last executing test programs:

2m21.519865514s ago: executing program 2 (id=68):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8)

2m20.645769522s ago: executing program 3 (id=69):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x26020400)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/148, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xd27, 0x0, 0x3, 0x54, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7c14}, @alu={0x4, 0x1, 0x4, 0x6, 0x3, 0x2, 0xfffffffffffffffc}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x7, 0x8ee}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000540)=[{0x3, 0x2, 0xa, 0x3}, {0x4, 0x3, 0xe, 0x4}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x5, 0x9, 0xa}, {0x5, 0x3, 0x5, 0xc}, {0x1, 0x1, 0x4, 0x5}, {0x2, 0x2, 0xd}, {0x5, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x0, 0x9}], 0x10, 0x5}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2m20.506608243s ago: executing program 0 (id=70):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0)
r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="aedf3c31", 0x4}], 0x1, 0x14, 0x1})
process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
io_uring_enter(r0, 0x4d13, 0x2, 0x90, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)

2m20.41730097s ago: executing program 3 (id=71):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd1}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x62)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28)

2m20.299667479s ago: executing program 2 (id=72):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000001200000006000100fe0f00000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="44d001d2ed6a3db498f34808", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000001200000006000100fe0f00000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="44d001d2ed6a3db498f34808", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) (async)

2m20.236837414s ago: executing program 0 (id=73):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2000000}, 0x94)

2m20.074127677s ago: executing program 2 (id=74):
socket(0x400000000010, 0x3, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000480)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)

2m19.00056723s ago: executing program 3 (id=77):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f00000001c0)='N', 0x1, 0x80, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000001c0)=0x8)

2m18.922012816s ago: executing program 2 (id=78):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008f000000000000000000008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000004000000400000086000000bf0900000000000055090100004000009500000000000000bd"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x20}, 0x94)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1b90f86c000028006400000402907800000000e000000211009078e0000002000000020000000000000000"], 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet6(0xa, 0x2, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])

2m17.360296697s ago: executing program 1 (id=79):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'team0\x00', 0x200})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000001a40)=ANY=[], 0x17)
write$binfmt_script(r1, &(0x7f0000000540), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8)
r2 = gettid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x1d, &(0x7f00000003c0)={0x18, 0x6, 0x6})
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0)
read$watch_queue(r4, &(0x7f0000000300)=""/176, 0xb0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x108, 0x288, 0xffffffff, 0x288, 0x1e0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x22e}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7f, 0xe, [0x2f, 0x4, 0x3, 0x4, 0x31, 0x2, 0x1, 0x15, 0x21, 0x2c, 0x3e, 0xe, 0x29, 0x3a, 0x0, 0xa], 0x2, 0xd577, 0x300000000000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key=0x7, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @multicast1, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x2, 0x1}}, 0x2e)
connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffe, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0xfffd}}, 0x26)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

2m17.314841831s ago: executing program 0 (id=80):
unshare(0x26020400)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/148, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xd27, 0x0, 0x3, 0x54, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7c14}, @alu={0x4, 0x1, 0x4, 0x6, 0x3, 0x2, 0xfffffffffffffffc}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x7, 0x8ee}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000000540)=[{0x3, 0x2, 0xa, 0x3}, {0x4, 0x3, 0xe, 0x4}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x5, 0x9, 0xa}, {0x5, 0x3, 0x5, 0xc}, {0x1, 0x1, 0x4, 0x5}, {0x2, 0x2, 0xd}, {0x5, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x0, 0x9}], 0x10, 0x5}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2m16.622423925s ago: executing program 3 (id=81):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8)

2m15.715997585s ago: executing program 0 (id=82):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
r0 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

2m14.918254867s ago: executing program 0 (id=83):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x28}, 0x28)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB="04b731489c0804"], 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000008b}, 0x0)
mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x400007)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
socket(0xb, 0x6, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900})
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x3})

2m14.74933179s ago: executing program 3 (id=84):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x1)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_buf(r2, 0x29, 0x1c, &(0x7f0000000080)="f280bcb6208bba5e28101885b67fd49af0aa43da", 0x14)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000700)={r4, 0xffffffffffffffff, 0xe80, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x3}}, 0x1e)
readv(r1, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x19fb8}], 0x1)
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x200000, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
close_range(r0, 0xffffffffffffffff, 0x0)

2m14.724964462s ago: executing program 2 (id=85):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) (async)
syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
getpgrp(0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) (async)
getrlimit(0xb, &(0x7f0000000180)) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) (async)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="137489d2b7adc21800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000020207025180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b7030000ffffffff56000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m14.572545644s ago: executing program 1 (id=86):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfe00}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x4, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)

2m14.247030439s ago: executing program 1 (id=87):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x2010060, &(0x7f0000000440)=ANY=[@ANYBLOB="8a3ab73db78ff5b4c99677cb53610ec0afc6e7be1606bacd9cbbbc346ec909c8c7857de99fc1d1dc5686111c5ab134b7e2c1146a383ea785261b69dc01ea9d27e0a917868030aa4f6fa72071788bdc601248a4b0f9526551875f03878de90d1c4b9060e72e1a570eb656b0b5f3149f850f0078690a64b0dffd8099bb09082dae6d1f8a48720ef7460226b44cda252da29a501d5054d4cc6c5037d1d9aa6d598f58709561bb68a1575464a60cc797dcda55ca6a24a5e6ee13e5a5e8650c37ce8fda2ac110fd9bf9446077c327ade4bf33d21c38680cbdf9a0f2571bd113bf3ef6765f917b6f805ddc", @ANYRESDEC], 0x2, 0xc38, &(0x7f0000001480)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000e80)={0x0, [{0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0xd0, 0x0}, {0x3, 0x0, 0x800401, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x428, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x45, 0xa, 0x0}, {0x1, 0x0, 0xd9d, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0xa, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x8, 0x0}]})
close_range(r0, 0xffffffffffffffff, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r3 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000001040)=ANY=[@ANYBLOB="5a7ddd810036ba00000000000800070000000066000000029078ac1e0001e000040112009078e00000016cec67149af77d3f205ae8a6337bcc940ec30f254da498669905474d1a724575594e6985cb9c7898e772aefed770a104004c33cacc125aa3e9b1c9053a38029a80203c0f794d0aea48d6d0977efe3240be8824986fa85227bedbc698e5dc9cb1286a4d8c9a10d973286a472708b98305fc8cba0800000000000000c255a2b7e9feaaa97f47102adb6073adf999981d0580928b0de5d2bbb2b0ad76390c2e6b54ccf7fe6e14677f7663b3271bdfcaa2908bc59ac3812c6e4a2c9912859c3606afb5fa52151dd5656b7a3662733ba6c2b5f81eff680ea3ffaf9b917045d0d19e50e689a11dcee6defe0830e3f8683caaf6028fa3d55ecf58c8dc64e6d9fca726952263eee9ee653b1361ddd91174c254b502de330fd91ea9b5e49ebd2381cd75b1c851e00c097a389abd77b7886d6cc77c6e78ab23d7c58ccd41e3faab178f48cb5701000000b60c02bfeac2b60158989603f037bb71ae5b04f2a7bb08aa463e87a744a2e4436fe63a17bc7f9fee40ac00d4ebb1957a95046918e99fec8f040787d9b6f59e0be82e044651948773d73b360d9d24a7bfe1d7c864ca33ec83cd2dee41fcb60203b3e272b3ae4c4580896c6606539afc070000000000000051f6a6a4b48b19dab6ae2d9e96dbe90fa1ce8a507b90ef3c130918efe97509f0e1cecaa9977886a18c5a282f16c9d8962b2e5d9bfbf10568c768cf6fd328e2c53edf794b6815c3efa1d9706fd52eab9bcb58527035f3d168d7141a4e3dcdadd2c3052df801d1fa7412fb7f34ceaf881f8723350f9cd7a96a6f86cba5e0ef073b741250e24b2e53ae49aa1e35b13d9fdbfdba977f10af53dfa0e25c072c6f1e9f2e73116a105ddb569dec6376681e095874c91420c5bdf2bafe44efbdec8bf6e03d2dfe81f84f460ce0dbb6d9d77957a56bcc715e57cc8d90b448c67a0093963ad3b7b82c2efd9123b15954610153e7e419826a8eda572e485501afb3df00ef0aae7dc9a7957f99f5364ab7e34b2662dc803324ce4daa03dafb5120d18541aea7e6b89e230dbb1e098b9334adc37aac0334283523ea8be2573a155e17545637fad309edfcd5fd607ce4b2e4a721881d987875a83c8fbf5bf6512a74d5776018ace8b76a4685ef436289f495ace51cf1ef0ed6288e0f4a603d22bc638c45bab01e2062f10bcd0557802ea11503369678f4353c1ec4d54224dd93b6f313f37359766797ef3a096d39ef8934780f7b289aa4eba05718bd0298ab8a104a000c3bfe164d2f6a7e629ebc7b2db91804a4bbfc93184dc6e47746d6fc2f61a0dfd8790c1ddca44691f694ce242dcda09b38780f35742b81006969d1be01d4907a160e0eddee798e2b76e1100d994bc797d02ea814ee89e9b3220cbb4f50d4d500000000"], 0x0)
sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x20000)
r4 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853")
syz_io_uring_setup(0x3c20, &(0x7f0000000e00)={0x0, 0xae77, 0x20, 0x80000000, 0xce}, &(0x7f0000000040), &(0x7f0000000140))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000340)="009b3d93df163e75eaa586dd0100000000000000b17ce5c0b3cf454869c6affef5d8e6de2e0217c3a2ffb2d872605098b0bcacd777a26611827fb90167824ff50543e51e00b6edd8af772ccac9b097896c55bbac02d81aeaaa1d42e504987f7dae2cbb1b454a91df901841950daa94b8ebc4ac5f2871db46e45ce3c3d080108a550c8cf8ab7d640f604267eaa0ca7760bbce4e", 0x93}, {&(0x7f00000001c0)="c0", 0x1}], 0x2)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0)
syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002b, 0x800, 0x3, 0x100020b}, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0)=<r10=>0x0)
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8488, &(0x7f0000000400)={[], [{@permit_directio}, {@uid_eq}]}, 0xfe, 0x10fa, &(0x7f0000002240)="$eJzs2TGLE0EYBuB3dqOWK7l+sbCwkONE/8AVCmlttZHjKlMllZKf48/RVPbBXouApbCyZpOoRAQTtXkeCPPlZb/ZmXJmAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL1R8rEkZ1Uy3mZVkpK07XLyIUm7zW+/rauUPL2ezB/PHj6ZJ6m/PV6eJaXv6tvypdvIg/Gjs8u77+avXr98MZ1ez4ZpStqs1qffShnWAwAAAPyoO1rzn98PAAAA/M7JLhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/lDX7OvxtqiSlKRtl5OSpD3Qd+MfrQ8AAAA4XkmV582hfHMNsHc/75uyy/vxc+nri7w50A8AAAD8UndrKL7/vl5u7s/j9zLancv77E5GOT/f/B+GfLpM6iQXP02+Wi+u+l/Wi6vS1X97LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JUdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAsFcAAAD//8nh2/s=")
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12})
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104)
fallocate(r11, 0x8, 0x4000, 0x4000)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

2m14.000639838s ago: executing program 2 (id=88):
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x9)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000300)=0x48, 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xede58000)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x11, 0x1a3, &(0x7f0000000440)="$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")
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYRESHEX=r4], 0x48)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
fanotify_init(0x200, 0x0)
r6 = socket$kcm(0x23, 0x0, 0x0)
readv(r6, &(0x7f0000000780)=[{&(0x7f0000000280)=""/206, 0xce}], 0x1)
close(0x3)
socket$kcm(0x2d, 0x2, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

2m13.564516262s ago: executing program 1 (id=89):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f00000001c0)='N', 0x1, 0x80, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000001c0)=0x8)

2m12.586257498s ago: executing program 1 (id=90):
unshare(0x26020400)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/148, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xd27, 0x0, 0x3, 0x54, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7c14}, @alu={0x4, 0x1, 0x4, 0x6, 0x3, 0x2, 0xfffffffffffffffc}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x7, 0x8ee}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000000540)=[{0x3, 0x2, 0xa, 0x3}, {0x4, 0x3, 0xe, 0x4}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x5, 0x9, 0xa}, {0x5, 0x3, 0x5, 0xc}, {0x1, 0x1, 0x4, 0x5}, {0x2, 0x2, 0xd}, {0x5, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x0, 0x9}], 0x10, 0x5}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2m12.532504052s ago: executing program 3 (id=91):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140), 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x90}, 0x4000001)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5)

2m12.284461891s ago: executing program 1 (id=92):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8)

2m12.240661455s ago: executing program 0 (id=93):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1b90f86c000028006400000402907800000000e000000211009078e0000002000000020000000000000000"], 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet6(0xa, 0x2, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])

1m4.66974269s ago: executing program 32 (id=88):
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x9)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000300)=0x48, 0x4)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xede58000)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x11, 0x1a3, &(0x7f0000000440)="$eJzs0D9rU1EYx/Hvc+7JnwpVo+JQwQYsxhuqyb1VB6fgFCEXHFwEg4Y0NsVETa9LSwtZpCDRDr4Bneqogk4iCs7FQXDQ69JNmqE4iINE7s1R8DX0fIb7O8+PyzmH0w57YQb4vbvapELCYT8fETQwLeNOqXG+NvN3kxvj4KKZB0I6zmdmngqXV241Op3WUv5Cntx/BfAj6f5V4QuOKoZCBfm8u9psyI2AUYWumg/I1Sg+xKnTcx8xpSc5ch2HUWHAJUVPCjU4ULrXvVsKl1dOL3YbC62F1m3fnztfPlsun/NLNxc7rfIrxH0giies4QZkAibcNVJ17m/pfcwK4rZV5EhxSLrOxpZz6sTsEOXuMEJ4VxiS+arbeXWFk2SvxZevclh4ihMwU2NCoUkOqiKX1Uvx9Cf9M6XI9h3nTPNOZ379qpJf6c2K7GTF2yZV8PCLHnPx03CI96xHzERUIzYjtr8xLW/iUwbmPXU//j430zGOm1V/yUvDB9HB44OAn4PJZDuV3CsHb82fJvjyd2FZlmVZlmVZlmXtAX8CAAD//7nAYrI=")
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYRESHEX=r4], 0x48)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
fanotify_init(0x200, 0x0)
r6 = socket$kcm(0x23, 0x0, 0x0)
readv(r6, &(0x7f0000000780)=[{&(0x7f0000000280)=""/206, 0xce}], 0x1)
close(0x3)
socket$kcm(0x2d, 0x2, 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

1m2.690544044s ago: executing program 33 (id=93):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1b90f86c000028006400000402907800000000e000000211009078e0000002000000020000000000000000"], 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet6(0xa, 0x2, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])

1m2.444106523s ago: executing program 34 (id=92):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8)

1m2.182119183s ago: executing program 35 (id=91):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140), 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x90}, 0x4000001)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5)

15.683612523s ago: executing program 6 (id=160):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffccc0000000c0a010100000002000000000a0000070900020073797a31000000000900010073797a3100000000a00003809c0000800400018094000b80100001800c000100636f756e7465720070000180090001006c617374000000006000028008000140000100010c00024000000000000000010c00024000000000000010000800014000000001080001"], 0x130}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

14.30162945s ago: executing program 6 (id=164):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000000), 0xc)
bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000280)={0x0, 0x6d}, &(0x7f0000000440)={'enc=', 'pkcs1', ' hash=', {'blake2s-256-arm\x00'}}, &(0x7f0000000500)="04600eb5122eab350e13d0f69191ce0495036eb278d25fba08cfe2248877119cc87cc81610e9f37ace91efbee7876c4bd848ef9c534a87abdff9f0d45d07a1f50458bc50b38ce2b23780126a003dfa6d82b29ac90067a2241d7baa930e5e6b670cad5c670ab534fbc8af4831b9", 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x80000001, 0x0)
ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78})
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/15, 0x204000, 0x1400}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
bind$xdp(r2, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)

13.1478367s ago: executing program 6 (id=167):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x26020400)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/148, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xd27, 0x0, 0x3, 0x54, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7c14}, @alu={0x4, 0x1, 0x4, 0x6, 0x3, 0x2, 0xfffffffffffffffc}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x7, 0x8ee}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000540)=[{0x3, 0x2, 0xa, 0x3}, {0x4, 0x3, 0xe, 0x4}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x5, 0x9, 0xa}, {0x5, 0x3, 0x5, 0xc}, {0x1, 0x1, 0x4, 0x5}, {0x2, 0x2, 0xd}, {0x5, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x0, 0x9}], 0x10, 0x5}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

11.572346062s ago: executing program 6 (id=173):
r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8000000011d, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@fd={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e1379f1"}})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd, 0x0, 0x4000000020000000, 0x20004, 0x1, 0x1, {0x1}}) (async)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109042)
syz_mount_image$jfs(&(0x7f0000000b80), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000940)=ANY=[], 0xf0, 0x624f, &(0x7f0000001240)="$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") (async)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000780)=ANY=[], 0xfe37, 0x0)
lremovexattr(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)=@known='trusted.overlay.upper\x00') (async)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x3, 0x0, {0xffffffffffffffff}, {<r3=>0xee01}, 0xeb47, 0x6})
mount$binderfs(&(0x7f0000000140), &(0x7f0000000200)='./binderfs\x00', &(0x7f0000000240), 0x902004, &(0x7f0000000340)={[{@max={'max', 0x3d, 0x6b14}}, {@stats}, {}, {@max={'max', 0x3d, 0x9}}, {@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x8}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x63, 0x35, 0x30, 0x64, 0x3d, 0x33, 0x35], 0x2d, [0x37, 0x37, 0x30, 0x34], 0x2d, [0x36, 0x33, 0x35, 0x35], 0x2d, [0x33, 0x31, 0x32, 0x5c], 0x2d, [0x36, 0x64, 0x33, 0xf, 0x36, 0x34, 0x33, 0x32]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'jfs\x00'}}, {@appraise}, {@appraise_type}, {@fowner_gt={'fowner>', r3}}, {@obj_type={'obj_type', 0x3d, 'jfs\x00'}}]})
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000180)=0x9) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}, {{0x8}, {0x4}}]}, 0x64}, 0x1, 0x1000000, 0x0, 0x4004810}, 0x24040840)
r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
r5 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))

8.276210628s ago: executing program 7 (id=182):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x26020400)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/148, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xd27, 0x0, 0x3, 0x54, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7c14}, @alu={0x4, 0x1, 0x4, 0x6, 0x3, 0x2, 0xfffffffffffffffc}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x7, 0x8ee}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000540)=[{0x3, 0x2, 0xa, 0x3}, {0x4, 0x3, 0xe, 0x4}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x5, 0x9, 0xa}, {0x5, 0x3, 0x5, 0xc}, {0x1, 0x1, 0x4, 0x5}, {0x2, 0x2, 0xd}, {0x5, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x0, 0x9}], 0x10, 0x5}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

7.582317122s ago: executing program 7 (id=184):
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c000000000000ff80e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)

7.188397422s ago: executing program 5 (id=185):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}}) (async, rerun: 32)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x5, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0x19, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x0, 0xd000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0x10, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x80}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80040023, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x0, [0xb, 0x2, 0x3, 0x1be]})
ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, &(0x7f0000000500)) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080130003000d28d8026a2c80"], 0x2c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062000000ad0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)

7.075212021s ago: executing program 7 (id=187):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x100, 0x0)
getdents(r0, &(0x7f0000000200)=""/32, 0x6d)
getdents64(r0, 0x0, 0x0)
read$hiddev(r0, &(0x7f0000000080)=""/209, 0xd1)
fsopen(&(0x7f0000000040)='gfs2\x00', 0x1)

6.860117228s ago: executing program 4 (id=188):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

6.744326527s ago: executing program 5 (id=189):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0xc172, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x7, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x3, 0x33b9, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x3, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x11, 0x5e81339d, 0xffffc256, 0x2, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x3, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x3, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a37247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)

5.67087785s ago: executing program 5 (id=190):
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x83, 0xffffffff, 0x40})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x8, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x10, 0x0, 0x0})

5.597591306s ago: executing program 4 (id=191):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0xefffffffffffffff, 0x4451099e661a63b1}, 0x0)

5.509097102s ago: executing program 5 (id=192):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota_file, 0x4}, {@acl}, {@data_journal}, {@usrjquota, 0x3d}]}, 0x2, 0x110f, &(0x7f0000001140)="$eJzs2LFqFEEYB/D/7B2Y7mTTL4IWFhISzs4qRYRrrW0kpDJVrooI4rv4OJLKPuQBLAKWwshusp5IIGAuhoPfD2Z3+OabmW/KmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCVV/1nu0naMdIkKUnXnS0uknRj/PHXSZOSN0eL5cHJ/PUyyWRIL33rZ/XT0u493Wrn7bzda19u7z9rl6cf3r87Pj46uV6mpMv55foPUq7rudHW+vcDAACATVHvbPb3ktP/uz8AAABwm7U+JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8gzpb9dskP2utaZKUpOvOFhdJuocsEAAAALizkiZvZzfFMzwDrLzIt1kZ4mP7Ufqc3XwZ5j9apR429184AAAAbJTprRnlj/v480xTa/00jj3JNDs7V/3+1w98308mpwfZ/X0n/zx8zy8/Ho6t1Mk9nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAB8FAAD//6zC3aE=") (async)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3854052, 0x0, 0x0, 0x0, &(0x7f00000000c0))
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0) (async, rerun: 64)
syz_emit_ethernet(0x5e, &(0x7f0000000700)={@link_local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "b07190", 0x28, 0x6, 0x1, @mcast1, @mcast2, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x1, 0xa, 0x3, 0x2, 0x1, 0x0, 0x1, 0x2, 0x2, 0x2, 0xae87, 0x7fff, 0x4, 0x4e20, 0x4e20}, 0x0, 0x3}, 0x1, 0x3}}}}}}}}, 0x0) (rerun: 64)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000c80)) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xe0e0e0e0}) (async)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1000000000000073, 0x1) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4a183, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
ioctl$TCSETS(r3, 0x40204706, &(0x7f00000000c0)={0x1, 0xc8a9, 0x5, 0x8000001, 0x15, "3eccd8f9f24305cfe373487400"}) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r4=>0x0], 0x1}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000100)={0x100000000, r1, r4, 0xcccccccc}) (async)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000001d00)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$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") (async, rerun: 64)
mkdir(&(0x7f0000000000)='./control\x00', 0x81) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async, rerun: 64)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) (rerun: 64)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8057, &(0x7f00000002c0)=ANY=[], 0x1, 0x278, &(0x7f0000000000)="$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") (rerun: 64)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}}, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x0)

5.466313836s ago: executing program 4 (id=193):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f00000001c0), 0x0, 0x80, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000001c0)=0x8)

5.164438169s ago: executing program 5 (id=194):
timerfd_create(0x0, 0x800)
r0 = timerfd_create(0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x40000000, 0x4, 0x0, 0x0, 0x5e, 0x3, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x9, 0xbe2, 0x9, 0x3000000, 0x0, 0x0, 0x4000, 0x0, 0x1})

5.068412357s ago: executing program 7 (id=195):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f00000000c0)=0xd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0xfffffffc, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.779806369s ago: executing program 7 (id=196):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, "bc410887c39b93ba733c40a6ebe73ed8cc4963e8d949bb4ff67c823dd18c8706c7973608f8f9fec843aad0da96bd888c8ff6ba75008e76ef31b000b31301b9f7", 0x3b}, 0x48, 0xffffffffffffffff)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0], 0x1})
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000200)={0x9b0000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10906, 0xfffffffb, '\x00', @value=0x80000001}})
sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000003400000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)
r7 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r7, &(0x7f0000000140), 0x0)

4.608200882s ago: executing program 5 (id=197):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"94e9aa2e2d4bfdbb784e474a691b5107", 0x0, 0x0, {0x3, 0xe926}, {0x4, 0x1}, 0x5, [0x0, 0xc01, 0x80000000000004, 0x9, 0x0, 0x400000000000200, 0x5, 0x5, 0x6, 0x801, 0x8e, 0xfff, 0x0, 0x6995, 0xe2, 0x4]})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000007c0)={[{@datacow}, {@discard_sync}, {@compress_force}, {@nodiscard}, {@datasum}, {}, {@flushoncommit}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000013900)="$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")
r2 = socket$kcm(0x29, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x8, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x4, 0x5}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x137)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r3, 0x0, 0x923, 0x8000c66)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x2753c0e}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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")
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6e6f636865636b706f696e745f6d657267652c71756f74612c6261662c64697361626c655f6578745f6964656e746966792c6a71666d743d76000076302c636865636b706f696e743d646973616264652c6e6f61636c2c64697361626c655f6578745f6964656e746966792c757365725f78617474722c6163746976655f6c0800733d322c646973636172645f756e69743d73656374696f6e2c6e6f71756f74612c000000000000000000000000000000763f28e1ba13a03386a0c571e6f0d030ed6b0d6dfc835feb24b7fa3aaa6e5aa2aa8e7476c00b9b452565a6db19c52de675067026"], 0x4, 0x5523, &(0x7f00000087c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r5, 0x40000)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0xf25b, 0x8, 0xd, 0x9, 0x1, 0x81})
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x4e21, 0xc0000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xe}}}, 0x88)

4.38856169s ago: executing program 4 (id=198):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8108c4, &(0x7f0000000300)={[{@resv_level={'resv_level', 0x3d, 0x400}}, {@nouser_xattr}, {@inode64}, {@coherency_full}, {@err_ro}, {@localalloc={'localalloc', 0x3d, 0x7}}, {@intr}, {@localalloc}]}, 0x1, 0x442f, &(0x7f000000e480)="$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")
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r0, 0x0, 0x1a, 0xffffffffffffffff, &(0x7f0000000040))
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000015c0), 0x1, 0x0)
pwrite64(r1, &(0x7f0000001600)="ed", 0x1, 0x4)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f0000000300)=ANY=[], 0xb, 0x0, &(0x7f0000000300))

3.516806497s ago: executing program 7 (id=199):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x8800)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x20, 0x10, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000640)={0x0, 0x8000}, 0x8)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x40, 0x8, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x32}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0xf09d, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r9 = dup(r8)
write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r9, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000"], 0xb0)
write$FUSE_DIRENTPLUS(r9, &(0x7f0000000140)=ANY=[], 0x10)
write$FUSE_DIRENTPLUS(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',posixacl'])
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4], 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x11c, &(0x7f0000000340)=0x9, 0x0, 0x4)
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2, 0x9, 0x41}, 0x50)

2.696176991s ago: executing program 6 (id=200):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003)
rt_tgsigqueueinfo(0x0, r0, 0x39, &(0x7f0000000140)={0x3, 0x9bfc, 0xa3c8})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$dri(0x0, 0x1, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x94)

794.949039ms ago: executing program 6 (id=201):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=<r0=>0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0)
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x81)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000000c0)={0x4, 0x9669, 0x2000, 0x4, 0x20000000, 0xa, 0x2401})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x110, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd2f}]}]}, 0x110}}, 0x20000400)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x16, 0x2e2, &(0x7f0000000b80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a0905821725"], 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r5)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001540)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x1aac8e395601f4b2}, 0x0) (async)
syz_usb_control_io$printer(r4, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00031b0000001b03b00887bf6cf3df090000000000000616f7c05d666fe95378a3"]}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan0\x00'})
syz_usb_control_io$cdc_ncm(r4, &(0x7f00000002c0)={0x14, &(0x7f0000000440)={0x40, 0x10, 0xfe, {0xfe, 0x7, "f65c5818565b2bcc4b04aeecb23d428753e36fae1b359dc7280cff73a712b1aa4b709254cc874dbb57e2932e8bc4e2d5cae185dcccfd9781b34510f99bd899c09d8de3752b5b4fd354a51899a472ef7c967eddc7f9031d6260e861957f03c8242144b632fd81d5137d628d1a7d58a3f32355353a6fee3c9198588d7ba24dd1d5872915e719f8b5b06a16f442fd877f41d3af1470082bad971bd978edb9241de14cfca482a884866f5f23506012962380e901ba61c94fd20a91f3d249e506bd2d7b7fd9ea0c70e217d6a1b5bb715bed53c3fe3cb02b069c55726f34e37b64ac1e3dce71c716f88788763a17fdfe48786161012bf587fb9d00f20a91f8"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x40, 0x6, 0x5f, "c23dd78e6b05d1e07cc28349da64c81f126a6192c7af718c4e38a1fe159258b1ae030e07d4f5ee9acb6c046e8e4aaff848d0aa5125ee9e07028448b4756a741459b65dfeb82278ba24e1870c7b2eb3a89cf544f49ef200b1acfa635828286b"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x77}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x1, 0x4, 0x0, 0xe943, 0xe9e, 0x9, 0x5, 0x0, 0x4, 0xff, 0x40, 0x30}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xbd}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000007c0)={0x20, 0x87, 0x2}, &(0x7f0000000800)={0x20, 0x89, 0x2}})

712.699925ms ago: executing program 4 (id=202):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="9800000010000104000000000000000300000000", @ANYRES32=r1, @ANYBLOB="00030000000000004c001280110001006272696467655f736c61766500000000340005800500190002"], 0x98}}, 0x0)

0s ago: executing program 4 (id=203):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000034c070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021880300001e0a05010000000000000000070000010900020073797a31000000000900010073797a30000000005c0303800c0000800800034000000002"], 0x40c}}, 0x40000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts.
syzkaller login: [   73.419109][ T5758] cgroup: Unknown subsys name 'net'
[   73.558501][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.310229][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.968341][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.984457][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.993204][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.012846][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.046637][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.048232][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.058884][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.062090][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.070280][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.077187][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.083298][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   77.097638][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   77.099274][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.115481][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.121366][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.131193][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.146805][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.155551][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.158004][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.164306][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   77.178649][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.194803][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.208006][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   77.219074][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.718536][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   77.798711][ T5767] chnl_net:caif_netlink_parms(): no params data found
[   77.812151][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   77.852403][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   77.927244][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.935277][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.943086][ T5769] bridge_slave_0: entered allmulticast mode
[   77.949939][ T5769] bridge_slave_0: entered promiscuous mode
[   77.975052][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.982629][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.989806][ T5769] bridge_slave_1: entered allmulticast mode
[   77.996947][ T5769] bridge_slave_1: entered promiscuous mode
[   78.074523][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.113266][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.127229][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.134671][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.142233][ T5767] bridge_slave_0: entered allmulticast mode
[   78.149062][ T5767] bridge_slave_0: entered promiscuous mode
[   78.158087][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.165956][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.173239][ T5767] bridge_slave_1: entered allmulticast mode
[   78.180393][ T5767] bridge_slave_1: entered promiscuous mode
[   78.227806][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.235282][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.243132][ T5776] bridge_slave_0: entered allmulticast mode
[   78.249892][ T5776] bridge_slave_0: entered promiscuous mode
[   78.289918][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.297392][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.306380][ T5776] bridge_slave_1: entered allmulticast mode
[   78.313537][ T5776] bridge_slave_1: entered promiscuous mode
[   78.323124][ T5769] team0: Port device team_slave_0 added
[   78.342287][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.349423][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.356850][ T5777] bridge_slave_0: entered allmulticast mode
[   78.364762][ T5777] bridge_slave_0: entered promiscuous mode
[   78.375289][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.388733][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.403392][ T5769] team0: Port device team_slave_1 added
[   78.418737][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.426111][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.433528][ T5777] bridge_slave_1: entered allmulticast mode
[   78.440309][ T5777] bridge_slave_1: entered promiscuous mode
[   78.469385][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.518512][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.562872][ T5767] team0: Port device team_slave_0 added
[   78.569759][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.577129][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.603377][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.628172][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.640707][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.651690][ T5767] team0: Port device team_slave_1 added
[   78.658172][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.665192][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.692681][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.713044][ T5776] team0: Port device team_slave_0 added
[   78.757031][ T5776] team0: Port device team_slave_1 added
[   78.776791][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.783974][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.810162][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.824339][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.831519][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.857890][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.900520][ T5777] team0: Port device team_slave_0 added
[   78.952333][ T5777] team0: Port device team_slave_1 added
[   78.974535][ T5769] hsr_slave_0: entered promiscuous mode
[   78.981426][ T5769] hsr_slave_1: entered promiscuous mode
[   78.988823][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.996773][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.022745][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.049756][ T5767] hsr_slave_0: entered promiscuous mode
[   79.056281][ T5767] hsr_slave_1: entered promiscuous mode
[   79.062870][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.070816][ T5767] Cannot create hsr debugfs directory
[   79.089261][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.097089][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.123355][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.151436][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.158425][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.185245][ T5780] Bluetooth: hci1: command tx timeout
[   79.185682][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.203606][ T5775] Bluetooth: hci0: command tx timeout
[   79.243955][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.250962][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.278395][ T5780] Bluetooth: hci3: command tx timeout
[   79.281332][ T5780] Bluetooth: hci2: command tx timeout
[   79.284749][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.346761][ T5776] hsr_slave_0: entered promiscuous mode
[   79.353341][ T5776] hsr_slave_1: entered promiscuous mode
[   79.359490][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.367242][ T5776] Cannot create hsr debugfs directory
[   79.534926][ T5777] hsr_slave_0: entered promiscuous mode
[   79.542267][ T5777] hsr_slave_1: entered promiscuous mode
[   79.548472][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.556208][ T5777] Cannot create hsr debugfs directory
[   79.754591][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.798854][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.809745][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.832543][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.900066][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.924646][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.934208][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.951999][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.047382][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.067172][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.079565][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.107295][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.194100][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.206626][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.220023][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.231476][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.284516][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.309644][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.359033][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   80.370848][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[   80.390380][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.397764][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.443664][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.451046][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.463734][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.470838][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.504538][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.511886][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.599879][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.683012][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   80.714652][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.721959][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.733396][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.740656][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.788673][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.879744][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   80.977365][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.984736][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.999392][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.006679][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.134134][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.264485][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.283040][ T5780] Bluetooth: hci1: command tx timeout
[   81.288623][ T5780] Bluetooth: hci0: command tx timeout
[   81.342701][ T5780] Bluetooth: hci2: command tx timeout
[   81.348196][ T5780] Bluetooth: hci3: command tx timeout
[   81.434575][ T5769] veth0_vlan: entered promiscuous mode
[   81.449858][ T5769] veth1_vlan: entered promiscuous mode
[   81.515720][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.544259][ T5767] veth0_vlan: entered promiscuous mode
[   81.573675][ T5769] veth0_macvtap: entered promiscuous mode
[   81.587611][ T5767] veth1_vlan: entered promiscuous mode
[   81.599051][ T5769] veth1_macvtap: entered promiscuous mode
[   81.609529][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.677062][ T5776] veth0_vlan: entered promiscuous mode
[   81.695679][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.708921][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.726530][ T5776] veth1_vlan: entered promiscuous mode
[   81.748662][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.758048][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.766961][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.776916][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.823117][ T5767] veth0_macvtap: entered promiscuous mode
[   81.834719][ T5767] veth1_macvtap: entered promiscuous mode
[   81.883303][ T5777] veth0_vlan: entered promiscuous mode
[   81.907408][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.919463][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.951452][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.974412][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.987885][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.000681][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.012359][ T5776] veth0_macvtap: entered promiscuous mode
[   82.059263][ T5777] veth1_vlan: entered promiscuous mode
[   82.070030][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.083540][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.092854][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.101798][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.135096][ T5776] veth1_macvtap: entered promiscuous mode
[   82.169745][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.213671][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.281429][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.308854][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.393614][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.415854][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.426498][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.438054][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.455288][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.505331][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.518046][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.528402][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.539693][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.554215][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.565724][ T5777] veth0_macvtap: entered promiscuous mode
[   82.590493][ T5777] veth1_macvtap: entered promiscuous mode
[   82.645280][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.659197][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.673007][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.685990][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.705230][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.729185][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.877275][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.891513][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.899457][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.920886][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.925071][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.938932][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.961449][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.972259][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.986414][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.007197][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.023567][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.035816][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.046382][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.056430][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.067031][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.079027][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.125858][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.134769][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.145495][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.154570][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.273290][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.292403][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.340106][ T5863] Zero length message leads to an empty skb
[   83.347469][ T5780] Bluetooth: hci0: command tx timeout
[   83.353339][ T5775] Bluetooth: hci1: command tx timeout
[   83.364109][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.377078][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.410670][ T5863] netlink: 'syz.3.4': attribute type 10 has an invalid length.
[   83.423435][ T5775] Bluetooth: hci2: command tx timeout
[   83.429853][ T5780] Bluetooth: hci3: command tx timeout
[   83.446267][ T5863] team0: Port device netdevsim0 added
[   83.484691][ T5863] netlink: 'syz.3.4': attribute type 10 has an invalid length.
[   83.516392][ T5863] team0: Port device netdevsim0 removed
[   83.560486][ T5863] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   83.562832][ T5866] syz.1.2[5866]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   83.597208][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.628593][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.727013][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.745154][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.235816][ T5870] loop0: detected capacity change from 0 to 2048
[   84.239204][ T5863] syz.3.4 (5863) used greatest stack depth: 20456 bytes left
[   84.315876][ T5870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   84.571066][ T5874] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   84.590344][ T5874] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 174 with error 28
[   84.622014][ T5874] EXT4-fs (loop0): This should not happen!! Data will be lost
[   84.622014][ T5874] 
[   84.641497][ T5874] EXT4-fs (loop0): Total free blocks count 0
[   84.647722][ T5874] EXT4-fs (loop0): Free/Dirty block details
[   84.722103][ T5822] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   84.732669][ T5874] EXT4-fs (loop0): free_blocks=2415919104
[   84.738439][ T5874] EXT4-fs (loop0): dirty_blocks=176
[   84.769591][ T5822] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   84.779692][ T5874] EXT4-fs (loop0): Block reservation details
[   84.794017][ T5868] loop2: detected capacity change from 0 to 32768
[   84.810749][ T5874] EXT4-fs (loop0): i_reserved_data_blocks=11
[   84.951598][ T5868] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   85.135239][ T5866] loop1: detected capacity change from 0 to 40427
[   85.203047][ T5866] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[   85.213798][ T5868] XFS (loop2): Ending clean mount
[   85.244426][ T5868] XFS (loop2): Quotacheck needed: Please wait.
[   85.245072][ T5866] F2FS-fs (loop1): invalid crc value
[   85.298372][ T5866] F2FS-fs (loop1): invalid crc value
[   85.312161][ T5866] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[   85.328108][  T143] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28
[   85.356720][ T5868] XFS (loop2): Quotacheck: Done.
[   85.423452][ T5780] Bluetooth: hci0: command tx timeout
[   85.430790][ T5775] Bluetooth: hci1: command tx timeout
[   85.512042][ T5775] Bluetooth: hci3: command tx timeout
[   85.517658][ T5780] Bluetooth: hci2: command tx timeout
[   85.770066][ T5892] binder: binder_mmap: 5891 200000000000-200000b36000 bad vm_flags failed -1
[   85.910321][ T5769] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   86.407722][  T789] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   86.441478][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.665130][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   86.673687][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   86.792025][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   86.800285][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   86.868822][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[   86.869201][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   86.885785][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   86.941165][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   86.971535][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   86.971681][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   88.288414][  T173] cfg80211: failed to load regulatory.db
[   88.436837][  T789] usb 1-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config
[   88.467936][  T789] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   88.505176][  T789] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   88.523843][  T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.541023][  T789] usb 1-1: Product: syz
[   88.549826][  T789] usb 1-1: Manufacturer: syz
[   88.559359][  T789] usb 1-1: SerialNumber: syz
[   88.585106][  T789] usb 1-1: config 0 descriptor??
[   88.964085][ T5896] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure
[   89.690081][ T5907] loop3: detected capacity change from 0 to 512
[   89.813146][ T5907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.842920][ T5907] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.894625][   T27] audit: type=1800 audit(1765635068.148:2): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13" name="file2" dev="loop3" ino=16 res=0 errno=0
[   91.326360][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.445212][ T5922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.536905][  T789] usb 1-1: USB disconnect, device number 2
[   92.595658][ T5925] loop2: detected capacity change from 0 to 40427
[   92.874162][ T5783] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   94.356000][ T5821] kernel write not supported for file /input/mouse0 (pid: 5821 comm: kworker/1:4)
[   96.413314][ T5951] loop2: detected capacity change from 0 to 256
[   96.526915][ T5951] =======================================================
[   96.526915][ T5951] WARNING: The mand mount option has been deprecated and
[   96.526915][ T5951]          and is ignored by this kernel. Remove the mand
[   96.526915][ T5951]          option from the mount to silence this warning.
[   96.526915][ T5951] =======================================================
[   96.761119][    T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   96.909261][ T5944] loop3: detected capacity change from 0 to 32768
[   96.948214][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   96.968520][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.015582][ T5944] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.23 (5944)
[   97.064953][ T5957] syz_tun: entered allmulticast mode
[   97.078935][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   97.124487][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.156796][ T5957] dvmrp6: entered allmulticast mode
[   97.234427][ T5957] pimreg: entered allmulticast mode
[   97.274583][ T5958] loop2: detected capacity change from 0 to 64
[   97.340710][ T5958] MINIX-fs: mounting unchecked file system, running fsck is recommended
[   97.431333][    T9] usb 1-1: usb_control_msg returned -32
[   97.460526][    T9] usbtmc 1-1:16.0: can't read capabilities
[   97.574801][    T9] usb 1-1: USB disconnect, device number 3
[   98.029263][ T5955] loop1: detected capacity change from 0 to 131072
[   98.044582][ T5956] pimreg: left allmulticast mode
[   98.094249][ T5955] F2FS-fs (loop1): invalid crc value
[   98.148959][ T5955] F2FS-fs (loop1): Found nat_bits in checkpoint
[   98.362931][ T5955] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   98.391204][   T27] audit: type=1800 audit(1765635076.618:3): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.28" name="file1" dev="loop2" ino=5 res=0 errno=0
[  101.395641][ T5989] loop3: detected capacity change from 0 to 512
[  101.412244][ T5989] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  101.440813][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'.
[  101.689090][ T5989] EXT4-fs (loop3): 1 orphan inode deleted
[  101.696800][ T5989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.710594][ T5989] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.729759][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  101.750110][ T5995] loop2: detected capacity change from 0 to 16
[  101.776028][ T5995] erofs: (device loop2): mounted with root inode @ nid 36.
[  101.794560][   T27] audit: type=1800 audit(1765635080.048:4): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37" name="file1" dev="loop2" ino=86 res=0 errno=0
[  102.087711][ T1121] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  102.122719][ T1121] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:8: Failed to release dquot type 1
[  102.215201][ T5989] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  102.225932][ T5989] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  102.361985][    T9] usb 1-1: Using ep0 maxpacket: 32
[  102.377768][ T5989] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  102.487442][    T9] usb 1-1: config 3 has an invalid interface number: 171 but max is 0
[  102.493874][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.495722][    T9] usb 1-1: config 3 has no interface number 0
[  102.521097][    T9] usb 1-1: config 3 interface 171 has no altsetting 0
[  102.551264][    T9] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5
[  102.560558][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.581549][    T9] usb 1-1: Product: syz
[  102.585868][    T9] usb 1-1: Manufacturer: syz
[  102.590508][    T9] usb 1-1: SerialNumber: syz
[  102.685706][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  102.828606][    T9] as10x_usb: device has been detected
[  102.848957][    T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  102.932390][    T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  103.022890][    T9] as10x_usb: error during firmware upload part1
[  103.056253][    T9] Registered device Sky IT Digital Key (green led)
[  103.082326][    T9] usb 1-1: USB disconnect, device number 4
[  103.245882][    T9] Unregistered device Sky IT Digital Key (green led)
[  103.248868][    T9] as10x_usb: device has been disconnected
[  103.369344][ T6014] loop3: detected capacity change from 0 to 512
[  103.388424][ T6014] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  103.418002][ T6014] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.41: invalid indirect mapped block 4294967295 (level 1)
[  103.450254][ T6014] EXT4-fs (loop3): Remounting filesystem read-only
[  103.461707][ T6014] EXT4-fs (loop3): 2 truncates cleaned up
[  103.490779][ T6014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.516489][ T6014] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.644318][ T6000] loop2: detected capacity change from 0 to 32768
[  103.715508][ T6000] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  104.012717][ T6000] XFS (loop2): Ending clean mount
[  105.664916][ T5769] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.991893][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.821740][ T6050] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  106.828352][ T6050] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  106.834967][ T6050] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  106.843289][ T6050] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  106.850339][ T6050] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  106.857036][ T6050] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  106.864118][ T6050] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  106.870650][ T6050] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  106.877298][ T6050] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  106.883790][ T6050] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  106.890359][ T6050] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  106.896966][ T6050] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  106.903464][ T6050] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  106.910101][ T6050] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4)
[  106.918054][ T6050] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  106.925833][ T6050] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  106.932373][ T6050] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  106.940647][ T6050] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4)
[  107.534705][ T6062] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  107.840022][ T6066] loop2: detected capacity change from 0 to 1024
[  108.080445][   T62] hfsplus: b-tree write err: -5, ino 4
[  109.535091][ T6079] loop1: detected capacity change from 0 to 136
[  109.576979][ T6074] loop3: detected capacity change from 0 to 4096
[  110.048775][ T6081] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.176765][   T27] audit: type=1800 audit(1765635088.438:5): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.59" name="file1" dev="loop3" ino=15 res=0 errno=0
[  110.233878][ T6074] syz.3.59 (6074) used greatest stack depth: 19440 bytes left
[  110.335680][ T6084] loop2: detected capacity change from 0 to 128
[  110.354763][ T6086] loop0: detected capacity change from 0 to 1024
[  110.397673][ T6084] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.416231][ T6084] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.441646][ T6084] EXT4-fs (loop2): shut down requested (2)
[  110.537897][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.647792][  T789] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  110.794508][  T143] hfsplus: b-tree write err: -5, ino 4
[  110.864661][  T789] usb 2-1: device descriptor read/64, error -71
[  111.231589][  T789] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  111.795600][  T789] usb 2-1: device descriptor read/64, error -71
[  111.992307][  T789] usb usb2-port1: attempt power cycle
[  112.430327][  T789] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  112.811826][  T789] usb 2-1: device descriptor read/8, error -71
[  113.082325][  T789] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  113.150491][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'.
[  113.168336][  T789] usb 2-1: device descriptor read/8, error -71
[  113.194448][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'.
[  113.301252][  T789] usb usb2-port1: unable to enumerate USB device
[  119.230118][ T6179] loop3: detected capacity change from 0 to 8192
[  119.241931][ T6181] loop1: detected capacity change from 0 to 2048
[  119.292716][ T6179] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  119.374155][ T6185] loop2: detected capacity change from 0 to 8
[  119.389865][ T6179] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  119.400547][ T6179] REISERFS (device loop3): using ordered data mode
[  119.407976][ T6179] reiserfs: using flush barriers
[  119.447488][ T6179] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  119.471904][ T6179] REISERFS (device loop3): checking transaction log (loop3)
[  119.584323][ T6185] SQUASHFS error: Failed to read block 0x4de: -5
[  119.704570][ T6185] SQUASHFS error: Failed to read block 0x4de: -5
[  119.778401][   T27] audit: type=1800 audit(1765635098.038:6): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.88" name="file1" dev="loop2" ino=5 res=0 errno=0
[  120.055223][ T6179] REISERFS (device loop3): Using tea hash to sort names
[  120.071523][ T6179] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  139.881083][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  139.887992][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  192.462125][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  192.477779][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  192.502150][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  192.513513][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  192.532537][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  192.540072][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  192.616033][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  192.630446][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  192.642435][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  192.642982][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  192.652692][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  192.674602][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  192.685121][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  192.685222][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  192.701422][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  192.704080][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  192.708775][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  192.731110][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  192.886347][ T5775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  192.896249][ T5775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  192.906970][ T5775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  192.915261][ T5775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  192.926888][ T5775] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  192.937802][ T5775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  193.024553][ T6177] syz_tun (unregistering): left allmulticast mode
[  193.384874][  T143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.634581][  T143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.738285][  T143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.876034][  T143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.099117][ T6228] chnl_net:caif_netlink_parms(): no params data found
[  194.342469][ T6224] chnl_net:caif_netlink_parms(): no params data found
[  194.549837][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.556617][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.596823][ T6222] chnl_net:caif_netlink_parms(): no params data found
[  194.613724][ T6219] chnl_net:caif_netlink_parms(): no params data found
[  194.621286][ T5780] Bluetooth: hci4: command tx timeout
[  194.649325][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.656962][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.664809][ T6224] bridge_slave_0: entered allmulticast mode
[  194.673405][ T6224] bridge_slave_0: entered promiscuous mode
[  194.709675][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.717460][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.725347][ T6228] bridge_slave_0: entered allmulticast mode
[  194.733591][ T6228] bridge_slave_0: entered promiscuous mode
[  194.782002][ T5775] Bluetooth: hci3: command tx timeout
[  194.788185][ T5780] Bluetooth: hci1: command tx timeout
[  194.808585][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.820528][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.828187][ T6224] bridge_slave_1: entered allmulticast mode
[  194.836523][ T6224] bridge_slave_1: entered promiscuous mode
[  194.876979][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.892013][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.899312][ T6228] bridge_slave_1: entered allmulticast mode
[  194.921320][ T6228] bridge_slave_1: entered promiscuous mode
[  195.021139][ T5780] Bluetooth: hci5: command tx timeout
[  195.139829][ T6224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.153026][ T6224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.182299][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.315421][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.385625][ T6224] team0: Port device team_slave_0 added
[  195.466060][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.473577][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.480869][ T6222] bridge_slave_0: entered allmulticast mode
[  195.490382][ T6222] bridge_slave_0: entered promiscuous mode
[  195.503725][ T6224] team0: Port device team_slave_1 added
[  195.528903][ T6228] team0: Port device team_slave_0 added
[  195.540441][ T6228] team0: Port device team_slave_1 added
[  195.546784][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.554243][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.561637][ T6219] bridge_slave_0: entered allmulticast mode
[  195.568754][ T6219] bridge_slave_0: entered promiscuous mode
[  195.607259][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.615625][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.623638][ T6222] bridge_slave_1: entered allmulticast mode
[  195.630524][ T6222] bridge_slave_1: entered promiscuous mode
[  195.667314][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.674905][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.701162][ T6224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.736648][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.744854][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.753203][ T6219] bridge_slave_1: entered allmulticast mode
[  195.760727][ T6219] bridge_slave_1: entered promiscuous mode
[  195.796488][ T6222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.830445][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.838059][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.864961][ T6224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.876908][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.884372][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.910817][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.927565][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.934767][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.961292][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.989784][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.003391][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.014509][ T6222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.148679][ T6219] team0: Port device team_slave_0 added
[  196.202473][ T6222] team0: Port device team_slave_0 added
[  196.213184][ T6222] team0: Port device team_slave_1 added
[  196.236155][ T6224] hsr_slave_0: entered promiscuous mode
[  196.244055][ T6224] hsr_slave_1: entered promiscuous mode
[  196.250369][ T6224] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.258901][ T6224] Cannot create hsr debugfs directory
[  196.279290][ T6219] team0: Port device team_slave_1 added
[  196.369357][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.377530][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.405124][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.418825][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.426699][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.454036][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.483185][ T6228] hsr_slave_0: entered promiscuous mode
[  196.489624][ T6228] hsr_slave_1: entered promiscuous mode
[  196.496551][ T6228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.504424][ T6228] Cannot create hsr debugfs directory
[  196.567174][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.574869][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.602670][ T6222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.619390][ T6222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.645761][ T6222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.672514][ T6222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.702880][ T5780] Bluetooth: hci4: command tx timeout
[  196.861100][ T5775] Bluetooth: hci3: command tx timeout
[  196.866637][ T5780] Bluetooth: hci1: command tx timeout
[  196.897391][  T143] hsr_slave_0: left promiscuous mode
[  196.905953][  T143] hsr_slave_1: left promiscuous mode
[  196.923906][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.940233][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.953213][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.960872][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.982656][  T143] bridge_slave_1: left allmulticast mode
[  196.988393][  T143] bridge_slave_1: left promiscuous mode
[  196.996715][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.010106][  T143] bridge_slave_0: left allmulticast mode
[  197.016252][  T143] bridge_slave_0: left promiscuous mode
[  197.023246][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.079953][  T143] veth1_macvtap: left promiscuous mode
[  197.088106][  T143] veth0_macvtap: left promiscuous mode
[  197.094124][  T143] veth1_vlan: left promiscuous mode
[  197.099751][  T143] veth0_vlan: left promiscuous mode
[  197.105230][ T5780] Bluetooth: hci5: command tx timeout
[  197.710189][  T143] team0 (unregistering): Port device team_slave_1 removed
[  197.757711][  T143] team0 (unregistering): Port device team_slave_0 removed
[  197.801829][  T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.852032][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.325769][  T143] bond0 (unregistering): Released all slaves
[  198.490909][ T6219] hsr_slave_0: entered promiscuous mode
[  198.504903][ T6219] hsr_slave_1: entered promiscuous mode
[  198.512486][ T6219] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.520170][ T6219] Cannot create hsr debugfs directory
[  198.544419][ T6222] hsr_slave_0: entered promiscuous mode
[  198.551515][ T6222] hsr_slave_1: entered promiscuous mode
[  198.558144][ T6222] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.565770][ T6222] Cannot create hsr debugfs directory
[  198.785884][ T5780] Bluetooth: hci4: command tx timeout
[  198.941272][ T5780] Bluetooth: hci1: command tx timeout
[  198.946744][ T5780] Bluetooth: hci3: command tx timeout
[  198.986298][ T6224] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  199.015651][ T6224] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  199.035622][ T6224] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  199.117120][ T6224] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  199.182124][ T5780] Bluetooth: hci5: command tx timeout
[  199.394896][ T6228] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  199.419744][ T6228] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  199.483048][ T6228] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  199.528681][ T6228] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  199.625989][  T143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.690759][ T6222] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  199.748964][  T143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.772730][ T6222] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  199.784570][ T6222] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  199.800527][ T6222] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  199.874628][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.894589][  T143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.004808][  T143] bond0: (slave netdevsim0): Releasing backup interface
[  200.015126][  T143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.051209][ T6219] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  200.072710][ T6219] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  200.097815][ T6224] 8021q: adding VLAN 0 to HW filter on device team0
[  200.114789][ T6219] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  200.129731][ T6219] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  200.158137][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.165420][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.302983][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.310184][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.456084][  T143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.584030][  T143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.674826][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.753453][  T143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.816701][  T143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.863764][ T5780] Bluetooth: hci4: command tx timeout
[  200.940689][ T6228] 8021q: adding VLAN 0 to HW filter on device team0
[  200.980411][ T6222] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.023089][ T5780] Bluetooth: hci1: command tx timeout
[  201.028572][ T5780] Bluetooth: hci3: command tx timeout
[  201.060232][ T6222] 8021q: adding VLAN 0 to HW filter on device team0
[  201.095217][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.102629][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.117579][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.124922][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.136922][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.144255][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.248241][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.255553][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.264102][ T5780] Bluetooth: hci5: command tx timeout
[  201.443709][  T143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.469849][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.533483][ T6224] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.573833][  T143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.624258][ T6219] 8021q: adding VLAN 0 to HW filter on device team0
[  201.732944][  T143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.754720][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.762067][ T6207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.805715][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.812961][ T6207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.953727][  T143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.420024][ T6228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.496081][ T6222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.988835][ T6224] veth0_vlan: entered promiscuous mode
[  203.212793][ T6224] veth1_vlan: entered promiscuous mode
[  203.234049][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.639821][ T6228] veth0_vlan: entered promiscuous mode
[  203.671101][ T6228] veth1_vlan: entered promiscuous mode
[  203.689837][ T6224] veth0_macvtap: entered promiscuous mode
[  203.702437][ T6224] veth1_macvtap: entered promiscuous mode
[  203.886544][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.897435][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.918281][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.928959][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.938907][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.949669][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.961569][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.060735][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.072680][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.083307][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.094363][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.104699][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.115901][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.132588][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.169326][ T6222] veth0_vlan: entered promiscuous mode
[  204.300223][ T6224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.314695][ T6224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.337971][ T6224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.351080][ T6224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.527416][ T6219] veth0_vlan: entered promiscuous mode
[  204.550754][ T6222] veth1_vlan: entered promiscuous mode
[  204.639810][  T143] dvmrp6 (unregistering): left allmulticast mode
[  204.658054][ T6228] veth0_macvtap: entered promiscuous mode
[  204.687953][ T6228] veth1_macvtap: entered promiscuous mode
[  204.814530][ T6219] veth1_vlan: entered promiscuous mode
[  204.938810][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.950410][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.961229][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.975267][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.985273][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.996169][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.006208][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.016708][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.028923][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.064036][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.080511][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.097288][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.116064][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.126304][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.137135][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.148063][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.159081][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.170054][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.180673][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.193201][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.253597][ T6228] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.270522][ T6228] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.279922][ T6228] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.289327][ T6228] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.316178][ T6207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.324493][ T6207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.386141][ T6219] veth0_macvtap: entered promiscuous mode
[  205.424190][ T6219] veth1_macvtap: entered promiscuous mode
[  205.439396][ T6222] veth0_macvtap: entered promiscuous mode
[  205.572035][ T6222] veth1_macvtap: entered promiscuous mode
[  205.608468][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.649536][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.675967][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.687694][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.697810][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.708996][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.753466][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.774399][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.791525][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.810979][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.833454][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.144157][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.159076][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.179542][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.198256][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.208381][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.219198][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.234616][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.245669][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.256009][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.266758][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.279165][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.365082][ T6207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.386907][ T6207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.402706][ T6219] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.425212][ T6219] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.438698][ T6219] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.449507][ T6219] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.467556][  T143] hsr_slave_0: left promiscuous mode
[  206.478738][  T143] hsr_slave_1: left promiscuous mode
[  206.486034][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.494331][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.503900][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.511550][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.519348][  T143] bridge_slave_1: left allmulticast mode
[  206.525170][  T143] bridge_slave_1: left promiscuous mode
[  206.531507][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.543368][  T143] bridge_slave_0: left allmulticast mode
[  206.550011][  T143] bridge_slave_0: left promiscuous mode
[  206.556264][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.575017][  T143] hsr_slave_0: left promiscuous mode
[  206.582020][  T143] hsr_slave_1: left promiscuous mode
[  206.588300][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.596084][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.604982][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.612821][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.620842][  T143] bridge_slave_1: left allmulticast mode
[  206.636754][  T143] bridge_slave_1: left promiscuous mode
[  206.643161][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.662912][  T143] bridge_slave_0: left allmulticast mode
[  206.668628][  T143] bridge_slave_0: left promiscuous mode
[  206.681141][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.712490][  T143] hsr_slave_0: left promiscuous mode
[  206.730408][  T143] hsr_slave_1: left promiscuous mode
[  206.737338][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.771263][  T143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.793150][  T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.800647][  T143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.809494][  T143] bridge_slave_1: left allmulticast mode
[  206.827046][  T143] bridge_slave_1: left promiscuous mode
[  206.837328][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.864708][  T143] bridge_slave_0: left allmulticast mode
[  206.870562][  T143] bridge_slave_0: left promiscuous mode
[  206.892398][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.011860][  T143] veth1_macvtap: left promiscuous mode
[  207.017512][  T143] veth0_macvtap: left promiscuous mode
[  207.024439][  T143] veth1_vlan: left promiscuous mode
[  207.029763][  T143] veth0_vlan: left promiscuous mode
[  207.038692][  T143] veth1_macvtap: left promiscuous mode
[  207.044660][  T143] veth0_macvtap: left promiscuous mode
[  207.050683][  T143] veth1_vlan: left promiscuous mode
[  207.056455][  T143] veth0_vlan: left promiscuous mode
[  207.079063][  T143] veth1_macvtap: left promiscuous mode
[  207.085212][  T143] veth0_macvtap: left promiscuous mode
[  207.095402][  T143] veth1_vlan: left promiscuous mode
[  207.189112][  T143] veth0_vlan: left promiscuous mode
[  208.668097][  T143] team0 (unregistering): Port device team_slave_1 removed
[  208.722385][  T143] team0 (unregistering): Port device team_slave_0 removed
[  208.773017][  T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.820594][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.342664][  T143] bond0 (unregistering): Released all slaves
[  209.886339][  T143] team0 (unregistering): Port device team_slave_1 removed
[  209.943816][  T143] team0 (unregistering): Port device team_slave_0 removed
[  209.994233][  T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.041308][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.567487][  T143] bond0 (unregistering): Released all slaves
[  211.099093][  T143] team0 (unregistering): Port device team_slave_1 removed
[  211.146136][  T143] team0 (unregistering): Port device team_slave_0 removed
[  211.206946][  T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.260110][  T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.768260][  T143] bond0 (unregistering): Released all slaves
[  211.880642][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.918709][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.941414][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.957641][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.995657][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.007984][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.018203][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.029176][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.042773][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.111561][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.132039][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.145061][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.155836][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.165802][ T6222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.176572][ T6222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.217560][ T6222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.270172][ T6222] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.285646][ T6222] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.296261][ T6222] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.306121][ T6222] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.595361][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.605197][ T6447] syzkaller0: entered promiscuous mode
[  212.616571][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.642066][ T6447] syzkaller0: entered allmulticast mode
[  212.807496][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.598688][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.823153][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.847532][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.886875][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.953703][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.972542][ T6481] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  216.143608][ T6485] loop6: detected capacity change from 0 to 16
[  216.192708][ T6485] erofs: (device loop6): mounted with root inode @ nid 36.
[  217.331112][ T6479] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  217.388704][ T6479] erofs: (device loop6): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  217.440370][ T6479] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  217.956451][ T6479] erofs: (device loop6): z_erofs_readahead: readahead error at folio 1 @ nid 89
[  218.142366][ T6479] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  218.192446][ T6479] erofs: (device loop6): z_erofs_readahead: readahead error at folio 0 @ nid 89
[  218.275250][ T6479] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  218.328716][ T6479] erofs: (device loop6): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0
[  218.383480][ T6479] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  218.431095][   T27] audit: type=1800 audit(1765635202.682:7): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.106" name="file2" dev="loop6" ino=89 res=0 errno=0
[  218.626768][  T789] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  218.824252][ T6481] loop7: detected capacity change from 0 to 32768
[  218.831684][  T789] usb 6-1: Using ep0 maxpacket: 16
[  218.865006][ T6481] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.105 (6481)
[  218.878371][  T789] usb 6-1: unable to get BOS descriptor or descriptor too short
[  218.908794][  T789] usb 6-1: config 10 has an invalid interface number: 93 but max is 0
[  218.925933][  T789] usb 6-1: config 10 has no interface number 0
[  218.937586][  T789] usb 6-1: config 10 interface 93 has no altsetting 0
[  218.972044][  T789] usb 6-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=e4.13
[  218.992570][  T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.000628][  T789] usb 6-1: Product: syz
[  219.029515][  T789] usb 6-1: Manufacturer: syz
[  219.057641][  T789] usb 6-1: SerialNumber: syz
[  219.497870][  T789] upd78f0730 6-1:10.93: upd78f0730 converter detected
[  219.533448][  T789] usb 6-1: upd78f0730 converter now attached to ttyUSB0
[  219.589726][  T789] usb 6-1: USB disconnect, device number 2
[  219.631712][  T789] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  219.670243][  T789] upd78f0730 6-1:10.93: device disconnected
[  219.806455][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.6.115'.
[  220.238564][ T6531] loop5: detected capacity change from 0 to 512
[  220.272189][ T6531] EXT4-fs: inline encryption not supported
[  220.278143][ T6531] ext4: Unknown parameter 'nouser_xattr'
[  220.421240][ T6531] warning: `syz.5.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  221.022921][   T27] audit: type=1400 audit(1765635205.282:8): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=6556 comm="syz.5.124"
[  221.256524][ T6206] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  221.619230][ T6566] syz.5.124: attempt to access beyond end of device
[  221.619230][ T6566] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[  221.632722][ T6566] syz.5.124: attempt to access beyond end of device
[  221.632722][ T6566] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[  221.645921][ T6566] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  221.655605][ T6566] syz.5.124: attempt to access beyond end of device
[  221.655605][ T6566] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[  221.669018][ T6566] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  221.679502][ T6566] syz.5.124: attempt to access beyond end of device
[  221.679502][ T6566] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[  221.692520][ T6566] syz.5.124: attempt to access beyond end of device
[  221.692520][ T6566] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[  221.705335][ T6566] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  221.714946][ T6566] syz.5.124: attempt to access beyond end of device
[  221.714946][ T6566] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[  221.728188][ T6566] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  221.738199][ T6566] syz.5.124: attempt to access beyond end of device
[  221.738199][ T6566] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[  221.751902][ T6566] syz.5.124: attempt to access beyond end of device
[  221.751902][ T6566] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[  221.764790][ T6566] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  221.774601][ T6566] syz.5.124: attempt to access beyond end of device
[  221.774601][ T6566] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[  221.787486][ T6566] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  221.797676][ T6566] syz.5.124: attempt to access beyond end of device
[  221.797676][ T6566] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[  221.810508][ T6566] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  221.820285][ T6566] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  221.829901][ T6566] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  223.303362][ T6206] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  223.320984][ T6206] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  223.329920][ T6206] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  223.371010][ T6206] usb 5-1: config 220 has no interface number 2
[  223.377574][ T6206] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  223.416971][ T6206] usb 5-1: config 220 interface 0 has no altsetting 0
[  223.433460][ T6206] usb 5-1: config 220 interface 76 has no altsetting 0
[  223.450615][ T6206] usb 5-1: config 220 interface 1 has no altsetting 0
[  223.461644][ T6206] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  223.475207][ T6206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.494531][ T6206] usb 5-1: Product: syz
[  223.498777][ T6206] usb 5-1: Manufacturer: syz
[  223.511258][ T6206] usb 5-1: SerialNumber: syz
[  223.772018][ T6206] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  223.784786][ T6206] usb 5-1: selecting invalid altsetting 0
[  223.812174][ T6206] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  223.839816][ T6206] usb 5-1: No valid video chain found.
[  223.895937][ T6206] usb 5-1: selecting invalid altsetting 0
[  223.902586][ T5155] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  223.916941][ T6206] usbtest: probe of 5-1:220.1 failed with error -22
[  223.950280][ T6206] usb 5-1: USB disconnect, device number 2
[  223.990079][ T6587] input: syz1 as /devices/virtual/input/input5
[  224.123441][ T5155] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[  224.143756][ T5155] usb 6-1: config 0 has no interface number 0
[  224.172604][ T5155] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  224.201382][ T5155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.223044][ T5155] usb 6-1: Product: syz
[  224.238038][ T5155] usb 6-1: Manufacturer: syz
[  224.253889][ T5155] usb 6-1: SerialNumber: syz
[  224.277508][ T5155] usb 6-1: config 0 descriptor??
[  224.382074][ T6594] loop4: detected capacity change from 0 to 512
[  224.510801][ T6594] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  224.706836][ T5155] usb 6-1: Firmware version (0.0) predates our first public release.
[  224.721037][ T5155] usb 6-1: Please update to version 0.2 or newer
[  224.738480][ T5155] usb 6-1: Firmware: build ûh
[  224.983818][ T5155] usb 6-1: USB disconnect, device number 3
[  225.085168][  T173] kernel write not supported for file /input/event2 (pid: 173 comm: kworker/0:2)
[  225.663798][ T6621] dummy0: entered promiscuous mode
[  225.683018][ T6621] vlan2: entered promiscuous mode
[  225.711878][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.136'.
[  226.045104][ T6612] loop4: detected capacity change from 0 to 32768
[  226.184951][ T6612] openvswitch: netlink: Actions may not be safe on all matching packets
[  226.447650][ T6611] loop6: detected capacity change from 0 to 32768
[  226.539528][ T6611] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  226.590624][ T6611] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  226.802426][ T6611] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  226.845477][  T789] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  226.863923][  T789] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  227.111271][ T6655] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  227.111271][ T6655]    program syz.5.140 not setting count and/or reply_len properly
[  227.150709][  T789] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 286ms
[  227.176459][  T789] gfs2: fsid=syz:syz.0: jid=0: Done
[  227.186307][ T6611] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  228.105311][ T6636] loop7: detected capacity change from 0 to 40427
[  228.158552][ T6636] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff
[  228.218225][ T6664] loop4: detected capacity change from 0 to 1024
[  228.236337][ T6636] F2FS-fs (loop7): invalid crc value
[  228.330145][ T6636] F2FS-fs (loop7): Found nat_bits in checkpoint
[  228.393685][ T6669] hfsplus: invalid xattr key length: 0
[  228.682454][ T6636] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  228.822073][ T6636] F2FS-fs (loop7): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x1012/0x19e0
[  228.854065][ T6636] bio_check_eod: 2 callbacks suppressed
[  228.854084][ T6636] syz.7.138: attempt to access beyond end of device
[  228.854084][ T6636] loop7: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  228.922374][ T6636] F2FS-fs (loop7): Stopped filesystem due to reason: 1
[  229.109553][ T6681] loop6: detected capacity change from 0 to 128
[  229.199898][ T6204] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  229.349677][   T49] hfsplus: b-tree write err: -5, ino 8
[  230.549615][ T6707] loop6: detected capacity change from 0 to 512
[  230.632046][ T6707] EXT4-fs: Ignoring removed oldalloc option
[  231.050820][ T6707] EXT4-fs (loop6): 1 truncate cleaned up
[  231.069813][ T6707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.177821][ T6722] loop5: detected capacity change from 0 to 32768
[  232.284926][ T6722] 
[  232.284926][ T6722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.284926][ T6722] 
[  232.329249][ T6722] 
[  232.329249][ T6722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.329249][ T6722] 
[  232.339932][ T6722] 
[  232.339932][ T6722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.339932][ T6722] 
[  232.350553][ T6722] 
[  232.350553][ T6722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.350553][ T6722] 
[  232.361150][ T6722] 
[  232.361150][ T6722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.361150][ T6722] 
[  232.371654][ T6722] 
[  232.371654][ T6722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.371654][ T6722] 
[  232.382267][ T6722] 
[  232.382267][ T6722]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.382267][ T6722] 
[  232.450850][  T112] 
[  232.450850][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  232.450850][  T112] 
[  233.109555][ T6726] loop4: detected capacity change from 0 to 128
[  233.134342][ T6726] ADFS-fs (loop4): unrecognised mount option "u" or missing value
[  234.708434][ T6722] fuse: Invalid rootmode
[  234.928527][ T6224] 
[  234.928527][ T6224]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  234.928527][ T6224] 
[  234.971007][ T6224] 
[  234.971007][ T6224]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  234.971007][ T6224] 
[  235.265122][ T6739] netlink: 44 bytes leftover after parsing attributes in process `syz.7.149'.
[  235.442131][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.5.154'.
[  235.531066][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.5.154'.
[  235.618520][ T6738] dummy0: entered promiscuous mode
[  235.731866][ T6738] team0: entered promiscuous mode
[  235.737186][ T6738] team_slave_0: entered promiscuous mode
[  235.773678][ T6738] team_slave_1: entered promiscuous mode
[  236.961345][ T5808] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  237.113494][ T6228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.202713][ T5808] usb 8-1: config 1 has an invalid interface number: 4 but max is 2
[  237.231031][ T5808] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  237.273112][ T5808] usb 8-1: config 1 has no interface number 1
[  237.279332][ T5808] usb 8-1: config 1 interface 4 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  237.311355][ T5808] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  237.340976][ T5808] usb 8-1: config 1 interface 4 has no altsetting 0
[  237.354419][ T5808] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  237.382169][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.410683][ T5808] usb 8-1: Product: syz
[  237.421127][ T5808] usb 8-1: Manufacturer: syz
[  237.425786][ T5808] usb 8-1: SerialNumber: syz
[  237.703447][ T6751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.751629][ T6751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.779745][ T6775] FAULT_INJECTION: forcing a failure.
[  237.779745][ T6775] name failslab, interval 1, probability 0, space 0, times 0
[  237.795873][ T6775] CPU: 0 PID: 6775 Comm: syz.5.159 Not tainted syzkaller #0
[  237.803225][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  237.813323][ T6775] Call Trace:
[  237.816642][ T6775]  <TASK>
[  237.819616][ T6775]  dump_stack_lvl+0x16c/0x230
[  237.824347][ T6775]  ? show_regs_print_info+0x20/0x20
[  237.829611][ T6775]  ? load_image+0x3b0/0x3b0
[  237.834165][ T6775]  ? __might_sleep+0xe0/0xe0
[  237.838800][ T6775]  ? __lock_acquire+0x7c80/0x7c80
[  237.843874][ T6775]  should_fail_ex+0x39d/0x4d0
[  237.848633][ T6775]  should_failslab+0x9/0x20
[  237.853190][ T6775]  slab_pre_alloc_hook+0x59/0x310
[  237.858273][ T6775]  ? tomoyo_encode+0x28b/0x540
[  237.863195][ T6775]  ? tomoyo_encode+0x28b/0x540
[  237.868011][ T6775]  __kmem_cache_alloc_node+0x53/0x260
[  237.873529][ T6775]  ? tomoyo_encode+0x28b/0x540
[  237.878342][ T6775]  __kmalloc+0xa4/0x240
[  237.882550][ T6775]  tomoyo_encode+0x28b/0x540
[  237.887647][ T6775]  tomoyo_realpath_from_path+0x592/0x5d0
[  237.893348][ T6775]  tomoyo_path_number_perm+0x1ea/0x590
[  237.899027][ T6775]  ? tomoyo_path_number_perm+0x1ba/0x590
[  237.904797][ T6775]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  237.910309][ T6775]  ? ksys_write+0x1c1/0x250
[  237.914905][ T6775]  ? __fget_files+0x28/0x4d0
[  237.919562][ T6775]  security_file_ioctl+0x70/0xa0
[  237.924585][ T6775]  __se_sys_ioctl+0x48/0x170
[  237.929317][ T6775]  do_syscall_64+0x55/0xb0
[  237.933861][ T6775]  ? clear_bhb_loop+0x40/0x90
[  237.938581][ T6775]  ? clear_bhb_loop+0x40/0x90
[  237.943319][ T6775]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.949352][ T6775] RIP: 0033:0x7f4ed058f749
[  237.953813][ T6775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.973641][ T6775] RSP: 002b:00007f4ed1423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  237.982199][ T6775] RAX: ffffffffffffffda RBX: 00007f4ed07e5fa0 RCX: 00007f4ed058f749
[  237.990226][ T6775] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  237.998242][ T6775] RBP: 00007f4ed1423090 R08: 0000000000000000 R09: 0000000000000000
[  238.006706][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.014808][ T6775] R13: 00007f4ed07e6038 R14: 00007f4ed07e5fa0 R15: 00007ffc882ca438
[  238.022927][ T6775]  </TASK>
[  238.049815][ T6775] ERROR: Out of memory at tomoyo_realpath_from_path.
[  238.306628][ T5808] usb 8-1: USB disconnect, device number 2
[  238.386309][ T6788] netlink: 44 bytes leftover after parsing attributes in process `syz.6.160'.
[  240.081612][ T6797] tipc: Started in network mode
[  240.161211][ T6797] tipc: Node identity 2e34bd19507d, cluster identity 4711
[  240.180193][ T6797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.743780][ T6796] tipc: Disabling bearer <eth:syzkaller0>
[  241.131894][ T6825] loop4: detected capacity change from 0 to 256
[  241.188498][ T6825] exfat: Deprecated parameter 'utf8'
[  241.195035][ T6825] exfat: Unknown parameter 'um0000000000000$00000006'
[  241.871136][  T173] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  242.010079][ T6832] loop4: detected capacity change from 0 to 128
[  242.028569][ T6832] hpfs: bad mount options.
[  242.083835][  T173] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  242.105132][  T173] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.146818][  T173] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.170234][  T173] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  242.202022][  T173] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  242.221228][  T173] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  242.239705][  T173] usb 8-1: Manufacturer: syz
[  242.254523][  T173] usb 8-1: config 0 descriptor??
[  242.726604][  T173] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  242.752860][  T173] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[  242.813200][  T173] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  242.916984][ T6844] loop5: detected capacity change from 0 to 32768
[  243.073024][ T6844] JBD2: Ignoring recovery information on journal
[  243.082780][ T6844] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75
[  243.132322][ T6844] JBD2: bad block at offset 32
[  243.166208][ T6844] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  243.201353][ T5155] usb 8-1: USB disconnect, device number 3
[  243.581274][ T6224] ocfs2: Unmounting device (7,5) on (node local)
[  243.596086][ T6854] loop4: detected capacity change from 0 to 32768
[  243.668191][ T6854] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  243.775295][ T6854] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  243.852895][ T6854] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30
[  243.936228][ T6854] XFS (loop4): Ending clean mount
[  243.943404][ T6880] loop7: detected capacity change from 0 to 512
[  244.344474][ T6854] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x1803 dinode
[  244.355804][ T6854] XFS (loop4): Unmount and run xfs_repair
[  244.362558][ T6854] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  244.370008][ T6854] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  244.379153][ T6854] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  244.388337][ T6854] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  244.397296][ T6854] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  244.407106][ T6854] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  244.416160][ T6854] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  244.425199][ T6854] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  244.436086][ T6854] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  244.714637][ T6219] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  245.306767][ T6910] loop4: detected capacity change from 0 to 16
[  245.353793][ T6910] erofs: (device loop4): erofs_read_superblock: blkszbits 0 isn't supported
[  246.776504][ T6942] input: syz0 as /devices/virtual/input/input6
[  246.781080][ T5857] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  247.020036][ T5857] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  247.034696][ T5857] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  247.073296][ T5857] usb 8-1: Product: syz
[  247.111437][ T5857] usb 8-1: SerialNumber: syz
[  247.212488][ T5857] usb 8-1: config 0 descriptor??
[  247.604548][ T5857] usb 8-1: USB disconnect, device number 4
[  247.752276][ T6950] capability: warning: `syz.5.190' uses 32-bit capabilities (legacy support in use)
[  249.362856][ T6983] syz.5.197 uses obsolete (PF_INET,SOCK_PACKET)
[  250.306508][ T5857] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  250.405186][ T6984] loop5: detected capacity change from 0 to 32768
[  250.440821][ T6981] loop4: detected capacity change from 0 to 32768
[  250.472509][ T6981] (syz.4.198,6981,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  250.476175][ T6984] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.511669][ T6981] (syz.4.198,6981,1):ocfs2_fill_super:1178 ERROR: status = -22
[  250.531466][ T6984] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  250.540323][ T6984] BTRFS info (device loop5): turning on sync discard
[  250.567152][ T5857] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  250.582433][ T5857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.601090][ T6984] BTRFS info (device loop5): force zlib compression, level 3
[  250.609631][ T6984] BTRFS info (device loop5): turning off discard
[  250.616828][ T5857] usb 8-1: Product: syz
[  250.632295][ T5857] usb 8-1: Manufacturer: syz
[  250.637076][ T6984] BTRFS info (device loop5): allowing degraded mounts
[  250.644569][ T5857] usb 8-1: SerialNumber: syz
[  250.650102][ T6984] BTRFS info (device loop5): turning on flush-on-commit
[  250.668028][ T5857] usb 8-1: config 0 descriptor??
[  250.685158][ T6984] BTRFS info (device loop5): using free space tree
[  252.494674][ T6984] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  252.497988][ T6984] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  252.504338][ T5857] usb 8-1: Firmware version (0.0) predates our first public release.
[  252.551124][ T5857] usb 8-1: Please update to version 0.2 or newer
[  252.581124][ T5857] usb 8-1: Firmware: build 
[  252.587318][ T6984] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  252.613007][ T6984] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  252.692013][ T6984] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  252.713879][ T6984] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  252.732012][ T6984] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  252.786622][ T7021] netlink: 44 bytes leftover after parsing attributes in process `syz.4.202'.
[  252.832062][ T6984] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  252.836831][ T6984] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  252.861595][ T7021] netlink: 40 bytes leftover after parsing attributes in process `syz.4.202'.
[  252.888179][ T6984] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  252.934433][ T6984] BTRFS error (device loop5): open_ctree failed: -12
[  252.988097][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.054504][ T6993] ------------[ cut here ]------------
[  254.060761][ T6993] WARNING: CPU: 1 PID: 6993 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460
[  254.070097][ T6993] Modules linked in:
[  254.074150][ T6993] CPU: 1 PID: 6993 Comm: syz.7.199 Not tainted syzkaller #0
[  254.081783][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  254.092269][ T6993] RIP: 0010:__alloc_pages+0x2de/0x460
[  254.097836][ T6993] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 fe a1 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff
[  254.117994][ T6993] RSP: 0000:ffffc9000bebfa80 EFLAGS: 00010246
[  254.124724][ T6993] RAX: ffffc9000bebfa00 RBX: 1ffff920017d7f54 RCX: 0000000000000000
[  254.133293][ T6993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000bebfae8
[  254.142017][ T6993] RBP: ffffc9000bebfb80 R08: ffffc9000bebfae7 R09: 0000000000000000
[  254.150167][ T6993] R10: ffffc9000bebfac0 R11: fffff520017d7f5d R12: 000000000000001f
[  254.158351][ T6993] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000
[  254.166814][ T6993] FS:  00007f0088aa56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  254.176304][ T6993] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  254.183183][ T6993] CR2: 000055918bcfd000 CR3: 00000000523a6000 CR4: 00000000003506e0
[  254.191365][ T6993] Call Trace:
[  254.194753][ T6993]  <TASK>
[  254.197785][ T6993]  ? zone_statistics+0x170/0x170
[  254.202936][ T6993]  ? v9fs_fid_find+0x270/0x270
[  254.207850][ T6993]  __kmalloc_large_node+0x8c/0x1e0
[  254.213124][ T6993]  ? v9fs_fid_get_acl+0x4f/0xf0
[  254.218139][ T6993]  __kmalloc+0x111/0x240
[  254.222602][ T6993]  v9fs_fid_get_acl+0x4f/0xf0
[  254.227480][ T6993]  v9fs_get_acl+0x11b/0x350
[  254.232382][ T6993]  v9fs_mount+0x862/0xb40
[  254.236921][ T6993]  ? xfs_fs_commit_blocks+0x6c0/0x6c0
[  254.242495][ T6993]  legacy_get_tree+0xea/0x180
[  254.247292][ T6993]  ? xfs_fs_commit_blocks+0x6c0/0x6c0
[  254.252854][ T6993]  vfs_get_tree+0x8c/0x280
[  254.257404][ T6993]  do_new_mount+0x24b/0xa40
[  254.262096][ T6993]  __se_sys_mount+0x2da/0x3c0
[  254.266911][ T6993]  ? __x64_sys_mount+0xc0/0xc0
[  254.271890][ T6993]  ? lockdep_hardirqs_on+0x98/0x150
[  254.277251][ T6993]  ? __x64_sys_mount+0x20/0xc0
[  254.282493][ T6993]  do_syscall_64+0x55/0xb0
[  254.287029][ T6993]  ? clear_bhb_loop+0x40/0x90
[  254.291896][ T6993]  ? clear_bhb_loop+0x40/0x90
[  254.296728][ T6993]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  254.302877][ T6993] RIP: 0033:0x7f0087b8f749
[  254.307408][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.327546][ T6993] RSP: 002b:00007f0088aa5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  254.336405][ T6993] RAX: ffffffffffffffda RBX: 00007f0087de5fa0 RCX: 00007f0087b8f749
[  254.344672][ T6993] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000
[  254.353023][ T6993] RBP: 00007f0087c13f91 R08: 0000200000000580 R09: 0000000000000000
[  254.361358][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.369538][ T6993] R13: 00007f0087de6038 R14: 00007f0087de5fa0 R15: 00007ffdfc37fbf8
[  254.369914][ T6204] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (6204)
[  254.377770][ T6993]  </TASK>
[  254.392802][ T6993] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  254.400111][ T6993] CPU: 1 PID: 6993 Comm: syz.7.199 Not tainted syzkaller #0
[  254.407417][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  254.417666][ T6993] Call Trace:
[  254.420959][ T6993]  <TASK>
[  254.423903][ T6993]  dump_stack_lvl+0x16c/0x230
[  254.428609][ T6993]  ? show_regs_print_info+0x20/0x20
[  254.433825][ T6993]  ? load_image+0x3b0/0x3b0
[  254.438527][ T6993]  panic+0x2c0/0x710
[  254.442441][ T6993]  ? bpf_jit_dump+0xd0/0xd0
[  254.447068][ T6993]  __warn+0x2e0/0x470
[  254.451100][ T6993]  ? __alloc_pages+0x2de/0x460
[  254.455891][ T6993]  ? __alloc_pages+0x2de/0x460
[  254.460665][ T6993]  report_bug+0x2be/0x4f0
[  254.465006][ T6993]  ? __alloc_pages+0x2de/0x460
[  254.469785][ T6993]  ? __alloc_pages+0x2de/0x460
[  254.474649][ T6993]  ? __alloc_pages+0x2e0/0x460
[  254.479430][ T6993]  handle_bug+0xcf/0x120
[  254.483688][ T6993]  exc_invalid_op+0x1a/0x50
[  254.488293][ T6993]  asm_exc_invalid_op+0x1a/0x20
[  254.493170][ T6993] RIP: 0010:__alloc_pages+0x2de/0x460
[  254.498592][ T6993] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 fe a1 63 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff
[  254.518209][ T6993] RSP: 0000:ffffc9000bebfa80 EFLAGS: 00010246
[  254.524465][ T6993] RAX: ffffc9000bebfa00 RBX: 1ffff920017d7f54 RCX: 0000000000000000
[  254.532451][ T6993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000bebfae8
[  254.540433][ T6993] RBP: ffffc9000bebfb80 R08: ffffc9000bebfae7 R09: 0000000000000000
[  254.548502][ T6993] R10: ffffc9000bebfac0 R11: fffff520017d7f5d R12: 000000000000001f
[  254.556577][ T6993] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000
[  254.564664][ T6993]  ? zone_statistics+0x170/0x170
[  254.569633][ T6993]  ? v9fs_fid_find+0x270/0x270
[  254.574458][ T6993]  __kmalloc_large_node+0x8c/0x1e0
[  254.579591][ T6993]  ? v9fs_fid_get_acl+0x4f/0xf0
[  254.584547][ T6993]  __kmalloc+0x111/0x240
[  254.588894][ T6993]  v9fs_fid_get_acl+0x4f/0xf0
[  254.593587][ T6993]  v9fs_get_acl+0x11b/0x350
[  254.598193][ T6993]  v9fs_mount+0x862/0xb40
[  254.602630][ T6993]  ? xfs_fs_commit_blocks+0x6c0/0x6c0
[  254.608022][ T6993]  legacy_get_tree+0xea/0x180
[  254.612717][ T6993]  ? xfs_fs_commit_blocks+0x6c0/0x6c0
[  254.618104][ T6993]  vfs_get_tree+0x8c/0x280
[  254.622531][ T6993]  do_new_mount+0x24b/0xa40
[  254.627048][ T6993]  __se_sys_mount+0x2da/0x3c0
[  254.631753][ T6993]  ? __x64_sys_mount+0xc0/0xc0
[  254.636535][ T6993]  ? lockdep_hardirqs_on+0x98/0x150
[  254.641764][ T6993]  ? __x64_sys_mount+0x20/0xc0
[  254.646548][ T6993]  do_syscall_64+0x55/0xb0
[  254.650990][ T6993]  ? clear_bhb_loop+0x40/0x90
[  254.655772][ T6993]  ? clear_bhb_loop+0x40/0x90
[  254.660466][ T6993]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  254.666391][ T6993] RIP: 0033:0x7f0087b8f749
[  254.670836][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.690472][ T6993] RSP: 002b:00007f0088aa5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  254.698911][ T6993] RAX: ffffffffffffffda RBX: 00007f0087de5fa0 RCX: 00007f0087b8f749
[  254.707160][ T6993] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000
[  254.715141][ T6993] RBP: 00007f0087c13f91 R08: 0000200000000580 R09: 0000000000000000
[  254.723121][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.731120][ T6993] R13: 00007f0087de6038 R14: 00007f0087de5fa0 R15: 00007ffdfc37fbf8
[  254.739255][ T6993]  </TASK>
[  254.742724][ T6993] Kernel Offset: disabled
[  254.747129][ T6993] Rebooting in 86400 seconds..