766.725585][   T13]  f2fs_write_end_io+0x495/0x810
[  766.725604][   T13]  ? blkg_put+0x22/0x240
[  766.725644][   T13]  __submit_merged_bio+0x27a/0x6a0
[  766.725674][   T13]  __submit_merged_write_cond+0x255/0x530
[  766.725704][   T13]  f2fs_write_data_pages+0x261d/0x3000
[  766.725770][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  766.725893][   T13]  ? f2fs_write_meta_pages+0x357/0x450
[  766.725928][   T13]  ? __lock_acquire+0xab9/0xd20
[  766.725956][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  766.725981][   T13]  do_writepages+0x32b/0x550
[  766.726014][   T13]  ? reacquire_held_locks+0x127/0x1d0
[  766.726029][   T13]  ? writeback_sb_inodes+0x384/0x1010
[  766.726062][   T13]  __writeback_single_inode+0x145/0xff0
[  766.726087][   T13]  ? do_raw_spin_unlock+0x122/0x240
[  766.726112][   T13]  writeback_sb_inodes+0x6c7/0x1010
[  766.726170][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  766.726248][   T13]  ? rcu_is_watching+0x15/0xb0
[  766.726285][   T13]  wb_writeback+0x43b/0xaf0
[  766.726321][   T13]  ? queue_io+0x371/0x590
[  766.726349][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  766.726385][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  766.726411][   T13]  wb_workfn+0x409/0xef0
[  766.726453][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  766.726482][   T13]  ? __lock_acquire+0xab9/0xd20
[  766.726519][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  766.726552][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  766.726577][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  766.726599][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  766.726626][   T13]  process_scheduled_works+0xade/0x17b0
[  766.726690][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  766.726737][   T13]  worker_thread+0x8a0/0xda0
[  766.726789][   T13]  kthread+0x711/0x8a0
[  766.726812][   T13]  ? __pfx_worker_thread+0x10/0x10
[  766.726836][   T13]  ? __pfx_kthread+0x10/0x10
[  766.726859][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  766.726877][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  766.726896][   T13]  ? __pfx_kthread+0x10/0x10
[  766.726917][   T13]  ret_from_fork+0x3fc/0x770
[  766.726944][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  766.726976][   T13]  ? __switch_to_asm+0x39/0x70
[  766.726991][   T13]  ? __switch_to_asm+0x33/0x70
[  766.727007][   T13]  ? __pfx_kthread+0x10/0x10
[  766.727029][   T13]  ret_from_fork_asm+0x1a/0x30
[  766.727068][   T13]  </TASK>
[  766.727217][   T13] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  767.912691][T15174] autofs: Unknown parameter '0x0000000000000000'
[  768.504945][ T1634] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  768.756555][T15182] loop3: detected capacity change from 0 to 40427
[  768.785296][ T1634] usb 7-1: Using ep0 maxpacket: 8
[  768.933073][T15182] F2FS-fs (loop3): invalid crc value
[  768.988187][T15182] F2FS-fs (loop3): Start checkpoint disabled!
[  768.998383][T15182] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  769.009648][ T1634] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  769.018690][ T1634] usb 7-1: config 0 has no interface number 0
[  769.025084][ T1634] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  769.035988][ T1634] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  769.049351][ T1634] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  769.061363][ T1634] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  769.145668][T15182] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  769.206029][   T36] kworker/u8:2: attempt to access beyond end of device
[  769.206029][   T36] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  769.222001][ T1634] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  769.233064][ T1634] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.250331][ T1634] usb 7-1: config 0 descriptor??
[  769.269480][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  769.269505][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  769.269516][   T36] Workqueue: writeback wb_workfn (flush-7:3)
[  769.269546][   T36] Call Trace:
[  769.269553][   T36]  <TASK>
[  769.269561][   T36]  dump_stack_lvl+0x189/0x250
[  769.269592][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  769.269614][   T36]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  769.269634][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  769.269651][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  769.269669][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  769.269688][   T36]  ? f2fs_hw_is_readonly+0x39b/0x470
[  769.269716][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  769.269743][   T36]  f2fs_write_end_io+0x495/0x810
[  769.269763][   T36]  ? blkg_put+0x22/0x240
[  769.269798][   T36]  __submit_merged_bio+0x27a/0x6a0
[  769.269826][   T36]  __submit_merged_write_cond+0x255/0x530
[  769.269854][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  769.269913][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  769.270030][   T36]  ? f2fs_write_meta_pages+0x357/0x450
[  769.270065][   T36]  ? __lock_acquire+0xab9/0xd20
[  769.270092][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  769.270115][   T36]  do_writepages+0x32b/0x550
[  769.270147][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  769.270162][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  769.270198][   T36]  __writeback_single_inode+0x145/0xff0
[  769.270223][   T36]  ? do_raw_spin_unlock+0x122/0x240
[  769.270249][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  769.270314][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  769.270391][   T36]  ? rcu_is_watching+0x15/0xb0
[  769.270428][   T36]  wb_writeback+0x43b/0xaf0
[  769.270463][   T36]  ? queue_io+0x371/0x590
[  769.270492][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  769.270527][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  769.270553][   T36]  wb_workfn+0x409/0xef0
[  769.270596][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  769.270622][   T36]  ? __lock_acquire+0xab9/0xd20
[  769.270658][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  769.270689][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  769.270706][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  769.270727][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  769.270752][   T36]  process_scheduled_works+0xade/0x17b0
[  769.270811][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  769.270856][   T36]  worker_thread+0x8a0/0xda0
[  769.270904][   T36]  kthread+0x711/0x8a0
[  769.270928][   T36]  ? __pfx_worker_thread+0x10/0x10
[  769.270951][   T36]  ? __pfx_kthread+0x10/0x10
[  769.270972][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  769.270990][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  769.271008][   T36]  ? __pfx_kthread+0x10/0x10
[  769.271029][   T36]  ret_from_fork+0x3fc/0x770
[  769.271056][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  769.271088][   T36]  ? __switch_to_asm+0x39/0x70
[  769.271105][   T36]  ? __switch_to_asm+0x33/0x70
[  769.271121][   T36]  ? __pfx_kthread+0x10/0x10
[  769.271142][   T36]  ret_from_fork_asm+0x1a/0x30
[  769.271182][   T36]  </TASK>
[  769.271190][   T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  769.288713][ T1634] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  769.354936][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  769.354961][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  769.354974][   T36] Workqueue: writeback wb_workfn (flush-7:3)
[  769.355004][   T36] Call Trace:
[  769.355011][   T36]  <TASK>
[  769.355018][   T36]  dump_stack_lvl+0x189/0x250
[  769.355049][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  769.355070][   T36]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  769.355089][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  769.355111][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  769.355129][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  769.355149][   T36]  ? f2fs_hw_is_readonly+0x39b/0x470
[  769.355175][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  769.355202][   T36]  f2fs_write_end_io+0x495/0x810
[  769.355223][   T36]  ? blkg_put+0x22/0x240
[  769.355257][   T36]  __submit_merged_bio+0x27a/0x6a0
[  769.355289][   T36]  __submit_merged_write_cond+0x255/0x530
[  769.355317][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  769.355373][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  769.355474][   T36]  ? f2fs_write_meta_pages+0x357/0x450
[  769.355505][   T36]  ? __lock_acquire+0xab9/0xd20
[  769.355533][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  769.355556][   T36]  do_writepages+0x32b/0x550
[  769.355587][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  769.355603][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  769.355636][   T36]  __writeback_single_inode+0x145/0xff0
[  769.355661][   T36]  ? do_raw_spin_unlock+0x122/0x240
[  769.355686][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  769.355736][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  769.355802][   T36]  ? rcu_is_watching+0x15/0xb0
[  769.355837][   T36]  wb_writeback+0x43b/0xaf0
[  769.355869][   T36]  ? queue_io+0x371/0x590
[  769.355896][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  769.355929][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  769.355953][   T36]  wb_workfn+0x409/0xef0
[  769.355990][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  769.356016][   T36]  ? __lock_acquire+0xab9/0xd20
[  769.356049][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  769.356079][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  769.356097][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  769.356120][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  769.356146][   T36]  process_scheduled_works+0xade/0x17b0
[  769.356199][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  769.356240][   T36]  worker_thread+0x8a0/0xda0
[  769.356288][   T36]  kthread+0x711/0x8a0
[  769.356311][   T36]  ? __pfx_worker_thread+0x10/0x10
[  769.356335][   T36]  ? __pfx_kthread+0x10/0x10
[  769.356357][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  769.356375][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  769.356394][   T36]  ? __pfx_kthread+0x10/0x10
[  769.356414][   T36]  ret_from_fork+0x3fc/0x770
[  769.356440][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  769.356470][   T36]  ? __switch_to_asm+0x39/0x70
[  769.356486][   T36]  ? __switch_to_asm+0x33/0x70
[  769.356502][   T36]  ? __pfx_kthread+0x10/0x10
[  769.356523][   T36]  ret_from_fork_asm+0x1a/0x30
[  769.356557][   T36]  </TASK>
[  769.356671][   T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  769.486020][ T1634] usb 7-1: USB disconnect, device number 24
[  769.932058][ T1634] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  771.095601][T15211] autofs: Unknown parameter '0x0000000000000000'
[  771.508653][T15222] loop5: detected capacity change from 0 to 40427
[  771.519076][T15222] F2FS-fs (loop5): invalid crc value
[  771.609746][T15222] F2FS-fs (loop5): Start checkpoint disabled!
[  771.619680][T15222] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  771.658841][T15222] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  771.844581][ T6032] kworker/u8:9: attempt to access beyond end of device
[  771.844581][ T6032] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  771.910165][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  771.910193][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  771.910205][ T6032] Workqueue: writeback wb_workfn (flush-7:5)
[  771.910235][ T6032] Call Trace:
[  771.910242][ T6032]  <TASK>
[  771.910251][ T6032]  dump_stack_lvl+0x189/0x250
[  771.910280][ T6032]  ? __pfx_dump_stack_lvl+0x10/0x10
[  771.910304][ T6032]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  771.910324][ T6032]  ? __pfx_queue_work_on+0x10/0x10
[  771.910344][ T6032]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  771.910365][ T6032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  771.910388][ T6032]  ? f2fs_hw_is_readonly+0x39b/0x470
[  771.910416][ T6032]  f2fs_handle_critical_error+0x37c/0x540
[  771.910445][ T6032]  f2fs_write_end_io+0x495/0x810
[  771.910465][ T6032]  ? blkg_put+0x22/0x240
[  771.910502][ T6032]  __submit_merged_bio+0x27a/0x6a0
[  771.910530][ T6032]  __submit_merged_write_cond+0x255/0x530
[  771.910561][ T6032]  f2fs_write_data_pages+0x261d/0x3000
[  771.910626][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  771.910746][ T6032]  ? f2fs_write_meta_pages+0x357/0x450
[  771.910784][ T6032]  ? __lock_acquire+0xab9/0xd20
[  771.910815][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  771.910838][ T6032]  do_writepages+0x32b/0x550
[  771.910871][ T6032]  ? reacquire_held_locks+0x127/0x1d0
[  771.910888][ T6032]  ? writeback_sb_inodes+0x384/0x1010
[  771.910922][ T6032]  __writeback_single_inode+0x145/0xff0
[  771.910949][ T6032]  ? do_raw_spin_unlock+0x122/0x240
[  771.910976][ T6032]  writeback_sb_inodes+0x6c7/0x1010
[  771.911040][ T6032]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  771.911120][ T6032]  ? rcu_is_watching+0x15/0xb0
[  771.911159][ T6032]  wb_writeback+0x43b/0xaf0
[  771.911196][ T6032]  ? queue_io+0x371/0x590
[  771.911225][ T6032]  ? __pfx_wb_writeback+0x10/0x10
[  771.911261][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  771.911286][ T6032]  wb_workfn+0x409/0xef0
[  771.911329][ T6032]  ? __pfx_wb_workfn+0x10/0x10
[  771.911358][ T6032]  ? __lock_acquire+0xab9/0xd20
[  771.911393][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  771.911427][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  771.911444][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  771.911473][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  771.911502][ T6032]  process_scheduled_works+0xade/0x17b0
[  771.911566][ T6032]  ? __pfx_process_scheduled_works+0x10/0x10
[  771.911612][ T6032]  worker_thread+0x8a0/0xda0
[  771.911662][ T6032]  kthread+0x711/0x8a0
[  771.911688][ T6032]  ? __pfx_worker_thread+0x10/0x10
[  771.911713][ T6032]  ? __pfx_kthread+0x10/0x10
[  771.911736][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  771.911753][ T6032]  ? lockdep_hardirqs_on+0x9c/0x150
[  771.911772][ T6032]  ? __pfx_kthread+0x10/0x10
[  771.911794][ T6032]  ret_from_fork+0x3fc/0x770
[  771.911823][ T6032]  ? __pfx_ret_from_fork+0x10/0x10
[  771.911857][ T6032]  ? __switch_to_asm+0x39/0x70
[  771.911874][ T6032]  ? __switch_to_asm+0x33/0x70
[  771.911891][ T6032]  ? __pfx_kthread+0x10/0x10
[  771.911913][ T6032]  ret_from_fork_asm+0x1a/0x30
[  771.911951][ T6032]  </TASK>
[  771.911960][ T6032] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  772.228718][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  772.228736][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  772.228744][ T6032] Workqueue: writeback wb_workfn (flush-7:5)
[  772.228764][ T6032] Call Trace:
[  772.228769][ T6032]  <TASK>
[  772.228775][ T6032]  dump_stack_lvl+0x189/0x250
[  772.228795][ T6032]  ? __pfx_dump_stack_lvl+0x10/0x10
[  772.228809][ T6032]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  772.228821][ T6032]  ? __pfx_queue_work_on+0x10/0x10
[  772.228832][ T6032]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  772.228843][ T6032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  772.228855][ T6032]  ? f2fs_hw_is_readonly+0x39b/0x470
[  772.228871][ T6032]  f2fs_handle_critical_error+0x37c/0x540
[  772.228888][ T6032]  f2fs_write_end_io+0x495/0x810
[  772.228901][ T6032]  ? blkg_put+0x22/0x240
[  772.228923][ T6032]  __submit_merged_bio+0x27a/0x6a0
[  772.228939][ T6032]  __submit_merged_write_cond+0x255/0x530
[  772.228963][ T6032]  f2fs_write_data_pages+0x261d/0x3000
[  772.228998][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  772.229063][ T6032]  ? f2fs_write_meta_pages+0x357/0x450
[  772.229082][ T6032]  ? __lock_acquire+0xab9/0xd20
[  772.229099][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  772.229113][ T6032]  do_writepages+0x32b/0x550
[  772.229133][ T6032]  ? reacquire_held_locks+0x127/0x1d0
[  772.229141][ T6032]  ? writeback_sb_inodes+0x384/0x1010
[  772.229162][ T6032]  __writeback_single_inode+0x145/0xff0
[  772.229177][ T6032]  ? do_raw_spin_unlock+0x122/0x240
[  772.229191][ T6032]  writeback_sb_inodes+0x6c7/0x1010
[  772.229226][ T6032]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  772.229268][ T6032]  ? rcu_is_watching+0x15/0xb0
[  772.229290][ T6032]  wb_writeback+0x43b/0xaf0
[  772.229310][ T6032]  ? queue_io+0x371/0x590
[  772.229327][ T6032]  ? __pfx_wb_writeback+0x10/0x10
[  772.229347][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  772.229361][ T6032]  wb_workfn+0x409/0xef0
[  772.229384][ T6032]  ? __pfx_wb_workfn+0x10/0x10
[  772.229400][ T6032]  ? __lock_acquire+0xab9/0xd20
[  772.229420][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  772.229439][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  772.229449][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  772.229462][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  772.229478][ T6032]  process_scheduled_works+0xade/0x17b0
[  772.229511][ T6032]  ? __pfx_process_scheduled_works+0x10/0x10
[  772.229537][ T6032]  worker_thread+0x8a0/0xda0
[  772.229564][ T6032]  kthread+0x711/0x8a0
[  772.229577][ T6032]  ? __pfx_worker_thread+0x10/0x10
[  772.229592][ T6032]  ? __pfx_kthread+0x10/0x10
[  772.229604][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  772.229615][ T6032]  ? lockdep_hardirqs_on+0x9c/0x150
[  772.229626][ T6032]  ? __pfx_kthread+0x10/0x10
[  772.229638][ T6032]  ret_from_fork+0x3fc/0x770
[  772.229654][ T6032]  ? __pfx_ret_from_fork+0x10/0x10
[  772.229672][ T6032]  ? __switch_to_asm+0x39/0x70
[  772.229681][ T6032]  ? __switch_to_asm+0x33/0x70
[  772.229690][ T6032]  ? __pfx_kthread+0x10/0x10
[  772.229702][ T6032]  ret_from_fork_asm+0x1a/0x30
[  772.229723][ T6032]  </TASK>
[  772.229727][ T6032] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  772.537548][ T5898] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  772.704966][ T5898] usb 7-1: Using ep0 maxpacket: 8
[  772.712250][ T5898] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  772.774257][T15235] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  772.808079][ T5898] usb 7-1: config 0 has no interface number 0
[  772.830524][ T5898] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  772.882697][ T5898] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  772.973825][ T5898] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  773.046300][ T5898] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  773.059550][ T5898] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  773.068695][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.253305][ T5898] usb 7-1: config 0 descriptor??
[  773.285295][ T5898] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  773.884948][ T1634] usb 7-1: USB disconnect, device number 25
[  773.912926][ T1634] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  774.335329][ T5898] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  774.797589][ T5898] usb 6-1: Using ep0 maxpacket: 8
[  774.898119][ T5898] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  774.939616][ T5898] usb 6-1: config 0 has no interface number 0
[  774.981085][ T5898] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  775.025021][ T5898] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  775.054867][ T5898] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  775.088382][ T5898] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  775.102347][ T5898] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  775.112640][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.514552][T15268] loop6: detected capacity change from 0 to 1024
[  775.553819][T15268] hfsplus: Unknown parameter 'cr/ator'
[  776.012353][ T5898] usb 6-1: config 0 descriptor??
[  776.039488][ T5898] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  776.343003][ T5898] usb 6-1: USB disconnect, device number 13
[  776.369217][ T5898] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  776.473151][T15279] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  776.634557][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2616'.
[  777.379217][T15294] Cannot find del_set index 2 as target
[  778.779816][T15304] syz_tun: entered allmulticast mode
[  778.825950][T15298] syz_tun: left allmulticast mode
[  779.229015][T15308] loop3: detected capacity change from 0 to 1024
[  779.255206][T15308] hfsplus: Unknown parameter 'cr/ator'
[  779.654722][T15310] loop5: detected capacity change from 0 to 40427
[  779.679347][T15310] F2FS-fs (loop5): invalid crc value
[  779.782773][T15310] F2FS-fs (loop5): Start checkpoint disabled!
[  779.810772][T15310] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  779.873275][T15310] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  780.512247][ T6032] kworker/u8:9: attempt to access beyond end of device
[  780.512247][ T6032] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  780.567190][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  780.567224][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  780.567236][ T6032] Workqueue: writeback wb_workfn (flush-7:5)
[  780.567268][ T6032] Call Trace:
[  780.567276][ T6032]  <TASK>
[  780.567284][ T6032]  dump_stack_lvl+0x189/0x250
[  780.567317][ T6032]  ? __pfx_dump_stack_lvl+0x10/0x10
[  780.567340][ T6032]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  780.567361][ T6032]  ? __pfx_queue_work_on+0x10/0x10
[  780.567382][ T6032]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  780.567401][ T6032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  780.567424][ T6032]  ? f2fs_hw_is_readonly+0x39b/0x470
[  780.567453][ T6032]  f2fs_handle_critical_error+0x37c/0x540
[  780.567482][ T6032]  f2fs_write_end_io+0x495/0x810
[  780.567504][ T6032]  ? blkg_put+0x22/0x240
[  780.567545][ T6032]  __submit_merged_bio+0x27a/0x6a0
[  780.567575][ T6032]  __submit_merged_write_cond+0x255/0x530
[  780.567607][ T6032]  f2fs_write_data_pages+0x261d/0x3000
[  780.567673][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  780.567698][   T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  780.567790][ T6032]  ? f2fs_write_meta_pages+0x357/0x450
[  780.567827][ T6032]  ? __lock_acquire+0xab9/0xd20
[  780.567856][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  780.567881][ T6032]  do_writepages+0x32b/0x550
[  780.567915][ T6032]  ? reacquire_held_locks+0x127/0x1d0
[  780.567931][ T6032]  ? writeback_sb_inodes+0x384/0x1010
[  780.567967][ T6032]  __writeback_single_inode+0x145/0xff0
[  780.567994][ T6032]  ? do_raw_spin_unlock+0x122/0x240
[  780.568020][ T6032]  writeback_sb_inodes+0x6c7/0x1010
[  780.568080][ T6032]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  780.568160][ T6032]  ? rcu_is_watching+0x15/0xb0
[  780.568198][ T6032]  wb_writeback+0x43b/0xaf0
[  780.568239][ T6032]  ? queue_io+0x371/0x590
[  780.568269][ T6032]  ? __pfx_wb_writeback+0x10/0x10
[  780.568305][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.568332][ T6032]  wb_workfn+0x409/0xef0
[  780.568375][ T6032]  ? __pfx_wb_workfn+0x10/0x10
[  780.568404][ T6032]  ? __lock_acquire+0xab9/0xd20
[  780.568441][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  780.568474][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.568493][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  780.568516][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  780.568543][ T6032]  process_scheduled_works+0xade/0x17b0
[  780.568607][ T6032]  ? __pfx_process_scheduled_works+0x10/0x10
[  780.568656][ T6032]  worker_thread+0x8a0/0xda0
[  780.568709][ T6032]  kthread+0x711/0x8a0
[  780.568733][ T6032]  ? __pfx_worker_thread+0x10/0x10
[  780.568755][ T6032]  ? __pfx_kthread+0x10/0x10
[  780.568772][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.568788][ T6032]  ? lockdep_hardirqs_on+0x9c/0x150
[  780.568807][ T6032]  ? __pfx_kthread+0x10/0x10
[  780.568828][ T6032]  ret_from_fork+0x3fc/0x770
[  780.568857][ T6032]  ? __pfx_ret_from_fork+0x10/0x10
[  780.568888][ T6032]  ? __switch_to_asm+0x39/0x70
[  780.568904][ T6032]  ? __switch_to_asm+0x33/0x70
[  780.568920][ T6032]  ? __pfx_kthread+0x10/0x10
[  780.568942][ T6032]  ret_from_fork_asm+0x1a/0x30
[  780.568980][ T6032]  </TASK>
[  780.570199][ T6032] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  780.736365][   T10] usb 7-1: device descriptor read/64, error -71
[  780.786063][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  780.786089][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  780.786102][ T6032] Workqueue: writeback wb_workfn (flush-7:5)
[  780.786131][ T6032] Call Trace:
[  780.786139][ T6032]  <TASK>
[  780.786148][ T6032]  dump_stack_lvl+0x189/0x250
[  780.786180][ T6032]  ? __pfx_dump_stack_lvl+0x10/0x10
[  780.786214][ T6032]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  780.786235][ T6032]  ? __pfx_queue_work_on+0x10/0x10
[  780.786255][ T6032]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  780.786275][ T6032]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  780.786297][ T6032]  ? f2fs_hw_is_readonly+0x39b/0x470
[  780.786325][ T6032]  f2fs_handle_critical_error+0x37c/0x540
[  780.786356][ T6032]  f2fs_write_end_io+0x495/0x810
[  780.786377][ T6032]  ? blkg_put+0x22/0x240
[  780.786418][ T6032]  __submit_merged_bio+0x27a/0x6a0
[  780.786447][ T6032]  __submit_merged_write_cond+0x255/0x530
[  780.786478][ T6032]  f2fs_write_data_pages+0x261d/0x3000
[  780.786536][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  780.786657][ T6032]  ? f2fs_write_meta_pages+0x357/0x450
[  780.786691][ T6032]  ? __lock_acquire+0xab9/0xd20
[  780.786720][ T6032]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  780.786744][ T6032]  do_writepages+0x32b/0x550
[  780.786777][ T6032]  ? reacquire_held_locks+0x127/0x1d0
[  780.786793][ T6032]  ? writeback_sb_inodes+0x384/0x1010
[  780.786829][ T6032]  __writeback_single_inode+0x145/0xff0
[  780.786855][ T6032]  ? do_raw_spin_unlock+0x122/0x240
[  780.786881][ T6032]  writeback_sb_inodes+0x6c7/0x1010
[  780.786939][ T6032]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  780.787016][ T6032]  ? rcu_is_watching+0x15/0xb0
[  780.787053][ T6032]  wb_writeback+0x43b/0xaf0
[  780.787088][ T6032]  ? queue_io+0x371/0x590
[  780.787117][ T6032]  ? __pfx_wb_writeback+0x10/0x10
[  780.787153][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.787179][ T6032]  wb_workfn+0x409/0xef0
[  780.787227][ T6032]  ? __pfx_wb_workfn+0x10/0x10
[  780.787256][ T6032]  ? __lock_acquire+0xab9/0xd20
[  780.787293][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  780.787326][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.787344][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  780.787366][ T6032]  ? process_scheduled_works+0x9ef/0x17b0
[  780.787393][ T6032]  process_scheduled_works+0xade/0x17b0
[  780.787454][ T6032]  ? __pfx_process_scheduled_works+0x10/0x10
[  780.787502][ T6032]  worker_thread+0x8a0/0xda0
[  780.787552][ T6032]  kthread+0x711/0x8a0
[  780.787576][ T6032]  ? __pfx_worker_thread+0x10/0x10
[  780.787601][ T6032]  ? __pfx_kthread+0x10/0x10
[  780.787624][ T6032]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.787642][ T6032]  ? lockdep_hardirqs_on+0x9c/0x150
[  780.787660][ T6032]  ? __pfx_kthread+0x10/0x10
[  780.787682][ T6032]  ret_from_fork+0x3fc/0x770
[  780.787710][ T6032]  ? __pfx_ret_from_fork+0x10/0x10
[  780.787742][ T6032]  ? __switch_to_asm+0x39/0x70
[  780.787758][ T6032]  ? __switch_to_asm+0x33/0x70
[  780.787774][ T6032]  ? __pfx_kthread+0x10/0x10
[  780.787796][ T6032]  ret_from_fork_asm+0x1a/0x30
[  780.787835][ T6032]  </TASK>
[  780.787843][ T6032] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  781.135053][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'.
[  781.276874][   T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  781.345012][T15332] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  781.424913][   T10] usb 7-1: device descriptor read/64, error -71
[  781.607112][   T10] usb usb7-port1: attempt power cycle
[  783.892551][T15367] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2640'.
[  783.920793][T15367] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2640'.
[  784.415011][   T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  784.455041][T15384] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  784.555028][   T10] usb 6-1: device descriptor read/64, error -71
[  784.609399][T15392] gtp0: entered promiscuous mode
[  785.314858][   T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  785.549108][   T10] usb 6-1: device descriptor read/64, error -71
[  785.620818][T15407] loop3: detected capacity change from 0 to 512
[  785.643272][T15407] EXT4-fs: Invalid want_extra_isize 43
[  785.863465][   T10] usb usb6-port1: attempt power cycle
[  786.845646][   T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  786.976365][   T10] usb 6-1: device descriptor read/8, error -71
[  787.163152][T15425] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  788.897831][ T5993] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  789.434945][ T5993] usb 6-1: device descriptor read/64, error -71
[  789.498041][T15459] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  789.684995][   T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  789.752279][ T5993] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  789.856079][T15461] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  789.875006][   T10] usb 7-1: Using ep0 maxpacket: 8
[  789.877092][T15470] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2675'.
[  789.882085][   T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  789.904150][   T10] usb 7-1: config 0 has no interface number 0
[  789.904957][ T5993] usb 6-1: device descriptor read/64, error -71
[  789.921009][   T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  789.938472][   T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  789.951406][   T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  789.970670][   T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  789.987196][   T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  790.004831][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.025441][   T10] usb 7-1: config 0 descriptor??
[  790.046367][   T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  790.052325][ T5993] usb usb6-port1: attempt power cycle
[  790.095480][ T1634] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  790.245358][ T1634] usb 1-1: device descriptor read/64, error -71
[  790.266306][ T5898] usb 7-1: USB disconnect, device number 29
[  790.279988][ T5898] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  790.525000][ T5993] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  790.580502][ T5993] usb 6-1: device descriptor read/8, error -71
[  790.965068][ T5993] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  790.991827][ T5993] usb 6-1: device descriptor read/8, error -71
[  791.004932][ T1634] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  791.174886][ T1634] usb 1-1: device descriptor read/64, error -71
[  791.177818][ T5993] usb usb6-port1: unable to enumerate USB device
[  791.227514][T15486] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  791.864656][ T1634] usb usb1-port1: attempt power cycle
[  792.509908][ T1634] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  792.689459][ T1634] usb 1-1: device descriptor read/8, error -71
[  792.720589][T15503] netlink: 'syz.6.2685': attribute type 1 has an invalid length.
[  792.781137][T15503] 8021q: adding VLAN 0 to HW filter on device bond1
[  792.784112][T15508] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2687'.
[  792.812039][T15506] bond1: (slave geneve2): making interface the new active one
[  792.821584][T15506] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  792.871481][T15503] bond1: entered promiscuous mode
[  792.877048][T15503] geneve2: entered promiscuous mode
[  792.944868][ T1634] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  793.198417][ T1634] usb 1-1: device not accepting address 23, error -71
[  793.237573][ T1634] usb usb1-port1: unable to enumerate USB device
[  794.765689][T15532] loop6: detected capacity change from 0 to 16
[  794.845329][ T5994] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  795.017981][ T5994] usb 4-1: device descriptor read/64, error -71
[  795.055822][T15532] erofs (device loop6): mounted with root inode @ nid 36.
[  795.265554][T15531] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  795.275189][ T5994] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  795.305713][T15511] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  795.455029][ T5994] usb 4-1: device descriptor read/64, error -71
[  795.594070][ T5994] usb usb4-port1: attempt power cycle
[  795.790778][T15545] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2700'.
[  795.884892][ T1634] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  796.028793][ T5994] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  796.045818][ T1634] usb 6-1: device descriptor read/64, error -71
[  796.065337][ T5994] usb 4-1: device descriptor read/8, error -71
[  796.845023][ T1634] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  797.106848][ T5994] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  797.152079][ T5994] usb 4-1: device descriptor read/8, error -71
[  797.236101][ T1634] usb 6-1: device descriptor read/64, error -71
[  797.315475][ T5994] usb usb4-port1: unable to enumerate USB device
[  797.632815][ T1634] usb usb6-port1: attempt power cycle
[  798.148199][T15570] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  798.165316][ T1634] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  798.351710][T15574] loop3: detected capacity change from 0 to 16
[  798.576448][T15574] erofs (device loop3): mounted with root inode @ nid 36.
[  798.956228][ T1634] usb 6-1: device descriptor read/8, error -71
[  799.860021][T15595] loop3: detected capacity change from 0 to 128
[  799.868060][T15595] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  799.880948][T15595] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  800.309913][ T1634] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  800.358740][ T1634] usb 6-1: Using ep0 maxpacket: 8
[  800.366224][ T1634] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  800.380044][ T1634] usb 6-1: config 0 has no interface number 0
[  800.398021][ T1634] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  800.419421][ T1634] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  800.494017][ T1634] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  800.550335][ T1634] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  800.581758][ T1634] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  800.634500][ T1634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.661912][ T1634] usb 6-1: config 0 descriptor??
[  800.683191][ T1634] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  800.887919][ T1634] usb 6-1: USB disconnect, device number 25
[  800.904703][ T1634] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  802.235534][ T1634] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  802.405029][ T1634] usb 4-1: device descriptor read/64, error -71
[  802.672020][ T1634] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  802.805019][ T1634] usb 4-1: device descriptor read/64, error -71
[  802.915630][ T1634] usb usb4-port1: attempt power cycle
[  803.275047][ T1634] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  803.836414][ T1634] usb 4-1: device descriptor read/8, error -71
[  804.281205][ T1634] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  804.608381][ T1634] usb 4-1: device descriptor read/8, error -71
[  804.683337][T15639] No control pipe specified
[  804.717197][ T1634] usb usb4-port1: unable to enumerate USB device
[  805.381378][T15656] loop6: detected capacity change from 0 to 128
[  805.400013][T15656] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  805.510606][T15656] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  806.779249][T15672] No control pipe specified
[  809.137667][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  809.145992][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  809.708417][T15703] binder: BINDER_SET_CONTEXT_MGR already set
[  809.714418][T15703] binder: 15700:15703 ioctl 4018620d 200000000040 returned -16
[  809.755102][T15705] gfs2: gfs2 mount does not exist
[  809.813104][T15708] No control pipe specified
[  809.823261][T15703] binder: 15700:15703 ioctl c0306201 200000000240 returned -11
[  810.028857][T15712] loop3: detected capacity change from 0 to 256
[  810.157426][T15712] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  810.277100][T15712] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  810.854394][T15712] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  812.222122][T15740] loop5: detected capacity change from 0 to 2048
[  812.251364][T15740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  812.271976][T15743] gfs2: gfs2 mount does not exist
[  813.524844][   T30] audit: type=1800 audit(1750171215.609:21): pid=15758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2757" name="file1" dev="loop3" ino=1048651 res=0 errno=0
[  815.853756][T15762] syz.5.2771 (15762) used greatest stack depth: 16184 bytes left
[  815.892339][T15786] netlink: 'syz.7.2781': attribute type 8 has an invalid length.
[  816.119147][T15788] input: syz0 as /devices/virtual/input/input36
[  816.713558][T15798] loop6: detected capacity change from 0 to 8192
[  818.869824][T15804] netlink: 8552 bytes leftover after parsing attributes in process `syz.5.2784'.
[  820.677002][T15823] gfs2: gfs2 mount does not exist
[  824.767671][T15862] netlink: 8552 bytes leftover after parsing attributes in process `syz.7.2804'.
[  824.804733][T15842] loop6: detected capacity change from 0 to 32768
[  825.004646][T15842] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2799 (15842)
[  825.285244][T15871] lo speed is unknown, defaulting to 1000
[  826.178414][T15842] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  826.645300][T15842] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  826.699220][T15842] BTRFS info (device loop6): using free-space-tree
[  826.723852][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  826.736838][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  826.779611][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  826.883893][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  826.974270][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  827.057136][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  827.805482][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  827.869043][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  827.931706][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  827.973079][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  828.027408][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  828.079300][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  828.119982][T15842] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  828.148031][T15842] BTRFS error (device loop6): open_ctree failed: -12
[  828.481574][T15916] loop3: detected capacity change from 0 to 128
[  828.489342][T15916] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  828.730650][T15916] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  828.754521][T15912] lo speed is unknown, defaulting to 1000
[  829.712360][T15926] netlink: 8552 bytes leftover after parsing attributes in process `syz.6.2819'.
[  830.734938][ T1634] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  830.986014][ T1634] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  831.028491][ T1634] usb 4-1: config 0 has no interface number 0
[  831.106072][ T1634] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  831.418506][ T1634] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  831.544605][ T1634] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  831.562678][ T1634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  831.584496][ T1634] usb 4-1: config 0 descriptor??
[  831.626225][T15936] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  831.701921][ T1634] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  831.823797][T15952] Invalid ELF header magic: != ELF
[  832.389291][    C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  832.613871][ T5993] usb 4-1: USB disconnect, device number 27
[  833.563095][T15973] loop5: detected capacity change from 0 to 16
[  833.865595][T15973] erofs (device loop5): mounted with root inode @ nid 36.
[  834.207727][T15577] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  834.565006][T15577] usb 7-1: Using ep0 maxpacket: 16
[  834.578056][T15577] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  835.795808][T15993] netlink: 8552 bytes leftover after parsing attributes in process `syz.0.2835'.
[  836.018128][T15577] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  836.029426][T15577] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  836.044065][T15577] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  836.053420][T15577] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  836.061872][T15577] usb 7-1: SerialNumber: syz
[  836.241247][T15577] usb 7-1: can't set config #1, error -71
[  836.304532][T15577] usb 7-1: USB disconnect, device number 30
[  838.144553][T16013] loop5: detected capacity change from 0 to 2048
[  838.415408][ T6459] Alternate GPT is invalid, using primary GPT.
[  838.422093][ T6459]  loop5: p1 p2 p3
[  840.641310][ T5202] Alternate GPT is invalid, using primary GPT.
[  840.654921][ T5202]  loop5: p1 p2 p3
[  842.127864][ T5898] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  842.390744][ T5898] usb 4-1: config 7 has an invalid interface number: 192 but max is 0
[  842.938990][ T5898] usb 4-1: config 7 has no interface number 0
[  842.951153][ T5898] usb 4-1: config 7 interface 192 has no altsetting 0
[  842.964347][ T5898] usb 4-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d
[  842.988514][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.809470][ T5898] usb 4-1: Product: syz
[  843.874115][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  843.958799][ T5980] udevd[5980]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  843.987863][ T5898] usb 4-1: Manufacturer: syz
[  843.992494][ T5898] usb 4-1: SerialNumber: syz
[  844.009042][ T6459] udevd[6459]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  844.143066][ T6459] udevd[6459]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  844.148160][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  844.162647][ T5980] udevd[5980]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  844.409661][T16049] gfs2: gfs2 mount does not exist
[  845.030453][ T5898] usb 4-1: can't set config #7, error -71
[  845.059707][ T5898] usb 4-1: USB disconnect, device number 28
[  845.240400][T16055] Driver unsupported XDP return value 0 on prog  (id 402) dev N/A, expect packet loss!
[  846.268505][T16066] loop3: detected capacity change from 0 to 128
[  846.302619][T16071] trusted_key: syz.7.2862 sent an empty control message without MSG_MORE.
[  847.320892][T16064] netlink: 8552 bytes leftover after parsing attributes in process `syz.6.2859'.
[  847.384640][T16076] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  848.105099][T16089] gfs2: gfs2 mount does not exist
[  848.461148][T16093] loop6: detected capacity change from 0 to 40427
[  848.500599][T16094] input: syz1 as /devices/virtual/input/input37
[  848.616386][T16093] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  848.623449][T16093] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  848.632617][T16093] F2FS-fs (loop6): build fault injection type: 0x0
[  848.696746][T16093] F2FS-fs (loop6): invalid crc value
[  848.769117][T16093] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  848.777009][T16093] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  848.814148][T16093] F2FS-fs (loop6): build fault injection type: 0x0
[  848.856760][T16093] syz.6.2867: attempt to access beyond end of device
[  848.856760][T16093] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  848.871693][T16093] CPU: 0 UID: 0 PID: 16093 Comm: syz.6.2867 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  848.871713][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  848.871723][T16093] Call Trace:
[  848.871729][T16093]  <TASK>
[  848.871735][T16093]  dump_stack_lvl+0x189/0x250
[  848.871759][T16093]  ? __pfx_dump_stack_lvl+0x10/0x10
[  848.871773][T16093]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  848.871786][T16093]  ? __pfx_queue_work_on+0x10/0x10
[  848.871797][T16093]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  848.871808][T16093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  848.871820][T16093]  ? f2fs_hw_is_readonly+0x39b/0x470
[  848.871835][T16093]  f2fs_handle_critical_error+0x37c/0x540
[  848.871852][T16093]  f2fs_write_end_io+0x495/0x810
[  848.871866][T16093]  ? blkg_put+0x22/0x240
[  848.871887][T16093]  __submit_merged_bio+0x27a/0x6a0
[  848.871903][T16093]  __submit_merged_write_cond+0x255/0x530
[  848.871919][T16093]  f2fs_write_data_pages+0x261d/0x3000
[  848.871953][T16093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  848.872008][T16093]  ? __lock_acquire+0xab9/0xd20
[  848.872026][T16093]  ? do_raw_spin_lock+0x121/0x290
[  848.872044][T16093]  ? do_raw_spin_unlock+0x122/0x240
[  848.872056][T16093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  848.872070][T16093]  do_writepages+0x32b/0x550
[  848.872092][T16093]  ? do_raw_spin_unlock+0x122/0x240
[  848.872106][T16093]  filemap_fdatawrite+0x199/0x240
[  848.872117][T16093]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  848.872154][T16093]  ? do_raw_spin_unlock+0x122/0x240
[  848.872168][T16093]  f2fs_sync_dirty_inodes+0x31f/0x830
[  848.872191][T16093]  f2fs_write_checkpoint+0x95a/0x1df0
[  848.872220][T16093]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  848.872257][T16093]  ? down_write+0x162/0x1f0
[  848.872270][T16093]  ? __pfx_down_write+0x10/0x10
[  848.872282][T16093]  ? do_sys_openat2+0x121/0x1c0
[  848.872294][T16093]  ? do_syscall_64+0xfa/0x3b0
[  848.872306][T16093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.872321][T16093]  f2fs_issue_checkpoint+0x3ac/0x570
[  848.872357][T16093]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  848.872378][T16093]  ? do_raw_spin_lock+0x121/0x290
[  848.872396][T16093]  ? __pfx_wake_up_var+0x10/0x10
[  848.872416][T16093]  ? f2fs_sync_fs+0x200/0x3d0
[  848.872430][T16093]  f2fs_create+0x44b/0x5c0
[  848.872448][T16093]  ? __pfx_f2fs_create+0x10/0x10
[  848.872465][T16093]  path_openat+0x14f1/0x3830
[  848.872479][T16093]  ? arch_stack_walk+0xfc/0x150
[  848.872511][T16093]  ? __pfx_path_openat+0x10/0x10
[  848.872524][T16093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.872547][T16093]  do_filp_open+0x1fa/0x410
[  848.872560][T16093]  ? __lock_acquire+0xab9/0xd20
[  848.872575][T16093]  ? __pfx_do_filp_open+0x10/0x10
[  848.872603][T16093]  ? _raw_spin_unlock+0x28/0x50
[  848.872613][T16093]  ? alloc_fd+0x64c/0x6c0
[  848.872631][T16093]  do_sys_openat2+0x121/0x1c0
[  848.872644][T16093]  ? __se_sys_futex+0x36f/0x400
[  848.872656][T16093]  ? __pfx_do_sys_openat2+0x10/0x10
[  848.872673][T16093]  ? rcu_is_watching+0x15/0xb0
[  848.872691][T16093]  __x64_sys_openat+0x138/0x170
[  848.872707][T16093]  do_syscall_64+0xfa/0x3b0
[  848.872722][T16093]  ? lockdep_hardirqs_on+0x9c/0x150
[  848.872733][T16093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.872743][T16093]  ? clear_bhb_loop+0x60/0xb0
[  848.872755][T16093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.872773][T16093] RIP: 0033:0x7f9581d8e929
[  848.872789][T16093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  848.872799][T16093] RSP: 002b:00007f9582b71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  848.872811][T16093] RAX: ffffffffffffffda RBX: 00007f9581fb5fa0 RCX: 00007f9581d8e929
[  848.872819][T16093] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  848.872826][T16093] RBP: 00007f9581e10b39 R08: 0000000000000000 R09: 0000000000000000
[  848.872833][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  848.872840][T16093] R13: 0000000000000000 R14: 00007f9581fb5fa0 R15: 00007ffec5568cf8
[  848.872858][T16093]  </TASK>
[  848.872863][T16093] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  849.303710][T16100] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2868'.
[  851.395606][T16122] netlink: 8552 bytes leftover after parsing attributes in process `syz.0.2875'.
[  853.186317][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'.
[  853.306051][T16148] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  855.851502][T16174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2891'.
[  856.891157][T16182] netlink: 8552 bytes leftover after parsing attributes in process `syz.7.2893'.
[  858.291233][T16207] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2903'.
[  859.345265][ T5836] Bluetooth: hci6: link tx timeout
[  859.352244][ T5836] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  859.732140][T16236] loop5: detected capacity change from 0 to 128
[  859.747769][T16236] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  859.769338][T16232] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  860.372401][T16236] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  860.665709][T16247] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2916'.
[  861.425147][ T5836] Bluetooth: hci6: command 0x0406 tx timeout
[  861.895223][T16251] netlink: 8552 bytes leftover after parsing attributes in process `syz.0.2914'.
[  862.979800][T16256] loop3: detected capacity change from 0 to 40427
[  862.991993][T16256] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  862.999040][T16256] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  863.018989][T16256] F2FS-fs (loop3): build fault injection type: 0x0
[  863.063113][T16256] F2FS-fs (loop3): invalid crc value
[  863.136690][T16258] binder: BINDER_SET_CONTEXT_MGR already set
[  863.142787][T16258] binder: 16257:16258 ioctl 4018620d 200000000040 returned -16
[  863.151424][T16258] binder: 16257:16258 ioctl c0306201 2000000003c0 returned -14
[  863.284259][T16256] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  863.291733][T16256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  863.304414][T16256] F2FS-fs (loop3): build fault injection type: 0x0
[  863.313325][T16256] syz.3.2917: attempt to access beyond end of device
[  863.313325][T16256] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  863.327771][T16256] CPU: 0 UID: 0 PID: 16256 Comm: syz.3.2917 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  863.327788][T16256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  863.327795][T16256] Call Trace:
[  863.327800][T16256]  <TASK>
[  863.327804][T16256]  dump_stack_lvl+0x189/0x250
[  863.327828][T16256]  ? __pfx_dump_stack_lvl+0x10/0x10
[  863.327842][T16256]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  863.327855][T16256]  ? __pfx_queue_work_on+0x10/0x10
[  863.327866][T16256]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  863.327877][T16256]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  863.327889][T16256]  ? f2fs_hw_is_readonly+0x39b/0x470
[  863.327905][T16256]  f2fs_handle_critical_error+0x37c/0x540
[  863.327921][T16256]  f2fs_write_end_io+0x495/0x810
[  863.327934][T16256]  ? blkg_put+0x22/0x240
[  863.327954][T16256]  __submit_merged_bio+0x27a/0x6a0
[  863.327971][T16256]  __submit_merged_write_cond+0x255/0x530
[  863.327987][T16256]  f2fs_write_data_pages+0x261d/0x3000
[  863.328020][T16256]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  863.328059][T16256]  ? __mod_zone_page_state+0xd7/0x140
[  863.328080][T16256]  ? folios_put_refs+0x560/0x640
[  863.328110][T16256]  ? __lock_acquire+0xab9/0xd20
[  863.328130][T16256]  ? do_raw_spin_lock+0x121/0x290
[  863.328149][T16256]  ? do_raw_spin_unlock+0x122/0x240
[  863.328161][T16256]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  863.328175][T16256]  do_writepages+0x32b/0x550
[  863.328199][T16256]  ? do_raw_spin_unlock+0x122/0x240
[  863.328213][T16256]  filemap_fdatawrite+0x199/0x240
[  863.328223][T16256]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  863.328261][T16256]  ? do_raw_spin_unlock+0x122/0x240
[  863.328275][T16256]  f2fs_sync_dirty_inodes+0x31f/0x830
[  863.328298][T16256]  f2fs_write_checkpoint+0x95a/0x1df0
[  863.328326][T16256]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  863.328365][T16256]  ? down_write+0x162/0x1f0
[  863.328378][T16256]  ? __pfx_down_write+0x10/0x10
[  863.328390][T16256]  ? do_sys_openat2+0x121/0x1c0
[  863.328403][T16256]  ? do_syscall_64+0xfa/0x3b0
[  863.328415][T16256]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.328431][T16256]  f2fs_issue_checkpoint+0x3ac/0x570
[  863.328447][T16256]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  863.328467][T16256]  ? do_raw_spin_lock+0x121/0x290
[  863.328484][T16256]  ? __pfx_wake_up_var+0x10/0x10
[  863.328504][T16256]  ? f2fs_sync_fs+0x200/0x3d0
[  863.328518][T16256]  f2fs_create+0x44b/0x5c0
[  863.328535][T16256]  ? __pfx_f2fs_create+0x10/0x10
[  863.328547][T16256]  path_openat+0x14f1/0x3830
[  863.328560][T16256]  ? arch_stack_walk+0xfc/0x150
[  863.328591][T16256]  ? __pfx_path_openat+0x10/0x10
[  863.328603][T16256]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.328626][T16256]  do_filp_open+0x1fa/0x410
[  863.328639][T16256]  ? __lock_acquire+0xab9/0xd20
[  863.328653][T16256]  ? __pfx_do_filp_open+0x10/0x10
[  863.328681][T16256]  ? _raw_spin_unlock+0x28/0x50
[  863.328691][T16256]  ? alloc_fd+0x64c/0x6c0
[  863.328709][T16256]  do_sys_openat2+0x121/0x1c0
[  863.328721][T16256]  ? __se_sys_futex+0x36f/0x400
[  863.328733][T16256]  ? __pfx_do_sys_openat2+0x10/0x10
[  863.328750][T16256]  ? rcu_is_watching+0x15/0xb0
[  863.328768][T16256]  __x64_sys_openat+0x138/0x170
[  863.328784][T16256]  do_syscall_64+0xfa/0x3b0
[  863.328795][T16256]  ? lockdep_hardirqs_on+0x9c/0x150
[  863.328807][T16256]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.328817][T16256]  ? clear_bhb_loop+0x60/0xb0
[  863.328829][T16256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.328839][T16256] RIP: 0033:0x7ff7bf38e929
[  863.328850][T16256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  863.328859][T16256] RSP: 002b:00007ff7c01cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  863.328871][T16256] RAX: ffffffffffffffda RBX: 00007ff7bf5b5fa0 RCX: 00007ff7bf38e929
[  863.328878][T16256] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  863.328885][T16256] RBP: 00007ff7bf410b39 R08: 0000000000000000 R09: 0000000000000000
[  863.328891][T16256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  863.328898][T16256] R13: 0000000000000000 R14: 00007ff7bf5b5fa0 R15: 00007ffd09f3e398
[  863.328916][T16256]  </TASK>
[  863.328921][T16256] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  864.945080][T16276] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2924'.
[  865.059649][T16280] lo speed is unknown, defaulting to 1000
[  865.377134][T16291] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2928'.
[  865.653206][T16297] lo speed is unknown, defaulting to 1000
[  866.665669][ T5973] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  867.383746][ T5973] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  867.509788][T16317] netlink: 8552 bytes leftover after parsing attributes in process `syz.3.2934'.
[  867.624832][ T5973] usb 6-1: config 0 interface 0 has no altsetting 0
[  867.827788][ T5973] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  867.857189][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.910891][ T5973] usb 6-1: Product: syz
[  867.916864][ T5973] usb 6-1: Manufacturer: syz
[  867.925250][ T5973] usb 6-1: SerialNumber: syz
[  867.938593][ T5973] usb 6-1: config 0 descriptor??
[  867.954638][ T5973] usb 6-1: selecting invalid altsetting 0
[  868.161397][ T5973] usb 6-1: USB disconnect, device number 26
[  869.364219][T16281] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  869.417702][T16316] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  869.605464][T16334] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2941'.
[  869.824230][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  869.843494][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  869.856932][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  869.879355][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  869.915424][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  870.071306][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  870.082688][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  870.131633][T16344] gtp0: entered promiscuous mode
[  870.369970][T16340] lo speed is unknown, defaulting to 1000
[  871.986228][ T5843] Bluetooth: hci0: command tx timeout
[  872.309312][T16379] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2953'.
[  872.558952][T16340] chnl_net:caif_netlink_parms(): no params data found
[  872.665837][T16387] netlink: zone id is out of range
[  872.675539][T16387] netlink: zone id is out of range
[  872.684933][T16387] netlink: zone id is out of range
[  872.693566][T16387] netlink: zone id is out of range
[  872.699721][T16387] netlink: zone id is out of range
[  872.720671][T16387] netlink: zone id is out of range
[  872.925021][T16387] netlink: set zone limit has 4 unknown bytes
[  873.353039][T16391] gtp0: entered promiscuous mode
[  873.731136][T16340] bridge0: port 1(bridge_slave_0) entered blocking state
[  873.752805][T16340] bridge0: port 1(bridge_slave_0) entered disabled state
[  873.775776][T16340] bridge_slave_0: entered allmulticast mode
[  873.783538][T16340] bridge_slave_0: entered promiscuous mode
[  873.795869][T16340] bridge0: port 2(bridge_slave_1) entered blocking state
[  873.815102][T16340] bridge0: port 2(bridge_slave_1) entered disabled state
[  873.822275][ T5898] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  873.830289][T16340] bridge_slave_1: entered allmulticast mode
[  873.839765][T16340] bridge_slave_1: entered promiscuous mode
[  873.893733][T16340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  873.907944][T16340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  873.917506][T16408] lo speed is unknown, defaulting to 1000
[  873.982863][T16340] team0: Port device team_slave_0 added
[  873.989572][ T5898] usb 6-1: Using ep0 maxpacket: 8
[  873.997786][ T5898] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  874.008073][ T5898] usb 6-1: config 179 has no interface number 0
[  874.014444][ T5898] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  874.025798][ T5898] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  874.037294][ T5898] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  874.050241][T16340] team0: Port device team_slave_1 added
[  874.062489][ T5898] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  874.075217][ T5843] Bluetooth: hci0: command tx timeout
[  874.076689][ T5898] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  874.199215][ T5898] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  874.225755][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.300355][T16398] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  874.736450][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  874.744785][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  874.756214][ T5898] usb 6-1: USB disconnect, device number 27
[  874.854124][T16421] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2965'.
[  875.043170][T16340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  875.051061][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  875.091549][T16340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  875.105259][T16428] bridge_slave_0: left allmulticast mode
[  875.111022][T16428] bridge_slave_0: left promiscuous mode
[  875.118921][T16428] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.149947][T16428] bridge_slave_1: left allmulticast mode
[  875.156618][T16428] bridge_slave_1: left promiscuous mode
[  875.163105][T16428] bridge0: port 2(bridge_slave_1) entered disabled state
[  875.175604][T16428] bond0: (slave bond_slave_0): Releasing backup interface
[  875.196971][T16428] bond0: (slave bond_slave_1): Releasing backup interface
[  875.211389][T16428] team0: Port device team_slave_0 removed
[  875.222847][T16428] team0: Port device team_slave_1 removed
[  875.229336][T16428] batman_adv: batadv0: Removing interface: batadv_slave_0
[  875.247529][T16428] batman_adv: batadv0: Removing interface: batadv_slave_1
[  875.261262][T16428] team0: Port device geneve1 removed
[  875.281860][T16340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  875.292430][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  875.357280][T16340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  875.490059][T16433] gtp0: entered promiscuous mode
[  875.599298][T16340] hsr_slave_0: entered promiscuous mode
[  875.627999][T16340] hsr_slave_1: entered promiscuous mode
[  875.634113][T16340] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  875.651167][T16340] Cannot create hsr debugfs directory
[  876.183936][ T5843] Bluetooth: hci0: command tx timeout
[  876.493637][T16446] lo speed is unknown, defaulting to 1000
[  876.940871][T16465] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2981'.
[  877.065267][T16340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.675095][ T5973] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  877.815078][T16340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.845082][ T5973] usb 7-1: Using ep0 maxpacket: 8
[  877.859571][ T5973] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  877.869164][ T5973] usb 7-1: config 179 has no interface number 0
[  877.882966][ T5973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  877.898011][ T5973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  877.949760][T16340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.966780][ T5973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  877.997540][ T5973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  878.030161][ T5973] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  878.108866][ T5973] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  878.242992][ T5843] Bluetooth: hci0: command tx timeout
[  878.278907][ T5973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.353970][T16340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.428645][T16462] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  878.850376][ T5843] Bluetooth: hci4: unexpected event for opcode 0x0c1c
[  878.948431][ T5994] usb 7-1: USB disconnect, device number 31
[  878.948442][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  878.948579][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  879.101834][T16340] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  879.226363][T16340] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  879.254123][T16340] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  879.286310][T16340] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  879.353636][T16492] lo speed is unknown, defaulting to 1000
[  879.381850][T16506] overlayfs: missing 'lowerdir'
[  880.149262][T16510] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2993'.
[  880.557463][T16340] 8021q: adding VLAN 0 to HW filter on device bond0
[  880.638320][T16340] 8021q: adding VLAN 0 to HW filter on device team0
[  880.671727][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.678961][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state
[  880.785892][T16527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2996'.
[  880.840421][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.847674][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  881.020411][T16340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  881.065521][ T5898] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  881.304977][ T5898] usb 7-1: Using ep0 maxpacket: 8
[  881.316035][ T5898] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  881.324510][ T5898] usb 7-1: config 179 has no interface number 0
[  881.614827][ T5898] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  881.636417][ T5898] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  881.665376][ T5898] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  881.701724][ T5898] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  881.723937][ T5898] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  881.741273][ T5898] usb 7-1: config 179 interface 65 has no altsetting 0
[  881.749698][ T5898] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  881.762348][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.813750][ T5898] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input38
[  881.905473][ T5187] input input38: unable to receive magic message: -110
[  882.002873][ T5187] input input38: unable to receive magic message: -71
[  882.171630][ T5898] usb 7-1: USB disconnect, device number 32
[  882.171705][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  882.171756][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  882.177377][ T5187] input input38: unable to receive magic message: -71
[  882.197013][ T5898] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  882.778732][T16340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  882.909279][T16543] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  882.932411][ T5973] IPVS: starting estimator thread 0...
[  883.055003][T16548] IPVS: using max 32 ests per chain, 76800 per kthread
[  883.107480][T16340] veth0_vlan: entered promiscuous mode
[  883.129466][T16340] veth1_vlan: entered promiscuous mode
[  883.150614][T16552] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3006'.
[  883.328449][T16340] veth0_macvtap: entered promiscuous mode
[  883.349099][T16340] veth1_macvtap: entered promiscuous mode
[  883.408407][T16340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  883.441183][T16340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  883.514035][T16340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  883.567329][T16340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  883.634879][T16340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  883.643890][T16340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  883.750783][T16565] lo speed is unknown, defaulting to 1000
[  884.085992][T14030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  884.093835][T14030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  884.277968][ T6042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  884.302161][ T6042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  884.611999][T16576] lo speed is unknown, defaulting to 1000
[  884.622053][T16576] lo speed is unknown, defaulting to 1000
[  884.629320][T16576] lo speed is unknown, defaulting to 1000
[  884.669408][T16576] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  884.736946][T16582] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2937'.
[  884.847865][T16576] lo speed is unknown, defaulting to 1000
[  885.000894][T16576] lo speed is unknown, defaulting to 1000
[  885.001674][T16587] netlink: 'syz.5.3018': attribute type 29 has an invalid length.
[  885.008992][T16576] lo speed is unknown, defaulting to 1000
[  885.033024][T16576] lo speed is unknown, defaulting to 1000
[  885.100430][T16589] tmpfs: Unknown parameter 'quot”–l
[  885.100430][T16589] Ra³ÆÈ9“´g­»tpHû}b¹.ç:4
úÎY¦¶™
[  885.100430][T16589] o–{Íeú¢«é¨£9}Ùܼâ&þ­ôl:•'
[  885.245133][T16590] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  885.254036][T16590] overlayfs: missing 'lowerdir'
[  885.604762][T16576] lo speed is unknown, defaulting to 1000
[  885.782263][T16576] lo speed is unknown, defaulting to 1000
[  885.879951][T16576] lo speed is unknown, defaulting to 1000
[  886.652389][T16602] 9pnet_virtio: no channels available for device syz
[  886.691210][T12498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  886.705373][T12498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  886.714487][T12498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  886.725749][T12498] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  886.735352][T12498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  887.580655][T16617] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3029'.
[  887.834882][ T1011] bond0 (unregistering): Released all slaves
[  887.851501][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3030'.
[  887.987989][T16614] lo speed is unknown, defaulting to 1000
[  888.007650][T16614] lo speed is unknown, defaulting to 1000
[  888.061342][T16601] lo speed is unknown, defaulting to 1000
[  888.086535][T16601] lo speed is unknown, defaulting to 1000
[  888.164607][T16626] loop3: detected capacity change from 0 to 512
[  888.521532][T16626] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  888.785347][ T5843] Bluetooth: hci2: command tx timeout
[  888.861668][T16626] EXT4-fs (loop3): 1 truncate cleaned up
[  888.876663][T16626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  889.379841][ T5843] Bluetooth: hci5: unexpected event for opcode 0x0803
[  890.479527][T16340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  890.571158][T12498] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  890.632701][T12498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  890.653428][T12498] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  890.878488][ T5836] Bluetooth: hci2: command tx timeout
[  890.899097][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  890.902022][T16673] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3041'.
[  890.909423][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  891.490664][ T5994] usb 6-1: new full-speed USB device number 28 using dummy_hcd
[  891.734146][ T5994] usb 6-1: config 7 has an invalid interface number: 192 but max is 0
[  891.763309][ T5994] usb 6-1: config 7 has no interface number 0
[  891.788116][ T5994] usb 6-1: config 7 interface 192 has no altsetting 0
[  891.819131][ T5994] usb 6-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d
[  891.848475][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.892686][ T5994] usb 6-1: Product: syz
[  892.116671][ T5994] usb 6-1: Manufacturer: syz
[  892.223349][ T5994] usb 6-1: SerialNumber: syz
[  892.954816][ T5836] Bluetooth: hci2: command tx timeout
[  893.030888][ T5836] Bluetooth: hci1: command tx timeout
[  893.104630][T16601] chnl_net:caif_netlink_parms(): no params data found
[  893.797481][ T5994] usb 6-1: USB disconnect, device number 28
[  893.944177][T16685] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3042'.
[  894.286353][T16685] batadv1: entered allmulticast mode
[  895.163147][T16660] lo speed is unknown, defaulting to 1000
[  895.186667][ T5836] Bluetooth: hci2: command tx timeout
[  895.196272][ T5836] Bluetooth: hci1: command tx timeout
[  895.277522][T16660] lo speed is unknown, defaulting to 1000
[  895.542502][ T1011] hsr_slave_0: left promiscuous mode
[  895.576732][T16708] binder_alloc: 16707: binder_alloc_buf, no vma
[  895.583172][ T1011] hsr_slave_1: left promiscuous mode
[  895.698044][T16708] binder: 16707:16708 ioctl 89ea 200000000100 returned -22
[  895.730763][T16708] binder: 16707:16708 ioctl 4400ae8f 200000000780 returned -22
[  895.829441][T16713] 9pnet_virtio: no channels available for device syz
[  896.688229][T16724] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3050'.
[  896.983017][T16729] 9pnet_virtio: no channels available for device syz
[  897.272189][ T5836] Bluetooth: hci1: command tx timeout
[  898.837455][T16601] bridge0: port 1(bridge_slave_0) entered blocking state
[  898.850768][T16601] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.862333][T16601] bridge_slave_0: entered allmulticast mode
[  898.901331][T16601] bridge_slave_0: entered promiscuous mode
[  898.914518][T16601] bridge0: port 2(bridge_slave_1) entered blocking state
[  898.929165][T16601] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.936791][T16601] bridge_slave_1: entered allmulticast mode
[  898.947377][T16601] bridge_slave_1: entered promiscuous mode
[  899.221567][T16601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  899.311021][T16601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  899.348022][ T5836] Bluetooth: hci1: command tx timeout
[  899.644625][T16601] team0: Port device team_slave_0 added
[  899.686174][T16601] team0: Port device team_slave_1 added
[  899.997265][T16601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  900.025024][T16601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  900.215041][T16601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  900.243804][T16601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  900.251129][T16601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  900.927862][T16763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  900.964790][T16601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  901.418595][T16601] hsr_slave_0: entered promiscuous mode
[  901.458354][T16601] hsr_slave_1: entered promiscuous mode
[  901.493733][T16660] chnl_net:caif_netlink_parms(): no params data found
[  902.347836][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  902.360053][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  902.368465][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  902.376807][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  902.388818][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  903.075478][T16801] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3070'.
[  903.249747][T16785] lo speed is unknown, defaulting to 1000
[  903.254206][T16660] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.294047][T16660] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.320630][T16660] bridge_slave_0: entered allmulticast mode
[  903.352274][T16660] bridge_slave_0: entered promiscuous mode
[  903.906857][T16785] lo speed is unknown, defaulting to 1000
[  903.929533][T16660] bridge0: port 2(bridge_slave_1) entered blocking state
[  903.937349][T16660] bridge0: port 2(bridge_slave_1) entered disabled state
[  903.944619][T16660] bridge_slave_1: entered allmulticast mode
[  903.953273][T16660] bridge_slave_1: entered promiscuous mode
[  904.129803][T16819] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3072'.
[  904.196914][T16660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  904.295346][T16660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  904.427058][T16826] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3073'.
[  904.469148][ T5836] Bluetooth: hci3: command tx timeout
[  904.519699][T16660] team0: Port device team_slave_0 added
[  904.532827][T16660] team0: Port device team_slave_1 added
[  904.654535][T16601] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  904.705454][T16601] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  904.771436][T16601] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  904.845901][T16660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  904.858911][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  904.973071][T16660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  905.427174][T16660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  905.475919][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  905.572946][T16660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  905.648203][T16601] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  905.775056][ T5973] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  905.952164][ T5973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  906.003460][ T5973] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  906.033076][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.108784][ T5973] usb 4-1: config 0 descriptor??
[  906.142906][ T5973] pwc: Askey VC010 type 2 USB webcam detected.
[  906.483580][T16660] hsr_slave_0: entered promiscuous mode
[  906.497880][T16660] hsr_slave_1: entered promiscuous mode
[  906.511415][T16660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  906.523063][T16660] Cannot create hsr debugfs directory
[  906.545066][ T5836] Bluetooth: hci3: command tx timeout
[  906.575736][ T5973] pwc: recv_control_msg error -32 req 02 val 2b00
[  906.584231][ T5973] pwc: recv_control_msg error -32 req 02 val 2700
[  906.652017][ T5973] pwc: recv_control_msg error -32 req 02 val 2c00
[  906.678258][ T5973] pwc: recv_control_msg error -32 req 04 val 1000
[  906.688691][ T5973] pwc: recv_control_msg error -32 req 04 val 1300
[  907.312451][   T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.433358][T16785] chnl_net:caif_netlink_parms(): no params data found
[  907.459107][ T5973] pwc: recv_control_msg error -32 req 04 val 1400
[  907.466523][ T5973] pwc: recv_control_msg error -32 req 02 val 2000
[  907.473745][ T5973] pwc: recv_control_msg error -32 req 02 val 2100
[  907.486335][ T5973] pwc: recv_control_msg error -32 req 04 val 1500
[  907.494081][ T5973] pwc: recv_control_msg error -32 req 02 val 2500
[  907.504167][ T5973] pwc: recv_control_msg error -32 req 02 val 2400
[  907.512457][ T5973] pwc: recv_control_msg error -32 req 02 val 2600
[  907.519875][ T5973] pwc: recv_control_msg error -32 req 02 val 2900
[  907.527561][ T5973] pwc: recv_control_msg error -32 req 02 val 2800
[  907.535516][ T5973] pwc: recv_control_msg error -32 req 04 val 1100
[  907.555580][ T5973] pwc: Registered as video103.
[  907.575498][ T5973] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39
[  907.595993][T16870] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3080'.
[  907.693168][   T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.761826][T16573] usb 4-1: USB disconnect, device number 29
[  907.848145][   T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.071118][   T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.222258][T16785] bridge0: port 1(bridge_slave_0) entered blocking state
[  908.238180][T16785] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.249863][T16785] bridge_slave_0: entered allmulticast mode
[  908.262909][T16785] bridge_slave_0: entered promiscuous mode
[  908.353498][T16785] bridge0: port 2(bridge_slave_1) entered blocking state
[  908.393544][T16785] bridge0: port 2(bridge_slave_1) entered disabled state
[  908.420212][T16785] bridge_slave_1: entered allmulticast mode
[  908.454919][T16785] bridge_slave_1: entered promiscuous mode
[  908.584013][T16886] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3084'.
[  908.625616][ T5836] Bluetooth: hci3: command tx timeout
[  908.854295][T16785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  908.940286][T16785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  909.257371][T16785] team0: Port device team_slave_0 added
[  909.280679][T16785] team0: Port device team_slave_1 added
[  909.363718][   T36] bridge_slave_1: left allmulticast mode
[  909.372573][   T36] bridge_slave_1: left promiscuous mode
[  909.395427][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.442037][   T36] bridge_slave_0: left allmulticast mode
[  909.450323][   T36] bridge_slave_0: left promiscuous mode
[  909.468513][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.508491][   T36] bridge_slave_1: left promiscuous mode
[  909.534986][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.555057][   T36] bridge_slave_0: left promiscuous mode
[  909.560843][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.579438][   T36] bridge_slave_1: left allmulticast mode
[  909.594415][   T36] bridge_slave_1: left promiscuous mode
[  909.608412][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.645503][   T36] bridge_slave_0: left allmulticast mode
[  909.652287][   T36] bridge_slave_0: left promiscuous mode
[  910.037892][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.705153][ T5836] Bluetooth: hci3: command tx timeout
[  910.775477][T16916] netlink: zone id is out of range
[  910.783114][T16916] netlink: zone id is out of range
[  910.789702][T16916] netlink: zone id is out of range
[  910.797782][T16916] netlink: zone id is out of range
[  910.803966][T16916] netlink: zone id is out of range
[  910.809679][T16916] netlink: zone id is out of range
[  910.939115][T16916] netlink: set zone limit has 4 unknown bytes
[  912.587905][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  912.607008][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  912.628749][   T36] bond0 (unregistering): Released all slaves
[  912.986189][   T36] geneve1 (unregistering): left allmulticast mode
[  913.006519][   T36] team0: Port device geneve1 removed
[  913.063039][   T36] batman_adv: batadv0: Interface deactivated: macsec1
[  913.090661][   T36] batman_adv: batadv0: Removing interface: macsec1
[  913.247185][T16931] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3093'.
[  913.359195][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  913.371614][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  913.384181][   T36] bond0 (unregistering): Released all slaves
[  913.644055][T16935] loop3: detected capacity change from 0 to 1024
[  913.660486][T16935] hfsplus: Unknown parameter 'cr/ator'
[  913.949877][   T36] bond1 (unregistering): (slave geneve2): Releasing active interface
[  913.963613][   T36] geneve2 (unregistering): left promiscuous mode
[  914.281605][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  914.293625][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  914.304201][   T36] bond0 (unregistering): Released all slaves
[  914.509053][   T36] bond1 (unregistering): Released all slaves
[  914.560266][T16785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  914.573996][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  914.603147][T16785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  914.628020][T16785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  914.635348][T16785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  914.681521][T16785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  915.088853][T16785] hsr_slave_0: entered promiscuous mode
[  915.099283][T16785] hsr_slave_1: entered promiscuous mode
[  915.116026][T16785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  915.123607][T16785] Cannot create hsr debugfs directory
[  915.299765][T16601] 8021q: adding VLAN 0 to HW filter on device bond0
[  915.350972][T16660] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  915.611911][T16660] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  915.721961][T16947] Bluetooth: MGMT ver 1.23
[  916.299786][T16601] 8021q: adding VLAN 0 to HW filter on device team0
[  916.358720][T16660] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  916.407223][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state
[  916.414391][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state
[  916.414943][T16949] binder: 16948:16949 ioctl c0306201 2000000003c0 returned -14
[  916.434274][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state
[  916.441437][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  916.475277][T16660] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  917.200814][T16601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  917.221648][T16601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  917.664299][T16981] loop3: detected capacity change from 0 to 16
[  917.767868][T16981] erofs (device loop3): mounted with root inode @ nid 36.
[  918.164142][T16660] 8021q: adding VLAN 0 to HW filter on device bond0
[  918.368227][T16601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  918.398061][T16660] 8021q: adding VLAN 0 to HW filter on device team0
[  918.530483][T16785] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  918.681664][T14300] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.688884][T14300] bridge0: port 1(bridge_slave_0) entered forwarding state
[  918.730056][T14300] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.737362][T14300] bridge0: port 2(bridge_slave_1) entered forwarding state
[  918.836105][T16785] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  918.995257][T16785] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  919.115994][T16785] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  919.368409][T17007] loop3: detected capacity change from 0 to 1024
[  919.419441][T17007] hfsplus: Unknown parameter 'cr/ator'
[  920.240115][T17027] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3106'.
[  920.276639][   T36] hsr_slave_0: left promiscuous mode
[  920.295755][   T36] hsr_slave_1: left promiscuous mode
[  920.301644][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  920.319280][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  920.331885][   T36] hsr_slave_0: left promiscuous mode
[  920.338420][   T36] hsr_slave_1: left promiscuous mode
[  920.345246][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  920.352912][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  920.361398][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  920.371067][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  920.380951][   T36] hsr_slave_0: left promiscuous mode
[  920.387674][   T36] hsr_slave_1: left promiscuous mode
[  920.393498][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  920.401688][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  920.409818][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  920.417977][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  920.455256][   T36] veth1_macvtap: left promiscuous mode
[  920.460815][   T36] veth0_macvtap: left promiscuous mode
[  920.470203][   T36] veth1_macvtap: left promiscuous mode
[  920.476502][   T36] veth0_macvtap: left promiscuous mode
[  920.991722][   T36] team0 (unregistering): Port device team_slave_1 removed
[  921.087382][   T36] team0 (unregistering): Port device team_slave_0 removed
[  921.944387][   T36] team0 (unregistering): Port device team_slave_1 removed
[  921.996355][   T36] team0 (unregistering): Port device team_slave_0 removed
[  922.920132][   T36] team0 (unregistering): Port device team_slave_1 removed
[  922.977818][   T36] team0 (unregistering): Port device team_slave_0 removed
[  923.554260][ T5973] lo speed is unknown, defaulting to 1000
[  923.573534][ T5973] infiniband syz0: ib_query_port failed (-19)
[  923.684218][T16601] veth0_vlan: entered promiscuous mode
[  923.764626][T16660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  923.996293][T16785] 8021q: adding VLAN 0 to HW filter on device bond0
[  924.012707][T16601] veth1_vlan: entered promiscuous mode
[  924.175307][  T979] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  924.212940][T16785] 8021q: adding VLAN 0 to HW filter on device team0
[  924.295219][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.302387][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state
[  924.342389][  T979] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  924.383271][  T979] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  924.384299][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.400237][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  924.421732][  T979] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  924.450902][  T979] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  924.488828][  T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.497661][T16601] veth0_macvtap: entered promiscuous mode
[  924.512894][  T979] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  924.682281][T16601] veth1_macvtap: entered promiscuous mode
[  924.759221][T16601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  924.789061][T16601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  924.809851][T16601] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  924.829788][T16601] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  924.846050][T16601] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  924.878152][T16601] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  924.972739][T16785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  925.023530][T16785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  925.114654][  T979] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12
[  925.470999][  T979] usb 4-1: USB disconnect, device number 30
[  925.754530][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  925.766063][T16660] veth0_vlan: entered promiscuous mode
[  925.801377][T16660] veth1_vlan: entered promiscuous mode
[  925.815114][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  925.906731][T16660] veth0_macvtap: entered promiscuous mode
[  925.935721][T16660] veth1_macvtap: entered promiscuous mode
[  926.036490][   T36] IPVS: stop unused estimator thread 0...
[  926.111706][T14300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  926.113227][T16660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  926.145002][T14300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  926.232293][T16660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  926.249255][T16785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  926.281809][T16660] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  926.307127][T16660] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  926.325731][T16660] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  926.334460][T16660] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  926.372481][T17071] loop3: detected capacity change from 0 to 16
[  926.451835][T17071] erofs (device loop3): mounted with root inode @ nid 36.
[  927.022251][ T6042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  927.057420][ T6042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  927.197720][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  927.242525][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  927.612513][T16785] veth0_vlan: entered promiscuous mode
[  927.657671][T16785] veth1_vlan: entered promiscuous mode
[  927.843098][T16785] veth0_macvtap: entered promiscuous mode
[  927.859118][T16785] veth1_macvtap: entered promiscuous mode
[  927.891751][T16785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  927.940027][T16785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  928.047645][T16785] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  928.074729][T16785] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  928.083463][T16785] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  928.104925][T16785] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  928.275089][ T6042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  928.301152][ T6042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  928.343748][   T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.628723][   T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.703285][ T6042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  928.724458][ T6042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  928.853390][   T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.107751][ T5836] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  929.115797][ T5843] Bluetooth: hci4: command 0xfc11 tx timeout
[  929.168607][   T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.315818][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  929.355251][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  929.365751][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  929.385155][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  929.394071][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  929.535545][T17127] lo speed is unknown, defaulting to 1000
[  930.255493][   T49] bridge_slave_1: left allmulticast mode
[  930.286211][   T49] bridge_slave_1: left promiscuous mode
[  930.292007][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  930.397303][   T49] bridge_slave_0: left allmulticast mode
[  930.457397][   T49] bridge_slave_0: left promiscuous mode
[  930.472783][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.144266][T17153] loop8: detected capacity change from 0 to 16
[  931.172401][T17153] erofs (device loop8): mounted with root inode @ nid 36.
[  931.477919][ T5843] Bluetooth: hci1: command tx timeout
[  931.512662][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  931.520707][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  932.431912][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  932.495647][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  932.510184][   T49] bond0 (unregistering): Released all slaves
[  932.617879][ T5973] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  932.816858][ T5973] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  932.832478][ T5973] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  932.843726][ T5973] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.856939][ T5973] usb 9-1: config 0 descriptor??
[  932.880150][ T5973] pwc: Askey VC010 type 2 USB webcam detected.
[  933.250342][   T49] hsr_slave_0: left promiscuous mode
[  933.273892][ T5973] pwc: recv_control_msg error -32 req 02 val 2b00
[  933.281202][   T49] hsr_slave_1: left promiscuous mode
[  933.289437][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  933.290197][ T5973] pwc: recv_control_msg error -32 req 02 val 2700
[  933.307786][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  933.315123][ T5973] pwc: recv_control_msg error -32 req 02 val 2c00
[  933.324021][ T5973] pwc: recv_control_msg error -32 req 04 val 1000
[  933.324491][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  933.355024][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  933.406220][   T49] veth1_macvtap: left promiscuous mode
[  933.411797][   T49] veth0_macvtap: left promiscuous mode
[  933.444984][   T49] veth1_vlan: left promiscuous mode
[  933.450386][   T49] veth0_vlan: left promiscuous mode
[  933.506275][ T5836] Bluetooth: hci1: command tx timeout
[  933.538705][ T5973] pwc: recv_control_msg error -32 req 04 val 1400
[  933.555859][ T5973] pwc: recv_control_msg error -32 req 02 val 2000
[  933.574319][ T5973] pwc: recv_control_msg error -32 req 02 val 2100
[  933.584435][ T5973] pwc: recv_control_msg error -32 req 04 val 1500
[  933.604950][ T5973] pwc: recv_control_msg error -32 req 02 val 2500
[  933.614241][ T5973] pwc: recv_control_msg error -32 req 02 val 2400
[  933.629664][ T5973] pwc: recv_control_msg error -32 req 02 val 2600
[  933.638286][ T5973] pwc: recv_control_msg error -32 req 02 val 2900
[  933.645944][ T5973] pwc: recv_control_msg error -32 req 02 val 2800
[  933.653565][ T5973] pwc: recv_control_msg error -32 req 04 val 1100
[  933.683842][ T5973] pwc: Registered as video103.
[  933.701082][ T5973] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input40
[  933.913930][ T5973] usb 9-1: USB disconnect, device number 2
[  934.176252][T17193] 9pnet_virtio: no channels available for device syz
[  934.197181][T17193] overlayfs: failed to clone upperpath
[  934.220067][T12498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  934.235028][T12498] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  934.245902][T12498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  934.254042][T12498] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  934.287868][T12498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  934.784845][ T5843] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[  935.594828][T12498] Bluetooth: hci1: command tx timeout
[  935.902530][T17212] loop8: detected capacity change from 0 to 1024
[  936.384800][T12498] Bluetooth: hci4: command tx timeout
[  936.634494][T17214] kvm: kvm [17213]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1
[  936.700534][T17214] kvm: kvm [17213]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x81
[  936.765969][T17214] kvm: kvm [17213]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x1
[  936.854503][ T5952] hfsplus: b-tree write err: -5, ino 4
[  937.038395][T17227] 9pnet_virtio: no channels available for device syz
[  937.070347][T17227] overlayfs: failed to clone upperpath
[  937.075991][   T30] audit: type=1800 audit(1750171595.184:22): pid=17226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3150" name="dmabuf" dev="dmabuf" ino=5 res=0 errno=0
[  937.132805][   T49] team0 (unregistering): Port device team_slave_1 removed
[  937.264425][   T49] team0 (unregistering): Port device team_slave_0 removed
[  937.665163][T12498] Bluetooth: hci1: command tx timeout
[  938.082881][ T5898] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  938.260224][ T5898] usb 9-1: Using ep0 maxpacket: 8
[  938.267863][ T5898] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  938.280093][ T5898] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  938.290181][ T5898] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  938.301664][ T5898] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  938.313699][ T5898] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  938.323057][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.339833][ T5898] hub 9-1:1.0: bad descriptor, ignoring hub
[  938.345902][ T5898] hub 9-1:1.0: probe with driver hub failed with error -5
[  938.353622][ T5898] cdc_wdm 9-1:1.0: skipping garbage
[  938.359515][ T5898] cdc_wdm 9-1:1.0: skipping garbage
[  938.375094][ T5898] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  938.382132][ T5898] cdc_wdm 9-1:1.0: Unknown control protocol
[  938.438249][T17127] chnl_net:caif_netlink_parms(): no params data found
[  938.474967][T12498] Bluetooth: hci4: command tx timeout
[  939.556258][T17195] lo speed is unknown, defaulting to 1000
[  940.004329][T17127] bridge0: port 1(bridge_slave_0) entered blocking state
[  940.016729][T17127] bridge0: port 1(bridge_slave_0) entered disabled state
[  940.024310][T17127] bridge_slave_0: entered allmulticast mode
[  940.040394][T17127] bridge_slave_0: entered promiscuous mode
[  940.072644][T17127] bridge0: port 2(bridge_slave_1) entered blocking state
[  940.119404][T17127] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.141188][T17127] bridge_slave_1: entered allmulticast mode
[  940.163611][T17127] bridge_slave_1: entered promiscuous mode
[  940.323221][T17127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  940.391368][T17127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  940.555397][T17127] team0: Port device team_slave_0 added
[  940.566220][T17127] team0: Port device team_slave_1 added
[  940.606780][T12498] Bluetooth: hci4: command tx timeout
[  940.673363][T17127] batman_adv: batadv0: Adding interface: batadv_slave_0
[  940.719268][T17127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  941.277948][T17127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  941.290624][T17127] batman_adv: batadv0: Adding interface: batadv_slave_1
[  941.299097][T17127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  941.331395][T17127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  941.795360][T17127] hsr_slave_0: entered promiscuous mode
[  941.802376][T17127] hsr_slave_1: entered promiscuous mode
[  941.857691][T17127] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  941.884783][T17127] Cannot create hsr debugfs directory
[  941.984415][T17195] chnl_net:caif_netlink_parms(): no params data found
[  942.322252][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.639635][T12498] Bluetooth: hci4: command tx timeout
[  942.792666][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.002261][ T5973] usb 9-1: USB disconnect, device number 3
[  943.008504][T17242] cdc_wdm 9-1:1.0: Error autopm - -16
[  943.058132][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.492680][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.707467][T17195] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.722899][T17195] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.734148][T17195] bridge_slave_0: entered allmulticast mode
[  943.815344][T17195] bridge_slave_0: entered promiscuous mode
[  944.285428][T17195] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.292589][T17195] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.339637][T17195] bridge_slave_1: entered allmulticast mode
[  944.351002][T17195] bridge_slave_1: entered promiscuous mode
[  944.702359][T17195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  944.961387][T17335] loop8: detected capacity change from 0 to 1024
[  946.056785][T17342] xt_CT: You must specify a L4 protocol and not use inversions on it
[  946.791744][T17195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  946.907365][   T36] hfsplus: b-tree write err: -5, ino 4
[  947.274885][T17195] team0: Port device team_slave_0 added
[  947.402262][T17195] team0: Port device team_slave_1 added
[  947.608510][   T49] bridge_slave_1: left allmulticast mode
[  947.628100][T17371] loop8: detected capacity change from 0 to 256
[  947.643402][T17371] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  947.671511][   T49] bridge_slave_1: left promiscuous mode
[  947.684325][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  947.685057][T17371] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  947.737920][   T49] bridge_slave_0: left allmulticast mode
[  947.750842][T17371] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  947.766565][   T49] bridge_slave_0: left promiscuous mode
[  947.772353][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  949.813953][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  949.835008][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  949.856741][   T49] bond0 (unregistering): Released all slaves
[  949.899007][T17195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  949.919485][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  949.945406][    C0] vkms_vblank_simulate: vblank timer overrun
[  949.966303][T17195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  950.006964][T17195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  950.013940][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  950.039900][    C0] vkms_vblank_simulate: vblank timer overrun
[  950.067351][T17195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  950.164926][    C0] ------------[ cut here ]------------
[  950.170704][    C0] kernel BUG at arch/x86/mm/physaddr.c:28!
[  950.176677][    C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  950.182923][    C0] CPU: 0 UID: 0 PID: 17383 Comm: syz.8.3185 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) 
[  950.194450][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  950.204490][    C0] RIP: 0010:__phys_addr+0x16b/0x180
[  950.209680][    C0] Code: 36 b0 00 e9 45 ff ff ff e8 b2 0a 4c 00 48 c7 c7 50 f3 fa 8d 48 89 de 4c 89 f2 e8 a0 85 84 03 e9 4d ff ff ff e8 96 0a 4c 00 90 <0f> 0b e8 8e 0a 4c 00 90 0f 0b e8 86 0a 4c 00 90 0f 0b 0f 1f 00 90
[  950.229275][    C0] RSP: 0018:ffffc90000007b58 EFLAGS: 00010246
[  950.235557][    C0] RAX: ffffffff817460da RBX: 00007780fffd0000 RCX: ffff888029d88000
[  950.243529][    C0] RDX: 0000000000000100 RSI: 000000017ffd0000 RDI: 00007780fffd0000
[  950.251493][    C0] RBP: ffffc90000007e30 R08: 0000000000000000 R09: ffffffff81a8bef4
[  950.259546][    C0] R10: dffffc0000000000 R11: ffffffff89f0c5a0 R12: ffffffff89f0c5a0
[  950.267515][    C0] R13: ffffffff81a8bef4 R14: 000000017ffd0000 R15: dffffc0000000000
[  950.275473][    C0] FS:  00007f966e1b86c0(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000
[  950.284475][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  950.291135][    C0] CR2: 00007ffd749fbfa0 CR3: 000000007ccbe000 CR4: 00000000003526f0
[  950.299100][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  950.307066][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  950.315027][    C0] Call Trace:
[  950.318297][    C0]  <IRQ>
[  950.321130][    C0]  ? in_dev_free_rcu+0x49/0x60
[  950.325886][    C0]  kfree+0x77/0x440
[  950.329690][    C0]  ? __pfx_in_dev_free_rcu+0x10/0x10
[  950.334956][    C0]  ? rcu_core+0xc34/0x1710
[  950.339361][    C0]  in_dev_free_rcu+0x49/0x60
[  950.343953][    C0]  rcu_core+0xca5/0x1710
[  950.348199][    C0]  ? __pfx_rcu_core+0x10/0x10
[  950.352864][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  950.358047][    C0]  ? sched_clock_cpu+0x74/0x430
[  950.362888][    C0]  ? ktime_get+0x3e/0x1f0
[  950.367213][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  950.373525][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  950.378811][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  950.384609][    C0]  handle_softirqs+0x283/0x870
[  950.389364][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  950.394117][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  950.399392][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  950.404577][    C0]  __irq_exit_rcu+0xca/0x1f0
[  950.409161][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  950.414348][    C0]  irq_exit_rcu+0x9/0x30
[  950.418577][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  950.424203][    C0]  </IRQ>
[  950.427117][    C0]  <TASK>
[  950.430029][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  950.435992][    C0] RIP: 0010:lock_acquire+0x175/0x360
[  950.441264][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b cb ff 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  950.460850][    C0] RSP: 0018:ffffc900039c74a0 EFLAGS: 00000206
[  950.466914][    C0] RAX: 260a9930c3264100 RBX: 0000000000000000 RCX: 260a9930c3264100
[  950.474878][    C0] RDX: 0000000000000000 RSI: ffffffff8db79595 RDI: ffffffff8be2efe0
[  950.482835][    C0] RBP: ffffffff8a178752 R08: 0000000000000000 R09: ffffffff8a178752
[  950.490788][    C0] R10: ffffc900039c7620 R11: fffff52000738ec9 R12: 0000000000000000
[  950.498750][    C0] R13: ffff88805e0c9e98 R14: 0000000000000001 R15: 0000000000000246
[  950.506705][    C0]  ? __unix_dgram_recvmsg+0x1e2/0xde0
[  950.512068][    C0]  ? __unix_dgram_recvmsg+0x1e2/0xde0
[  950.517434][    C0]  __mutex_lock+0x182/0xe80
[  950.521926][    C0]  ? __unix_dgram_recvmsg+0x1e2/0xde0
[  950.527285][    C0]  ? __unix_dgram_recvmsg+0xa2f/0xde0
[  950.532645][    C0]  ? __unix_dgram_recvmsg+0x1e2/0xde0
[  950.538004][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  950.543014][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  950.548983][    C0]  __unix_dgram_recvmsg+0x1e2/0xde0
[  950.554182][    C0]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  950.559895][    C0]  ? finish_task_switch+0x266/0x950
[  950.565080][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  950.570267][    C0]  ? unix_dgram_recvmsg+0xb1/0xd0
[  950.575275][    C0]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[  950.580817][    C0]  sock_recvmsg_nosec+0x186/0x1c0
[  950.585834][    C0]  ____sys_recvmsg+0x3aa/0x460
[  950.590586][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  950.595857][    C0]  ? import_iovec+0x74/0xa0
[  950.600347][    C0]  ___sys_recvmsg+0x1b5/0x510
[  950.605006][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  950.610195][    C0]  ? __might_fault+0xb0/0x130
[  950.614858][    C0]  do_recvmmsg+0x307/0x770
[  950.619264][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  950.624190][    C0]  ? count_memcg_event_mm+0x21/0x260
[  950.629464][    C0]  ? count_memcg_event_mm+0x21/0x260
[  950.634746][    C0]  __x64_sys_recvmmsg+0x190/0x240
[  950.639775][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  950.645313][    C0]  ? do_syscall_64+0xbe/0x3b0
[  950.649977][    C0]  do_syscall_64+0xfa/0x3b0
[  950.654464][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  950.659644][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  950.665692][    C0]  ? clear_bhb_loop+0x60/0xb0
[  950.670358][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  950.676232][    C0] RIP: 0033:0x7f966d38e929
[  950.680630][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  950.700216][    C0] RSP: 002b:00007f966e1b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  950.708617][    C0] RAX: ffffffffffffffda RBX: 00007f966d5b6080 RCX: 00007f966d38e929
[  950.716657][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006
[  950.724612][    C0] RBP: 00007f966d410b39 R08: 0000000000000000 R09: 0000000000000000
[  950.732564][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  950.740535][    C0] R13: 0000000000000001 R14: 00007f966d5b6080 R15: 00007ffcc7bd3238
[  950.748500][    C0]  </TASK>
[  950.751513][    C0] Modules linked in:
[  950.755446][    C0] vkms_vblank_simulate: vblank timer overrun
[  950.761460][    C0] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  950.766955][    C0] RIP: 0010:__phys_addr+0x16b/0x180
[  950.772190][    C0] Code: 36 b0 00 e9 45 ff ff ff e8 b2 0a 4c 00 48 c7 c7 50 f3 fa 8d 48 89 de 4c 89 f2 e8 a0 85 84 03 e9 4d ff ff ff e8 96 0a 4c 00 90 <0f> 0b e8 8e 0a 4c 00 90 0f 0b e8 86 0a 4c 00 90 0f 0b 0f 1f 00 90
[  950.791858][    C0] RSP: 0018:ffffc90000007b58 EFLAGS: 00010246
[  950.797980][    C0] RAX: ffffffff817460da RBX: 00007780fffd0000 RCX: ffff888029d88000
[  950.806010][    C0] RDX: 0000000000000100 RSI: 000000017ffd0000 RDI: 00007780fffd0000
[  950.813986][    C0] RBP: ffffc90000007e30 R08: 0000000000000000 R09: ffffffff81a8bef4
[  950.821990][    C0] R10: dffffc0000000000 R11: ffffffff89f0c5a0 R12: ffffffff89f0c5a0
[  950.830044][    C0] R13: ffffffff81a8bef4 R14: 000000017ffd0000 R15: dffffc0000000000
[  950.838156][    C0] FS:  00007f966e1b86c0(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000
[  950.847146][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  950.853746][    C0] CR2: 00007ffd749fbfa0 CR3: 000000007ccbe000 CR4: 00000000003526f0
[  950.861790][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  950.869801][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  950.877824][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  950.885315][    C0] Kernel Offset: disabled
[  950.889624][    C0] Rebooting in 86400 seconds..