last executing test programs:

2m19.68540162s ago: executing program 4 (id=5):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000680)=[@wr_crn={0x67, 0x20, {0x2, 0x1}}, @nested_vmresume={0x130, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x67be, 0x7, 0x7fffffffffffffff}}, @nested_load_code={0x12e, 0x82, {0x1, "660f3a096c30b30048b839a6ccfbddeb8e750f23c80f21f835000000000f23f8460f233048b800000000000000000f23c80f21f8350c00b0000f23f866ba6100ed440f01c4450f901666b87f008ec8b9dc010000b80e000000ba000000000f3066470f38829882710000"}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x1, 0x3}}, @wr_drn={0x68, 0x20, {0x3, 0x3}}, @wr_drn={0x68, 0x20, {0x3, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x9cc, 0x5}}, @wr_drn={0x68, 0x20, {0x4, 0xff}}, @nested_create_vm={0x12d, 0x18}, @rdmsr={0x66, 0x18, {0x9b5}}, @nested_create_vm={0x12d, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0x8679, 0x6, 0x7fffffffffffffff}}, @nested_create_vm={0x12d, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xab3}}, @set_irq_handler={0xc8, 0x20, {0xf1, 0x2}}, @rdmsr={0x66, 0x18, {0x9c4}}, @in_dx={0x69, 0x20, {0x79f1, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x9c, 0x1, 0x5, 0xf}}, @set_irq_handler={0xc8, 0x20, {0x21, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x9d, 0x7, 0x1}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x8}, @set_irq_handler={0xc8, 0x20, {0x8}}, @nested_load_code={0x12e, 0x59, {0x2, "260f011d0c900000f23e650f0766b88c008ee043d9fb66ba6100ecb9800000c00f3235008000000f3066ba420066b8000066ef650f19ca40f4430f019803000000"}}, @nested_vmresume={0x130, 0x18}, @nested_load_code={0x12e, 0x5b, {0x1, "450f3805550866bad104b00dee67460f01fa0f32c4a3791d868800000004f30fc73166b8e0000f00d0c4c1fe12bcd9fba93a1766ba200066b8010066efc4218167659b"}}], 0x486})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd2(0x5, 0x801)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x0, r4})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x24, 0x0, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff9, 0x2, 0x1136b2e5, 0x5, 0x0, 0x0, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x8004005, 0x202})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r5, &(0x7f0000000080), 0x10)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201a8b0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@sys_tz}, {@gid}, {@zero_size_dir}, {@dmask={'dmask', 0x3d, 0xa}}, {@gid}, {@zero_size_dir}, {@umask={'umask', 0x3d, 0x10000000000000}}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x80000000}}, {@dmask={'dmask', 0x3d, 0x4}}]}, 0x1, 0x152a, &(0x7f0000001f80)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000000500)=""/45, 0x2d)

2m17.08511304s ago: executing program 4 (id=18):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x4}, 0x8)
sendto$inet(r0, &(0x7f0000000080)="05", 0xffe0, 0x2000c845, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)

2m16.619780086s ago: executing program 4 (id=20):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005aacdca04a74a33e"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffff00b703000008000000b7040a000000000000000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="2e81000046dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
sigaltstack(&(0x7f0000000340)={&(0x7f0000000300)=""/42, 0x1, 0x2a}, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
sched_setaffinity(r5, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x2c, 0x0, &(0x7f00000003c0))
ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}})
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})

2m15.123912396s ago: executing program 4 (id=24):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00')
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81000001}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)

2m14.103345777s ago: executing program 4 (id=26):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3, 0x0, 0x0, r5})
socket$rds(0x15, 0x5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000)

2m11.431283737s ago: executing program 4 (id=30):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x4}, 0x8)
sendto$inet(r0, &(0x7f0000000080)="05", 0xffe0, 0x2000c845, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)

2m9.366609494s ago: executing program 32 (id=30):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x4}, 0x8)
sendto$inet(r0, &(0x7f0000000080)="05", 0xffe0, 0x2000c845, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)

11.604802845s ago: executing program 3 (id=254):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000340)={[{@allow_utime={'allow_utime', 0x3d, 0x80000001}}, {@dmask={'dmask', 0x3d, 0x8}}, {@uid={'uid', 0x3d, 0xee00}}, {@time_offset={'time_offset', 0x3d, 0xc0}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@utf8}, {@fmask={'fmask', 0x3d, 0xa584}}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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")
link(&(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3, 0x0, 0x0, 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

11.22063448s ago: executing program 1 (id=257):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0xcac00, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1100, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x20, r3, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4088}, 0x840)
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x93)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
uname(&(0x7f0000000240)=""/108)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

11.219760442s ago: executing program 3 (id=258):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
syz_open_dev$video4linux(0x0, 0x4, 0x40000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000500)='./control\x00', 0x105)
rmdir(0x0)
rename(&(0x7f0000000180)='./file0/file0\x00', 0x0)

10.620485669s ago: executing program 5 (id=259):
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x80000)

9.766936288s ago: executing program 3 (id=260):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b3b2000000000000050000008510000001000000950000000000000085000000ad00000094ffffffffffe700"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xa}, 0x94)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="ff7f00d9a2f70000"], 0x20}}, 0x0)
read(r1, &(0x7f0000000140)=""/166, 0xa6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x40)

8.8625671s ago: executing program 3 (id=261):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3, 0x0, 0x0, r4})
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000)

8.734633144s ago: executing program 5 (id=262):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f0000000ec0)={[{@errors_remount}, {@test_dummy_encryption_v1}, {@noauto_da_alloc}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
openat$sndseq(0xffffffffffffff9c, 0x0, 0x220002)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c0}, 0x880)
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000000280)=""/4096, 0x1000, 0x1)

7.940636829s ago: executing program 1 (id=264):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x92}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x5, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r3, r2, 0x0) (async)
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0xfffffffffffffef8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x1b, 0x7, 0x1, 0x0, "9057d49cb2e5f2372685f55ee28bf8b200a95749a4b3c7"}]}], {0x14}}, 0xac}}, 0x48080)

7.649935221s ago: executing program 0 (id=266):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6eaa0000000000007110bb000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)

7.43827465s ago: executing program 5 (id=267):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x13, 0x800000000004, @thr={&(0x7f0000000100)="12640093581c28c4f806fe612b480efe8147533ba9470dde99174cd9638a4f7f6cbc62dc00a3d4dea7", &(0x7f0000000240)="47e5bfb063c36b528d32ec8af9175ed90bbaf39ad28cf50a"}}, &(0x7f0000000440))
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYBLOB="399a5bbb4f22f085742c2172bbd09f39102ba8aeef6fa7797ce0afa621a8b4fcefca2047b5b9edc85472b5b3683952e298d80d30ae012aa7022a294ed68c32a7c9046c30b37972770a038eb145ff9436dffbf5527f1301c5331b3bd406e2cc7041bbee405d54b2987c2be89bd047decd3fbf443ca7d882469ac0f9dafdd8f3b7afcb302f3486afc7a31b10aec1f1df9c97efa2ffabc3d4f4c1aca0dba400a6dad32a5d"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = signalfd(r3, &(0x7f0000000140)={[0x10]}, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, r7, 0x0, 0x0, 0x0, 0x2000, 0x1, {0xfffe}})
io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0)
exit(0x0)
epoll_create(0x20000000)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
timer_create(0x3, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x1621000, 0x0, 0x0, 0x3}, 0x20)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x2000800)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210852, &(0x7f0000000880)=ANY=[@ANYRES32=r3, @ANYBLOB="a76045a0eaa1dfdfcebba000c099bae9837dcfe1b041d3d877d22e735bb7aa4911294573b945f445a41e4778b5fae94b21f2ef6aeddf9f202d2f9ea3b382c971cc2f34d2fdd77b13309b6418551daaebb9ef792b7b0d2042bb680bcb55edb410dee7252b85fa0e2b", @ANYRES16=0x0, @ANYRESDEC=r4, @ANYRES32], 0x20, 0xefb, &(0x7f0000002500)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))

7.32753158s ago: executing program 0 (id=268):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") (async)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r1=>0x0}) (async, rerun: 32)
r2 = syz_io_uring_setup(0x547, &(0x7f00000003c0)={0x0, 0xf372, 0x10, 0x0, 0x8a}, &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 32)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x11, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0xc0a01, 0x0) (rerun: 32)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000380)={r3}, 0x1) (async)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d3836312c757466383d302c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c726f6469722c757466383d302c00531b17042f7ca50e22895c2b5d4e569f5eaf155190d8f66862a6e25caf6e3347919a6ebd4864113ab7083ee0c1019f"], 0x81, 0x2c5, &(0x7f0000000780)="$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") (async)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1017c0, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000006000000080003009fcf95224ba39cc9df98ca883b8a86dc368f92c03844477e54abe4bac40f060d41eb952c00c5f0652782840a27e43dadf2bd6913024a40c6c9cf0f19a949c4a91e9411f51c4c6087fd02e348e7e7956e262f8ad2b3830000", @ANYRES32=r7, @ANYBLOB="080005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010002000000000002000500", @ANYRES32=0x0, @ANYBLOB="3bd9e10b8007", @ANYRES32=0x0, @ANYBLOB="040000000000000010000500000000002000000000000000"], 0x34, 0x2) (async)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')

7.253236457s ago: executing program 1 (id=269):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000001a00)={<r1=>0x0, ""/256, <r2=>0x0, <r3=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r4=>0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0})
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r7, @ANYRES64=r5, @ANYRES16=r4, @ANYRES16=r7, @ANYRESDEC=r6, @ANYRES16=r3, @ANYRES16, @ANYBLOB="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", @ANYRES16=0x0, @ANYRES32=r7], 0x5, 0x0, &(0x7f0000000000)) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000a00)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x6, "2e7760292ad7ee"}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
futex(0xfffffffffffffffc, 0x80, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r8, 0x4b6a, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async)
ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x1f, 0x3, 0x10a, &(0x7f0000000600)="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"})
r12 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r12, 0xc0045516, &(0x7f0000000000)=0xffb) (async)
ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000180))
r13 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r14 = epoll_create(0xb3)
epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r12, &(0x7f0000000080)={0x40002009}) (async)
ftruncate(r13, 0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r12, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x2, 'syz0\x00'}, 0x2, 0x3, 0x2, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x20)

6.070490794s ago: executing program 2 (id=270):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
syz_open_dev$video4linux(0x0, 0x4, 0x40000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000500)='./control\x00', 0x105)
rmdir(0x0)
rename(&(0x7f0000000180)='./file0/file0\x00', 0x0)

6.053234444s ago: executing program 0 (id=271):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r7 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0xe1540, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r7, 0x6430)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x1, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d, 0x0, 0x12}, 0x10000)

4.908515786s ago: executing program 2 (id=272):
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x80000)

3.821340051s ago: executing program 0 (id=273):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0a0800452000280066000009069078ac1414bb0a0101014e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="47eb25d327652c4a"], 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xe}, 0x8)
sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x38, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)

3.692087441s ago: executing program 2 (id=274):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), r2)
sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d00)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)

3.629190865s ago: executing program 5 (id=275):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0xa00008, &(0x7f0000000080)=ANY=[], 0x3, 0x393, &(0x7f00000009c0)="$eJzs3T1PFE0AB/D/7N7rc4RnH+AJxk7UxIocWGiMicbQ+QUsDIrckRBWTHhJlGhACytj6ExMLO2sjfoRtDF+ATsKYqUNIYY1Mzt7O7c3u9xxcID8fwnH3DLvszO7oxwLIjqxbkx8f3txQ36JPAAXwBXAAVACcgD+x3Bpeb6CJb9ey8rIVSnkl0CYUrTEmZ6v25LKdCqF5sl3OfSZx+hgBK2jZPHz4CtCh0qEc7+FAxT17FQ/L/W8Znuy1kaEYm+qcoQYIyy2sOVaR5yIiE4Sff139FWiT9+/Ow5wHkI49uv/+mFVt13mDqLparcFPP639/U5MuT1Hw/j0QyE7B/VI6K0PL80q/Z7anMg+9CJdom2vFQu+cTBIOpuvcFwEgNglNLQdEem6uKUZ2b9+uiayuAZrmlGtCH1WgtP3UhabQvhtxHL3jRDVtuzVVQb8rIN+ZT6D3Zc4sdNvLIXN/mlsHudxGfxVUwKD69RQ78+mAuE7ByV3APK+nDUp7N+vZqeo2qlp1pZbWplPPv+U4Wcjkbgw7u4lWWzleZ8LcGVdbGRuYjk/buuAbCe0gvq8EBzIXp0xtJbp1INWlONN95vW1MNJVOVZ/J+fXT6gV/bdYOyH4wJF88O8VLcEiP4gfeYaIy/jODKpb51Zt75FEYwVn4hhIoZ9kJVtie1DjkVM2Ucm6gq3u9oZhK2fwch/T65Dtt5eIF7uIz+xUcrc1O+X1/oIuAi5UfIWVLJ1cIWOVpz0Hk1opWgq1YkA+GJKOKc5XcjDkoyILt73wrdCYKg6YicwDKQs/ZYI+C0VUQhqmpancNT59KbRpPVMqtXqu4aiLV4dFyowPX0yPGyqdqudVioSr7aSCXPkU6S/wpLl+NujSPiGi4U9u+sswWioqZ8/1Rj4FwU25op5T0UevPJ3JS/l8WIjpvF52f0moPh25tXD7s61HvyvkuE+z9jv1JVq4588TJ2I8FumRs5jqXsgAbU6z/xParQ/36fseeqpO/gKlHAr49n7bnOXgDOGQdlaQ6iEp8ms/WwqkNH8H8li7ZqlZMHVoywmMA33DXu/4mIiIiIiIiIiIiIiIiIiIiIiIiI6FiIf+nf6/LjBDv6c0j2T2LENk7gH94gIiIiIiIiIiIiIiIiIiIiIiIiIiIiIuqO8fxfwFVPjClYnv+bfFJTq6zn/0Z/2Lvd5/+6bTz/V/TkCTpEf7U/AQAA//+SwVdj")

3.610794425s ago: executing program 3 (id=276):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x4008c]}, 0xffffffffffffffff, 0x8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x200000, &(0x7f00000002c0)={[{@grpquota}, {@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x5, 0xbac, &(0x7f00000017c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x40, 0x10)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}})
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

3.587070218s ago: executing program 1 (id=277):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f0000000ec0)={[{@errors_remount}, {@test_dummy_encryption_v1}, {@noauto_da_alloc}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
openat$sndseq(0xffffffffffffff9c, 0x0, 0x220002)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c0}, 0x880)
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000000280)=""/4096, 0x1000, 0x1)

3.241890019s ago: executing program 5 (id=278):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c0c0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=<r6=>0x0)
prlimit64(r6, 0xc, &(0x7f0000000340)={0x3, 0x4}, &(0x7f0000000380))
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r8 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r8, 0x0)
fallocate(r7, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={r2, @in={{0x2, 0x0, @empty}}, 0x20000000, 0x0, 0x3ff, 0x0, 0x33}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x587}}, 0x0, 0x8000, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x1, 0x7fff, 0xfffffffa, 0x5, 0x6412, 0x6710}, 0x20)
sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="415074c8eb900e28e2478407ee4ece6b5fc59d66f5e334d0fa2bc5b9aa506f542668d88ccc7a70cddaa1f1d8558a4e7a806f0c6a3e0c67ef2df2eed8260167b50c1657dae0030865772ac385ee6c6231e001e59285dab3b23ede18f36d31ea84fa50acfa820102fac51b6140d7aac92b373cf095dd828ddac033e4c4ce9fa9", 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c)

3.029149368s ago: executing program 2 (id=279):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x20000800)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getrlimit(0xc, &(0x7f0000000180))
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x2, 0x2000008, 0x200, 0x0, 0x3})
socket$tipc(0x1e, 0x5, 0x0)
connect$netrom(r0, 0x0, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20)
ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000100)={0x0, 0x1, @start={0x0, 0x1}})
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)
r8 = socket$kcm(0x2, 0x1, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "354ec0", 0x44, 0x3c, 0x0, @ipv4, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x2, {0xfffffffc}}}}}}}}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000c80)={@remote, 0x63})

2.906629603s ago: executing program 3 (id=280):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1bf)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
symlinkat(&(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
fcntl$setlease(r1, 0x400, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x3}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="7282cc1cd6d5e9b2d04a0dd1baada4ec3e70930dccf0bce4b8702d800200b78ace7fd2dc281b5c48db25a39526a6fa24165a4c963cee517a76bff5427dafc1549372d61be45dea6cf604bb627ebfa9a825587818bf14aaea4c020414b4e8d0738e456b3fa2a19afe3a76735c133d22c17b177b7184206d449f2f5ad58e4c3cac79bececa0ebe9f196b4730417e04804752034028bcbc3e6b6f6ac8495a6e460b970018dfba", @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRES64=r1, @ANYRESHEX=r0], 0xa8}}, 0x40041)
rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0xff2e)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x10000100000001, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x9, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x4, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x6, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x2, 0x100, 0x9, 0xb, 0x1a7427c9, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x9, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0x5, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x4, 0x9, 0x10, 0x2, 0xd1f, 0x80000001, 0x9, 0x8001, 0x0, 0x1, 0xfffffffffffff3a0, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe5, 0xfa0, 0x9, 0x1, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x6, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0xa46, 0xfffffffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x7, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x27ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0xd27, 0x0, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x5}, 0x1, [0x2, 0x84, 0x1c00000000000000, 0x7fffffffffffffff, 0x3, 0x3896, 0x5, 0x1, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7ff, 0x80, 0x2fc2f8ae, 0x2, 0x101, 0xa71, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x2, 0x10, 0xd, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x8, 0x208, 0x144be44d, 0xc3b, 0x400000000003, 0x0, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x6, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0xb9b, 0x5, 0x1, 0x6, 0x80, 0x4, 0xc4, 0x8001, 0x5, 0xffff, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0xd05, 0xf, 0xf95, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]})
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r6 = syz_open_pts(r4, 0xc0000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fddbdf250b00000008000300", @ANYRES32=r11, @ANYBLOB="0a00060008021100000000001c005080090001e66b1ae03f6c000000050002000400000004000600"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000080)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b017d23c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b9ee4a0a0b9636bef4c23788494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74587100e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f26c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada4764320889000000000000000000000000000000a790af4fc17872b55b10db99e212d18193235659df45627da300959eafc8bfb44f70d250f8f2e86532700254c9a8b14999f59c8b9034c4bb2448eaeff5db21d4a7f3d974790d4c3cba7c402f50585b9289d86400679e5c2bcacb2841ca074d51fdb4a29e84d72b6c996cfbee06aa52cd632e82ba068e8e1572ef2eb414ba5fccfc3c03e64df6a9cc3936c604aa2c0e2ec7b777475023f29b146af003472ce146a5ff997ba53c51026c0096154f9280a34bbf21d66f57a250b5397766122fc86950ce5252e96868cd04df54764cf2082153d6cedd8aaf9700c734aa4a1cb33a2e0a13c5687be4de327511bff9816d13c3219dac1c1535f10243db6f96960ea6a621f5e1b7babbedf0a6bf0cf74123d2e78d01be2b048883a2459eec630fb0293d28d9799fd3a792caff693fd9f002f14c43fb5a1051cc686b7f114d7927eed559bdf2e8ddea3e61d5d942b63fe90230b2e1948fc563ef94d437281671d2fe5032d2a091fa842b0af2e116ba"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newtclass={0x84, 0x28, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0x2, 0x10}, {0xc, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xf}}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r13 = dup3(r6, r4, 0x0)
ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x17)

1.847145426s ago: executing program 1 (id=281):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=<r3=>0x0)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
close(r2)
close_range(r0, 0xffffffffffffffff, 0x604)

1.767462181s ago: executing program 2 (id=282):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
syz_open_dev$video4linux(0x0, 0x4, 0x40000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000500)='./control\x00', 0x105)
rmdir(&(0x7f0000000100)='./control\x00')
rename(0x0, 0x0)

884.542895ms ago: executing program 0 (id=283):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x400000000000000, 0x0, 0x413, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r2, 0x0, 0x0, 0x24040000, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000002000)=0x4080, 0x4)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29}}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r4, 0x401870c8, 0x0)

621.881822ms ago: executing program 1 (id=284):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1802) (fail_nth: 8)

231.720269ms ago: executing program 2 (id=285):
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x80000)

104.02636ms ago: executing program 5 (id=286):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r2, 0x303, 0x4, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x44000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r0, r0, 0xffffffffffffffff, r0, r0], 0x0, 0x10, 0x9}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x1, 0xf7, 0x0, 0x5}, {0x514, 0x3, 0x3, 0x800}, {0x1, 0x1, 0x92, 0x10000}, {0x9, 0x2, 0x0, 0x3}]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x3, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0)

0s ago: executing program 0 (id=287):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x3, 0x0, 0x0, r4})
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts.
[   84.609617][ T5810] cgroup: Unknown subsys name 'net'
[   84.742573][ T5810] cgroup: Unknown subsys name 'cpuset'
[   84.751938][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   86.385580][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   88.769703][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.820636][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.828026][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.844545][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.852882][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.861155][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.861541][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.872385][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.881297][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.883531][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.891270][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.900319][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.906871][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.918416][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.927543][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.935040][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.941172][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.949997][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.950122][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.965463][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.983286][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.990719][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.994294][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.006079][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.013494][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.793373][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   89.833047][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   89.855599][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   89.975687][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   90.012700][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   90.244814][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.252514][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.260892][ T5833] bridge_slave_0: entered allmulticast mode
[   90.269031][ T5833] bridge_slave_0: entered promiscuous mode
[   90.277516][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.285067][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.292391][ T5823] bridge_slave_0: entered allmulticast mode
[   90.299943][ T5823] bridge_slave_0: entered promiscuous mode
[   90.324425][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.331647][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.339979][ T5821] bridge_slave_0: entered allmulticast mode
[   90.347384][ T5821] bridge_slave_0: entered promiscuous mode
[   90.381210][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.388991][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.397162][ T5833] bridge_slave_1: entered allmulticast mode
[   90.405091][ T5833] bridge_slave_1: entered promiscuous mode
[   90.412703][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.419902][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.427073][ T5823] bridge_slave_1: entered allmulticast mode
[   90.434705][ T5823] bridge_slave_1: entered promiscuous mode
[   90.447311][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.454569][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.461871][ T5821] bridge_slave_1: entered allmulticast mode
[   90.469626][ T5821] bridge_slave_1: entered promiscuous mode
[   90.489237][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.496443][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.504050][ T5820] bridge_slave_0: entered allmulticast mode
[   90.511520][ T5820] bridge_slave_0: entered promiscuous mode
[   90.571963][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.579982][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.587162][ T5820] bridge_slave_1: entered allmulticast mode
[   90.595288][ T5820] bridge_slave_1: entered promiscuous mode
[   90.645245][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.672586][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.684928][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.694317][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.702525][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.709895][ T5822] bridge_slave_0: entered allmulticast mode
[   90.717369][ T5822] bridge_slave_0: entered promiscuous mode
[   90.727781][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.753148][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.765249][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.774872][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.782501][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.790274][ T5822] bridge_slave_1: entered allmulticast mode
[   90.797628][ T5822] bridge_slave_1: entered promiscuous mode
[   90.821997][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.885953][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.937892][ T5821] team0: Port device team_slave_0 added
[   90.960599][ T5833] team0: Port device team_slave_0 added
[   90.968833][ T5823] team0: Port device team_slave_0 added
[   90.977548][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.987573][ T5826] Bluetooth: hci0: command tx timeout
[   90.993593][ T5821] team0: Port device team_slave_1 added
[   91.015226][ T5833] team0: Port device team_slave_1 added
[   91.023101][ T5823] team0: Port device team_slave_1 added
[   91.031388][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.056439][ T5820] team0: Port device team_slave_0 added
[   91.062152][ T5826] Bluetooth: hci3: command tx timeout
[   91.069371][ T5826] Bluetooth: hci2: command tx timeout
[   91.071894][ T5841] Bluetooth: hci1: command tx timeout
[   91.078644][ T5832] Bluetooth: hci4: command tx timeout
[   91.150715][ T5820] team0: Port device team_slave_1 added
[   91.157440][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.164617][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.191099][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.255674][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.263775][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.290806][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.302634][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.309887][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.336306][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.348546][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.355498][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.381724][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.395140][ T5822] team0: Port device team_slave_0 added
[   91.423054][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.430566][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.456655][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.469200][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.476253][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.502266][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.515685][ T5822] team0: Port device team_slave_1 added
[   91.523373][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.531090][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.559715][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.622686][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.630039][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.656485][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.707636][ T5821] hsr_slave_0: entered promiscuous mode
[   91.714496][ T5821] hsr_slave_1: entered promiscuous mode
[   91.733206][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.740232][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.766555][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.808126][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.815301][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.841555][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.933162][ T5833] hsr_slave_0: entered promiscuous mode
[   91.940873][ T5833] hsr_slave_1: entered promiscuous mode
[   91.947446][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   91.953615][ T5833] Cannot create hsr debugfs directory
[   91.966662][ T5823] hsr_slave_0: entered promiscuous mode
[   91.973454][ T5823] hsr_slave_1: entered promiscuous mode
[   91.979862][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   91.985643][ T5823] Cannot create hsr debugfs directory
[   92.006035][ T5820] hsr_slave_0: entered promiscuous mode
[   92.012739][ T5820] hsr_slave_1: entered promiscuous mode
[   92.019446][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   92.025255][ T5820] Cannot create hsr debugfs directory
[   92.312124][ T5822] hsr_slave_0: entered promiscuous mode
[   92.320391][ T5822] hsr_slave_1: entered promiscuous mode
[   92.327068][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   92.332903][ T5822] Cannot create hsr debugfs directory
[   92.857466][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.874498][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.885091][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.913737][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.000999][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.017663][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.033364][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.045682][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.059097][ T5832] Bluetooth: hci0: command tx timeout
[   93.138740][ T5832] Bluetooth: hci4: command tx timeout
[   93.144200][ T5832] Bluetooth: hci2: command tx timeout
[   93.148565][ T5841] Bluetooth: hci3: command tx timeout
[   93.149886][ T5832] Bluetooth: hci1: command tx timeout
[   93.200052][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.223290][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.236855][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.268214][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.395543][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.408025][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.431666][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.442440][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.505415][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.574469][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.587173][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.607298][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.619473][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.663688][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   93.696618][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.703946][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.733932][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.761665][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.769054][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.839255][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   93.894600][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.901858][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.925931][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.933160][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.987476][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.035873][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.066456][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   94.091815][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   94.127245][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.134554][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.164418][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.171828][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.184098][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.191450][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.202972][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.210256][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.314780][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.405218][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   94.466058][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.473338][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.508834][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.516075][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.620180][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.717851][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.850268][ T5821] veth0_vlan: entered promiscuous mode
[   94.908811][ T5821] veth1_vlan: entered promiscuous mode
[   95.047769][ T5821] veth0_macvtap: entered promiscuous mode
[   95.093414][ T5821] veth1_macvtap: entered promiscuous mode
[   95.122772][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.140366][ T5832] Bluetooth: hci0: command tx timeout
[   95.174201][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.220800][ T5826] Bluetooth: hci1: command tx timeout
[   95.220822][ T5841] Bluetooth: hci2: command tx timeout
[   95.226260][ T5828] Bluetooth: hci4: command tx timeout
[   95.238092][ T5832] Bluetooth: hci3: command tx timeout
[   95.255138][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.276756][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.331057][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.343700][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.353735][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.380495][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.433035][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.460912][ T5823] veth0_vlan: entered promiscuous mode
[   95.484227][ T5820] veth0_vlan: entered promiscuous mode
[   95.506434][ T5823] veth1_vlan: entered promiscuous mode
[   95.554919][ T5820] veth1_vlan: entered promiscuous mode
[   95.616702][ T5833] veth0_vlan: entered promiscuous mode
[   95.647806][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.665041][ T5833] veth1_vlan: entered promiscuous mode
[   95.667583][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.736557][ T5823] veth0_macvtap: entered promiscuous mode
[   95.748952][ T5822] veth0_vlan: entered promiscuous mode
[   95.761187][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.771291][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.784730][ T5823] veth1_macvtap: entered promiscuous mode
[   95.821644][ T5822] veth1_vlan: entered promiscuous mode
[   95.833626][ T5820] veth0_macvtap: entered promiscuous mode
[   95.862124][ T5820] veth1_macvtap: entered promiscuous mode
[   95.890546][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.910039][ T5833] veth0_macvtap: entered promiscuous mode
[   95.921045][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.952303][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.967824][ T5833] veth1_macvtap: entered promiscuous mode
[   96.044527][ T5822] veth0_macvtap: entered promiscuous mode
[   96.054426][   T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.064649][   T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.084580][   T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.097209][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.110652][ T5822] veth1_macvtap: entered promiscuous mode
[   96.121187][   T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.161575][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.177805][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.212771][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.226221][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.241319][   T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.250285][   T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.271826][   T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.298056][   T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.311961][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.324011][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.340927][   T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.360234][   T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.373313][   T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.411394][   T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.433012][   T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.451325][ T5946] loop3: detected capacity change from 0 to 8192
[   96.463249][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.475285][   T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.484166][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.496857][   T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.516009][ T5878]  loop3: p1 < > p3 < p5 > p4
[   96.527389][ T5878] loop3: partition table partially beyond EOD, truncated
[   96.540551][ T5878] loop3: p1 start 4294967040 is beyond EOD, truncated
[   96.614028][ T5946]  loop3: p1 < > p3 < p5 > p4
[   96.620475][ T5946] loop3: partition table partially beyond EOD, truncated
[   96.646349][ T5946] loop3: p1 start 4294967040 is beyond EOD, truncated
[   96.672438][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.688909][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.863592][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.885394][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.988495][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.006960][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.080406][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.088307][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.134213][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.159905][  T107] cfg80211: failed to load regulatory.db
[   97.185106][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.219175][ T5832] Bluetooth: hci0: command tx timeout
[   97.233749][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.262963][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.298950][ T5826] Bluetooth: hci2: command tx timeout
[   97.301623][ T5841] Bluetooth: hci1: command tx timeout
[   97.305939][ T5832] Bluetooth: hci3: command tx timeout
[   97.310047][ T5828] Bluetooth: hci4: command tx timeout
[   97.448222][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.487305][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.676903][ T5959] FAULT_INJECTION: forcing a failure.
[   97.676903][ T5959] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   97.775910][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: syz.1.7 Not tainted syzkaller #0 PREEMPT(full) 
[   97.775942][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   97.775963][ T5959] Call Trace:
[   97.775972][ T5959]  <TASK>
[   97.775981][ T5959]  dump_stack_lvl+0xe8/0x150
[   97.776015][ T5959]  should_fail_ex+0x414/0x560
[   97.776055][ T5959]  _copy_to_user+0x31/0xb0
[   97.776084][ T5959]  simple_read_from_buffer+0xe1/0x170
[   97.776113][ T5959]  proc_fail_nth_read+0x1b3/0x220
[   97.776148][ T5959]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   97.776183][ T5959]  ? rw_verify_area+0x2a6/0x4d0
[   97.776210][ T5959]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   97.776243][ T5959]  vfs_read+0x200/0xa30
[   97.776270][ T5959]  ? fdget_pos+0x247/0x320
[   97.776297][ T5959]  ? __pfx___mutex_lock+0x10/0x10
[   97.776323][ T5959]  ? __pfx_vfs_read+0x10/0x10
[   97.776352][ T5959]  ? __fget_files+0x2a/0x420
[   97.776379][ T5959]  ? __fget_files+0x3a0/0x420
[   97.776401][ T5959]  ? __fget_files+0x2a/0x420
[   97.776441][ T5959]  ksys_read+0x145/0x250
[   97.776472][ T5959]  ? __pfx_ksys_read+0x10/0x10
[   97.776513][ T5959]  do_syscall_64+0xec/0xf80
[   97.776536][ T5959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.776556][ T5959]  ? trace_irq_disable+0x37/0x100
[   97.776575][ T5959]  ? clear_bhb_loop+0x40/0x90
[   97.776600][ T5959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.776620][ T5959] RIP: 0033:0x7f8e4d98e15c
[   97.776648][ T5959] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   97.776664][ T5959] RSP: 002b:00007f8e4bbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   97.776686][ T5959] RAX: ffffffffffffffda RBX: 00007f8e4dbe5fa0 RCX: 00007f8e4d98e15c
[   97.776700][ T5959] RDX: 000000000000000f RSI: 00007f8e4bbf60a0 RDI: 0000000000000003
[   97.776713][ T5959] RBP: 00007f8e4bbf6090 R08: 0000000000000000 R09: 0000200000000380
[   97.776726][ T5959] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001
[   97.776738][ T5959] R13: 00007f8e4dbe6038 R14: 00007f8e4dbe5fa0 R15: 00007ffd374fe618
[   97.776770][ T5959]  </TASK>
[   98.087035][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   98.284884][ T5972] loop0: detected capacity change from 0 to 1024
[   98.385321][ T5972] =======================================================
[   98.385321][ T5972] WARNING: The mand mount option has been deprecated and
[   98.385321][ T5972]          and is ignored by this kernel. Remove the mand
[   98.385321][ T5972]          option from the mount to silence this warning.
[   98.385321][ T5972] =======================================================
[   98.523160][ T5962] loop4: detected capacity change from 0 to 256
[   98.668258][ T5972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   98.759371][ T5972] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.831225][   T30] audit: type=1800 audit(1768417173.091:2): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name="file1" dev="loop0" ino=15 res=0 errno=0
[   98.852362][ T5972] EXT4-fs (loop0): shut down requested (0)
[   98.925892][ T5989] bridge0: port 3(veth3) entered blocking state
[   98.975776][ T5989] bridge0: port 3(veth3) entered disabled state
[   98.985164][ T5989] veth3: entered allmulticast mode
[   98.994523][ T5989] veth3: entered promiscuous mode
[   99.027175][ T5993] loop2: detected capacity change from 0 to 8
[   99.039566][ T5990] bridge0: port 4(veth0_to_bond) entered blocking state
[   99.068687][ T5990] bridge0: port 4(veth0_to_bond) entered disabled state
[   99.104847][ T5990] veth0_to_bond: entered allmulticast mode
[   99.130849][ T5990] veth0_to_bond: entered promiscuous mode
[   99.175712][ T5989] vlan2: entered allmulticast mode
[   99.215677][ T5989] veth1: entered allmulticast mode
[   99.236428][ T5989] bridge0: port 5(vlan2) entered blocking state
[   99.256578][ T5989] bridge0: port 5(vlan2) entered disabled state
[   99.278073][ T5989] vlan2: entered promiscuous mode
[   99.310705][ T5989] veth1: entered promiscuous mode
[   99.446139][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   99.780400][ T5995] tipc: Started in network mode
[   99.785880][ T5995] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   99.831858][ T5995] tipc: Enabled bearer <udp:syz0>, priority 10
[  100.264814][ T5987] loop3: detected capacity change from 0 to 32768
[  100.282384][ T5998] loop0: detected capacity change from 0 to 512
[  100.313347][ T5998] EXT4-fs (loop0): Test dummy encryption mode enabled
[  100.332955][ T5998] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  100.356373][ T5998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.390900][ T5998] EXT4-fs (loop0): 1 truncate cleaned up
[  100.412198][ T5998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.466925][ T5987] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.118021][ T5987] XFS (loop3): Ending clean mount
[  101.190102][ T5987] XFS (loop3): Quotacheck needed: Please wait.
[  101.320253][ T5885] tipc: Node number set to 4269801488
[  101.431915][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.464107][ T5987] XFS (loop3): Quotacheck: Done.
[  101.548479][ T6026] bridge0: port 3(gretap0) entered blocking state
[  101.567903][ T6026] bridge0: port 3(gretap0) entered disabled state
[  101.583620][ T6026] gretap0: entered allmulticast mode
[  101.670981][ T6026] gretap0: entered promiscuous mode
[  101.681391][ T6026] bridge0: port 3(gretap0) entered blocking state
[  101.688171][ T6026] bridge0: port 3(gretap0) entered forwarding state
[  102.161832][ T5987] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  102.473173][ T6012] loop2: detected capacity change from 0 to 32768
[  102.548879][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.588665][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  102.828761][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.837577][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.846451][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.855166][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.863929][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.898654][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  102.913555][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  102.942179][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  102.958228][ T6012] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #75: OCFS2_VALID_FL not set
[  103.224774][ T6012] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  103.358477][ T6012] OCFS2: File system is now read-only.
[  103.364057][ T6012] (syz.2.19,6012,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[  103.459938][ T6012] (syz.2.19,6012,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  103.490037][ T6012] (syz.2.19,6012,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=10, slot=0
[  103.509568][ T6012] (syz.2.19,6012,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  103.518236][ T6012] (syz.2.19,6012,1):ocfs2_mount_volume:1758 ERROR: status = -30
[  103.583200][ T6012] (syz.2.19,6012,1):ocfs2_fill_super:1177 ERROR: status = -30
[  103.612782][ T6048] loop3: detected capacity change from 0 to 512
[  103.659561][ T6048] EXT4-fs: Ignoring removed nobh option
[  103.705878][ T6048] EXT4-fs: Mount option(s) incompatible with ext2
[  107.582998][ T6054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.844017][ T6054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.989463][ T6054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.067756][ T6064] overlayfs: overlapping lowerdir path
[  108.223936][ T6054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.344183][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  108.353138][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  108.378644][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  108.386747][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  108.396848][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  108.672814][ T6066] loop0: detected capacity change from 0 to 8192
[  109.436042][ T6064] mkiss: ax0: crc mode is auto.
[  109.681663][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'.
[  110.423478][ T5841] Bluetooth: hci4: command tx timeout
[  110.461699][ T6054] gretap0: left allmulticast mode
[  110.466983][ T6054] gretap0: left promiscuous mode
[  110.529482][ T6054] bridge0: port 3(gretap0) entered disabled state
[  110.560394][ T6090] overlayfs: overlapping lowerdir path
[  110.659790][ T6054] bridge_slave_1: left allmulticast mode
[  110.665644][ T6054] bridge_slave_1: left promiscuous mode
[  110.720700][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.789671][ T6054] bridge_slave_0: left allmulticast mode
[  110.795381][ T6054] bridge_slave_0: left promiscuous mode
[  110.816354][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.924513][ T6093] loop2: detected capacity change from 0 to 8192
[  110.944248][ T6096] loop1: detected capacity change from 0 to 512
[  110.979991][ T6096] EXT4-fs: Ignoring removed nobh option
[  110.998965][ T5834] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  111.036375][ T6096] EXT4-fs: Mount option(s) incompatible with ext2
[  111.189056][ T5834] usb 1-1: not running at top speed; connect to a high speed hub
[  112.680670][ T5841] Bluetooth: hci4: command tx timeout
[  112.701232][ T5834] usb 1-1: config 95 has an invalid interface number: 1 but max is 0
[  112.767931][ T6106] loop3: detected capacity change from 0 to 8
[  112.785874][ T5834] usb 1-1: config 95 has no interface number 0
[  112.841692][ T5834] usb 1-1: config 95 interface 1 has no altsetting 0
[  112.874190][ T5834] usb 1-1: string descriptor 0 read error: -22
[  112.902678][ T5834] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[  113.108250][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.199858][ T5834] usb 1-1: USB disconnect, device number 2
[  115.716896][ T5841] Bluetooth: hci4: command tx timeout
[  116.303471][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.329780][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.351144][ T6054] bond0 (unregistering): Released all slaves
[  117.293130][ T6068] chnl_net:caif_netlink_parms(): no params data found
[  117.788749][ T5841] Bluetooth: hci4: command tx timeout
[  120.335783][ T6160] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  120.752418][ T6054] hsr_slave_0: left promiscuous mode
[  120.800711][ T6156] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  120.815633][ T6054] hsr_slave_1: left promiscuous mode
[  120.879333][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.886807][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.910032][ T6172] loop2: detected capacity change from 0 to 2048
[  120.921791][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.931392][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.990340][ T6172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.055335][ T6172] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.068533][ T6156] usb 1-1: Using ep0 maxpacket: 16
[  121.090810][ T6156] usb 1-1: unable to get BOS descriptor or descriptor too short
[  121.108829][ T6156] usb 1-1: config 13 has an invalid interface number: 50 but max is 0
[  121.122100][ T6156] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  121.142719][ T6054] veth1_macvtap: left promiscuous mode
[  121.149514][ T6156] usb 1-1: config 13 has no interface number 0
[  121.155771][ T6156] usb 1-1: config 13 interface 50 altsetting 167 endpoint 0x8 has invalid wMaxPacketSize 0
[  121.158027][ T6179] loop3: detected capacity change from 0 to 512
[  121.167336][ T6156] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  121.185742][ T6156] usb 1-1: config 13 interface 50 has no altsetting 0
[  121.218244][ T6054] veth0_macvtap: left promiscuous mode
[  121.219645][ T6156] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  121.225063][ T6054] veth1_vlan: left promiscuous mode
[  121.240394][ T6054] veth0_vlan: left promiscuous mode
[  121.248190][ T6179] EXT4-fs: Ignoring removed nobh option
[  121.279419][ T6156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.287624][ T6156] usb 1-1: Product: syz
[  121.294877][ T6179] EXT4-fs: Mount option(s) incompatible with ext2
[  121.334866][ T6156] usb 1-1: Manufacturer: syz
[  121.343854][ T6180] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.357665][ T6156] usb 1-1: SerialNumber: syz
[  121.418139][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.441553][ T6156] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  123.478499][ T6156] usb 1-1: MIDIStreaming interface descriptor not found
[  123.721823][ T6156] usb 1-1: USB disconnect, device number 3
[  123.745057][ T6191] loop2: detected capacity change from 0 to 2048
[  123.870227][ T6191]  loop2: p1 < > p4
[  123.909053][ T6191] loop2: p4 start 42180 is beyond EOD, truncated
[  123.911023][ T6192] udevd[6192]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.129018][ T6077] udevd[6077]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  125.408843][ T6199] vivid-004: disconnect
[  125.598539][ T6188] vivid-004: reconnect
[  126.798165][ T6207] netlink: 'syz.0.58': attribute type 10 has an invalid length.
[  126.805905][ T6207] netlink: 2 bytes leftover after parsing attributes in process `syz.0.58'.
[  127.439294][ T6054] team0 (unregistering): Port device team_slave_1 removed
[  127.530526][ T6054] team0 (unregistering): Port device team_slave_0 removed
[  128.316505][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.344735][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.365511][ T6068] bridge_slave_0: entered allmulticast mode
[  128.385459][ T6068] bridge_slave_0: entered promiscuous mode
[  128.403713][ T6206] bridge_slave_0: left allmulticast mode
[  128.409583][ T6206] bridge_slave_0: left promiscuous mode
[  128.416642][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.455149][ T6206] bridge_slave_1: left allmulticast mode
[  128.462034][ T6206] bridge_slave_1: left promiscuous mode
[  128.467800][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.482322][ T6206] bond0: (slave bond_slave_0): Releasing backup interface
[  128.494894][ T6206] bond0: (slave bond_slave_1): Releasing backup interface
[  128.539410][ T6210] loop3: detected capacity change from 0 to 131072
[  128.558418][ T6210] F2FS-fs (loop3): Test dummy encryption mode enabled
[  128.573746][ T6210] F2FS-fs (loop3): invalid crc value
[  128.601247][ T6206] team0: Port device team_slave_0 removed
[  128.617878][ T6206] team0: Port device team_slave_1 removed
[  128.624493][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.632049][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.641100][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.648635][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.657800][ T6206] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  128.674119][ T6207] team0: entered promiscuous mode
[  128.679624][ T6207] bridge0: port 1(team0) entered blocking state
[  128.685969][ T6207] bridge0: port 1(team0) entered disabled state
[  128.692409][ T6207] team0: entered allmulticast mode
[  128.699926][ T6207] bridge0: port 1(team0) entered blocking state
[  128.706294][ T6207] bridge0: port 1(team0) entered forwarding state
[  128.881608][ T6210] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.907939][ T6210] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  128.955259][ T6210] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  128.982461][ T3527] bridge0: port 1(team0) entered disabled state
[  128.990978][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.032590][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.077191][ T6068] bridge_slave_1: entered allmulticast mode
[  129.152568][ T6068] bridge_slave_1: entered promiscuous mode
[  129.943714][ T6068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.412300][ T6218] netlink: 666 bytes leftover after parsing attributes in process `syz.1.60'.
[  130.470125][ T6068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.739032][ T6068] team0: Port device team_slave_0 added
[  130.787958][ T6068] team0: Port device team_slave_1 added
[  131.048444][    T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  131.185754][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.248577][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  131.297656][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.319567][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.328968][ T6068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.349768][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  131.361399][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.368491][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.388535][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  131.418439][    T9] usb 2-1: Product: syz
[  131.424001][    T9] usb 2-1: Manufacturer: syz
[  131.448503][    T9] usb 2-1: SerialNumber: syz
[  131.487045][ T6068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.738869][ T6188] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  131.790759][ T6068] hsr_slave_0: entered promiscuous mode
[  131.798035][ T6068] hsr_slave_1: entered promiscuous mode
[  131.836588][ T6068] debugfs: 'hsr0' already exists in 'hsr'
[  131.867365][ T6068] Cannot create hsr debugfs directory
[  131.908665][ T6188] usb 3-1: Using ep0 maxpacket: 32
[  131.928711][ T6188] usb 3-1: config index 0 descriptor too short (expected 49410, got 36)
[  131.952455][ T6188] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32
[  131.981325][ T6188] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping
[  132.024204][ T6188] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  132.052909][ T6188] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127
[  132.084446][ T6188] usb 3-1: config index 1 descriptor too short (expected 49410, got 36)
[  132.127880][ T6188] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32
[  132.161938][ T6188] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping
[  132.196138][ T6188] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  132.245321][ T6188] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127
[  132.272375][ T6188] usb 3-1: config index 2 descriptor too short (expected 49410, got 36)
[  132.309210][ T6188] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32
[  132.327035][ T6188] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping
[  132.357852][ T6188] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  132.406603][ T6188] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127
[  132.438723][ T6188] usb 3-1: config index 3 descriptor too short (expected 49410, got 36)
[  132.462424][ T6188] usb 3-1: config 12 has too many interfaces: 127, using maximum allowed: 32
[  132.494834][ T6188] usb 3-1: config 12 contains an unexpected descriptor of type 0x2, skipping
[  132.530729][ T6188] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  132.576076][ T6188] usb 3-1: config 12 has 0 interfaces, different from the descriptor's value: 127
[  132.610938][ T6188] usb 3-1: New USB device found, idVendor=2442, idProduct=0100, bcdDevice= 0.00
[  132.885255][ T6188] usb 3-1: New USB device strings: Mfr=16, Product=0, SerialNumber=9
[  133.294760][ T6188] usb 3-1: Manufacturer: syz
[  133.299527][ T6188] usb 3-1: SerialNumber: syz
[  133.676201][ T6260] fuse: Invalid rootmode
[  133.920793][ T6261] netlink: 36 bytes leftover after parsing attributes in process `syz.2.65'.
[  134.239116][    T9] usb 2-1: 0:2 : does not exist
[  134.263594][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  135.138749][ T6264] vivid-000: disconnect
[  135.270157][   T37] vivid-000: reconnect
[  135.304345][    T9] usb 2-1: USB disconnect, device number 2
[  135.506133][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.535415][   T37] usb 3-1: USB disconnect, device number 2
[  135.603260][ T6270] loop3: detected capacity change from 0 to 512
[  135.686462][ T6270] EXT4-fs: Ignoring removed nobh option
[  135.708158][ T6270] EXT4-fs: Mount option(s) incompatible with ext2
[  137.823840][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'.
[  137.871037][ T6068] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  137.915907][ T6068] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  138.019216][ T6068] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  138.182486][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  138.515310][ T6068] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  139.302480][ T6068] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.349271][ T6314] fuse: Invalid rootmode
[  139.376219][ T6068] 8021q: adding VLAN 0 to HW filter on device team0
[  139.500455][ T2214] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.507695][ T2214] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.569099][ T2214] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.576435][ T2214] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.705868][ T6319] loop1: detected capacity change from 0 to 1024
[  139.771088][ T6319] EXT4-fs: Ignoring removed nomblk_io_submit option
[  139.889709][ T6319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.587311][ T6334] netlink: 'syz.0.70': attribute type 10 has an invalid length.
[  141.595466][ T6334] netlink: 2 bytes leftover after parsing attributes in process `syz.0.70'.
[  141.624650][ T6328] team0: left allmulticast mode
[  141.630307][ T6328] bridge0: port 1(team0) entered disabled state
[  141.673103][ T6328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  141.689506][ T6334] bridge0: port 1(team0) entered blocking state
[  141.695889][ T6334] bridge0: port 1(team0) entered disabled state
[  141.702343][ T6334] team0: entered allmulticast mode
[  141.720558][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.864077][ T6337] loop3: detected capacity change from 0 to 2048
[  141.960521][ T6192]  loop3: p1 < > p4
[  141.981800][ T6192] loop3: p4 start 42180 is beyond EOD, truncated
[  142.022570][ T6337]  loop3: p1 < > p4
[  142.047522][ T6337] loop3: p4 start 42180 is beyond EOD, truncated
[  142.988750][ T6342] vivid-002: disconnect
[  143.138908][  T978] vivid-002: reconnect
[  143.223561][ T6068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.318749][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.80'.
[  143.410756][ T6077] udevd[6077]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  144.074483][ T6356] vlan2: entered allmulticast mode
[  144.152311][ T6356] veth1: entered allmulticast mode
[  145.223639][ T6370] loop3: detected capacity change from 0 to 131072
[  145.232567][ T6370] F2FS-fs (loop3): Test dummy encryption mode enabled
[  145.246283][ T6370] F2FS-fs (loop3): invalid crc value
[  145.370409][ T6068] veth0_vlan: entered promiscuous mode
[  145.415347][ T6370] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  145.449742][ T6370] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  145.461567][ T6068] veth1_vlan: entered promiscuous mode
[  145.830049][ T6068] veth0_macvtap: entered promiscuous mode
[  145.974955][ T6068] veth1_macvtap: entered promiscuous mode
[  146.185872][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.323412][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.486409][   T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.626707][   T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.675688][   T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.776034][ T6389] fuse: Bad value for 'rootmode'
[  146.940251][   T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.052607][ T6397] loop0: detected capacity change from 0 to 8
[  147.820145][ T6399] bridge0: port 3(gretap0) entered blocking state
[  147.827496][ T6399] bridge0: port 3(gretap0) entered disabled state
[  147.834853][ T6399] gretap0: entered allmulticast mode
[  147.845837][ T6399] gretap0: entered promiscuous mode
[  147.852284][ T6399] bridge0: port 3(gretap0) entered blocking state
[  147.858906][ T6399] bridge0: port 3(gretap0) entered forwarding state
[  148.108580][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.185559][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.676698][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.714328][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.052203][ T6410] team0: left allmulticast mode
[  150.057291][ T6410] bridge0: port 1(team0) entered disabled state
[  150.075471][ T6410] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  150.094972][ T6410] netlink: 'syz.0.91': attribute type 10 has an invalid length.
[  150.102931][ T6410] netlink: 2 bytes leftover after parsing attributes in process `syz.0.91'.
[  150.111829][ T6410] bridge0: port 1(team0) entered blocking state
[  150.118220][ T6410] bridge0: port 1(team0) entered disabled state
[  150.126434][ T6410] team0: entered allmulticast mode
[  150.392247][ T6414] loop5: detected capacity change from 0 to 8
[  150.606102][ T6414] tipc: Started in network mode
[  150.611939][ T6414] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  150.621496][ T6414] tipc: Enabled bearer <udp:syz0>, priority 10
[  151.888751][ T6419] vivid-000: disconnect
[  152.093060][ T6103] tipc: Node number set to 4269801488
[  152.140703][ T6103] vivid-000: reconnect
[  152.611377][ T6428] loop3: detected capacity change from 0 to 64
[  152.677654][ T6428] MINIX-fs: bad superblock or unable to read bitmaps
[  152.723940][ T6431] syz.2.96 uses obsolete (PF_INET,SOCK_PACKET)
[  152.873521][   T30] audit: type=1326 audit(1768417227.121:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e278f749 code=0x7ffc0000
[  153.028388][   T30] audit: type=1326 audit(1768417227.171:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99e278f749 code=0x7ffc0000
[  153.112022][   T30] audit: type=1326 audit(1768417227.171:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e278f749 code=0x7ffc0000
[  153.137297][ T6433] cgroup: Invalid name
[  153.187411][   T30] audit: type=1326 audit(1768417227.201:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f99e278f749 code=0x7ffc0000
[  153.270949][   T30] audit: type=1326 audit(1768417227.201:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e278f749 code=0x7ffc0000
[  153.320867][ T6434] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  153.360995][   T30] audit: type=1326 audit(1768417227.201:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e278f749 code=0x7ffc0000
[  153.484638][   T30] audit: type=1326 audit(1768417227.211:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99e278f749 code=0x7ffc0000
[  153.604572][   T30] audit: type=1326 audit(1768417227.211:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e278f749 code=0x7ffc0000
[  153.652427][ T6437] infiniband: Added to hash: ib_dev=ffff88807f664000 (0)() ndev=ffff88807697c000 (14)(virt_wifi0)
[  153.688543][   T30] audit: type=1326 audit(1768417227.221:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e278f749 code=0x7ffc0000
[  153.719984][ T6437] virt_wifi0 speed is unknown, defaulting to 1000
[  153.789822][ T6437] virt_wifi0 speed is unknown, defaulting to 1000
[  153.801888][ T6437] virt_wifi0 speed is unknown, defaulting to 1000
[  153.880499][ T6437] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  153.950831][ T6437] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  154.157985][ T6437] virt_wifi0 speed is unknown, defaulting to 1000
[  154.191892][ T6437] virt_wifi0 speed is unknown, defaulting to 1000
[  154.262508][ T6437] virt_wifi0 speed is unknown, defaulting to 1000
[  154.310809][ T6437] virt_wifi0 speed is unknown, defaulting to 1000
[  154.330789][ T6437] virt_wifi0 speed is unknown, defaulting to 1000
[  154.351588][ T6437] virt_wifi0 speed is unknown, defaulting to 1000
[  154.464134][ T6446] fuse: Bad value for 'rootmode'
[  154.641535][ T6450] Zero length message leads to an empty skb
[  154.658722][ T6025] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  154.846318][ T6025] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  154.865734][ T6025] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.886353][ T6025] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  154.907043][ T6025] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.929727][ T6025] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  154.956019][ T6025] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  154.974545][ T6025] usb 1-1: Product: syz
[  154.979225][ T6025] usb 1-1: Manufacturer: syz
[  155.054000][ T6025] cdc_wdm 1-1:1.0: skipping garbage
[  155.068720][ T6025] cdc_wdm 1-1:1.0: skipping garbage
[  155.079131][ T6025] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  155.251596][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.271804][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.287610][ T6452] loop2: detected capacity change from 0 to 32768
[  155.471656][ T6452] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.481602][ T6442] loop5: detected capacity change from 0 to 131072
[  155.491934][ T6442] F2FS-fs (loop5): Test dummy encryption mode enabled
[  155.500105][ T6442] F2FS-fs (loop5): invalid crc value
[  155.557029][ T6452] XFS (loop2): Ending clean mount
[  155.620529][ T6442] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.630994][ T6442] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  156.344973][ T5822] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.513908][ T6156] usb 1-1: USB disconnect, device number 4
[  156.544818][ T6475] loop1: detected capacity change from 0 to 256
[  156.637570][ T6476] netlink: 'syz.3.100': attribute type 10 has an invalid length.
[  156.646035][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.653479][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.665984][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.673271][ T6476] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.681630][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.688892][ T6476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.701073][ T6476] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  156.853384][ T6475] loop1: detected capacity change from 0 to 1024
[  156.893265][ T6475] hfsplus: Bad value for 'umask'
[  156.955652][ T6475] netlink: 36 bytes leftover after parsing attributes in process `syz.1.102'.
[  157.978745][ T6483] vivid-001: disconnect
[  158.178995][ T5940] vivid-001: reconnect
[  158.387353][ T6492] loop1: detected capacity change from 0 to 512
[  158.451607][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.101'.
[  158.625612][ T6492] EXT4-fs (loop1): Test dummy encryption mode enabled
[  158.668399][ T6492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  158.723439][ T6492] EXT4-fs (loop1): 1 truncate cleaned up
[  158.747633][ T6492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.858666][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  159.668271][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.701272][   T10] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  159.701332][   T10] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  159.701357][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.711059][   T10] gspca_main: stv0680-2.14.0 probing 041e:4007
[  159.939631][ T6509] loop0: detected capacity change from 0 to 2048
[  159.982446][ T6511] fuse: Bad value for 'rootmode'
[  160.054825][ T6509]  loop0: p1 < > p4
[  160.087734][ T6509] loop0: p4 start 42180 is beyond EOD, truncated
[  160.351668][ T6515] loop1: detected capacity change from 0 to 64
[  160.458543][ T6515] MINIX-fs: bad superblock or unable to read bitmaps
[  160.494215][ T6517] loop0: detected capacity change from 0 to 16
[  160.512437][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.104'.
[  160.591215][ T6517] erofs (device loop0): mounted with root inode @ nid 36.
[  160.753462][   T10] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  160.950066][   T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  160.960903][   T10] stv0680 3-1:4.0: last error: 0,  command = 0x0
[  161.046317][ T6524] cgroup: Invalid name
[  161.062837][   T10] usb 3-1: USB disconnect, device number 3
[  161.145074][ T6527] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  163.520117][ T6539] netlink: 'syz.5.115': attribute type 10 has an invalid length.
[  163.528601][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.535965][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.549172][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.556351][ T6539] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.563896][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.571181][ T6539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.581368][ T6539] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  163.647442][ T6546] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  163.728930][ T6103] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  163.843333][ T6549] loop0: detected capacity change from 0 to 1024
[  163.895272][ T6103] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  163.923505][ T6103] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.982463][ T6103] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  164.018558][ T6103] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.073869][ T6103] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  164.133892][ T6103] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  164.167007][ T6103] usb 3-1: Product: syz
[  164.181131][ T6103] usb 3-1: Manufacturer: syz
[  164.220129][ T6103] cdc_wdm 3-1:1.0: skipping garbage
[  164.243911][ T6103] cdc_wdm 3-1:1.0: skipping garbage
[  164.258742][ T6103] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  164.450132][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.490589][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.681897][ T6565] loop0: detected capacity change from 0 to 512
[  166.042764][ T6565] EXT4-fs (loop0): Test dummy encryption mode enabled
[  166.121310][ T6565] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  166.182422][ T6565] EXT4-fs (loop0): 1 truncate cleaned up
[  166.333159][ T6565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.421383][ T6103] usb 3-1: USB disconnect, device number 4
[  167.281410][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.311154][ T6584] 9pnet_virtio: no channels available for device 127.0.0.1
[  167.518497][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.123'.
[  168.154881][ T6590] loop0: detected capacity change from 0 to 4096
[  168.394523][ T6575] loop1: detected capacity change from 0 to 32768
[  168.616658][ T6598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'.
[  168.747639][ T6575] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  168.816358][ T6606] netlink: 'syz.0.124': attribute type 4 has an invalid length.
[  168.986505][ T6575] XFS (loop1): Ending clean mount
[  168.991990][ T6188] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  169.045562][ T6575] XFS (loop1): Quotacheck needed: Please wait.
[  169.056396][   T30] audit: type=1800 audit(1768417243.321:12): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.124" name="file1" dev="loop0" ino=33 res=0 errno=0
[  169.177970][ T6575] XFS (loop1): Quotacheck: Done.
[  169.204277][ T6188] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  169.269964][ T6188] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  169.309460][ T6188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.359883][ T6188] gspca_main: stv0680-2.14.0 probing 041e:4007
[  169.409394][ T5823] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  169.534708][ T6614] loop2: detected capacity change from 0 to 4096
[  169.572632][ T6614] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  169.593009][ T6614] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  169.608577][ T6614] ntfs3(loop2): ino=5, mi_enum_attr
[  169.776094][ T6623] ntfs3(loop2): ino=5, "/" mi_enum_attr
[  169.805384][ T6622] fuse: Unknown parameter 'use00000000000000000000'
[  170.422993][ T6188] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  170.756616][ T6188] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  172.568380][ T6188] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  172.583709][ T6188] usb 4-1: USB disconnect, device number 2
[  172.787117][ T6642] loop3: detected capacity change from 0 to 64
[  172.857223][ T6642] MINIX-fs: bad superblock or unable to read bitmaps
[  172.914279][ T5911] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  173.018832][ T6647] netlink: 'syz.1.128': attribute type 1 has an invalid length.
[  173.065076][ T6649] loop0: detected capacity change from 0 to 512
[  173.110216][ T6649] EXT4-fs (loop0): Test dummy encryption mode enabled
[  173.118728][ T5911] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  173.145730][ T6649] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  173.168371][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.226723][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  173.248019][ T6647] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.268567][ T6649] EXT4-fs (loop0): 1 truncate cleaned up
[  173.282516][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.294677][ T6653] cgroup: Invalid name
[  173.312513][ T6649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.330688][ T6652] bond1: (slave veth5): Enslaving as an active interface with a down link
[  173.360907][ T5911] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  173.409340][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  173.421982][ T6658] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  173.453528][ T5911] usb 3-1: Product: syz
[  173.457828][ T5911] usb 3-1: Manufacturer: syz
[  173.583895][ T5911] cdc_wdm 3-1:1.0: skipping garbage
[  173.618517][ T5911] cdc_wdm 3-1:1.0: skipping garbage
[  173.649759][ T5911] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  173.961068][ T6664] geneve2: entered promiscuous mode
[  173.970405][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.031028][ T6664] geneve2: entered allmulticast mode
[  174.041433][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.083383][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  174.158710][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  174.198427][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  174.274651][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  174.297700][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.414376][ T6670] loop1: detected capacity change from 0 to 1024
[  174.606866][ T6673] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  174.860320][ T5911] usb 3-1: USB disconnect, device number 5
[  174.976367][ T6681] fuse: Unknown parameter 'use00000000000000000000'
[  175.415594][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'.
[  175.427620][ T6690] overlayfs: overlapping lowerdir path
[  175.649588][ T6690] loop1: detected capacity change from 0 to 8192
[  175.749043][ T5911] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  176.148380][ T6702] input: syz0 as /devices/virtual/input/input5
[  177.013900][ T5911] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  177.024647][ T5911] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  177.033813][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.053088][ T5911] gspca_main: stv0680-2.14.0 probing 041e:4007
[  177.390138][ T6701] C: renamed from team_slave_0 (while UP)
[  177.507029][ T6701] netlink: 152 bytes leftover after parsing attributes in process `syz.3.143'.
[  178.993977][ T5911] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71
[  179.094880][ T6729] fuse: Unknown parameter 'use00000000000000000000'
[  179.128625][ T5911] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  179.191915][ T6730] loop5: detected capacity change from 0 to 512
[  179.199544][ T5911] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  179.228632][ T6723] loop3: detected capacity change from 0 to 1024
[  179.675259][ T6723] EXT4-fs: inline encryption not supported
[  179.792634][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout
[  179.798938][ T6016] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  179.805212][ T6016] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  179.870457][ T6730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.893652][ T6723] EXT4-fs: Ignoring removed i_version option
[  179.944035][ T5911] stv0680 3-1:4.0: last error: 0,  command = 0x0
[  179.955425][ T5911] usb 3-1: USB disconnect, device number 6
[  180.017127][ T6723] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  180.181069][ T6723] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.148: lblock 2 mapped to illegal pblock 2 (length 1)
[  180.217142][ T6741] loop0: detected capacity change from 0 to 64
[  180.296328][ T6723] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  180.306685][ T6741] MINIX-fs: bad superblock or unable to read bitmaps
[  180.314330][ T6068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.404711][ T6723] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.148: lblock 0 mapped to illegal pblock 48 (length 1)
[  180.469857][ T6723] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  180.577311][ T6723] EXT4-fs error (device loop3): ext4_acquire_dquot:6993: comm syz.3.148: Failed to acquire dquot type 0
[  180.741683][ T6723] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6297: Corrupt filesystem
[  180.771726][ T6750] cgroup: Invalid name
[  180.821496][ T6723] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.148: mark_inode_dirty error
[  180.856805][ T6751] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  180.899004][ T6723] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  180.981108][ T6723] EXT4-fs (loop3): 1 orphan inode deleted
[  181.008680][ T3527] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1)
[  181.029382][ T6723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.077151][ T3527] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  181.110786][ T6754] loop5: detected capacity change from 0 to 1024
[  181.154694][ T6754] EXT4-fs: Ignoring removed oldalloc option
[  181.185992][ T3527] EXT4-fs error (device loop3): ext4_release_dquot:7029: comm kworker/u8:11: Failed to release dquot type 0
[  181.263301][ T6754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.292524][ T6723] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  181.360715][ T6754] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.377123][ T6764] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  181.461614][ T6764] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.148: lblock 0 mapped to illegal pblock 48 (length 1)
[  181.561259][ T6764] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117
[  181.617738][ T6764] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  181.681069][ T6068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  181.695005][ T6723] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 16: comm syz.3.148: lblock 0 mapped to illegal pblock 16 (length 1)
[  181.861980][ T6771] loop5: detected capacity change from 0 to 164
[  181.937880][ T6771] Unable to read rock-ridge attributes
[  182.007217][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.218855][ T5965] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  182.260077][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout
[  182.282109][ T6016] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  182.311487][ T6016] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  182.442182][ T5965] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.535808][ T5965] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  182.611934][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.759095][ T5965] usb 3-1: config 0 descriptor??
[  182.780073][ T5965] pwc: Askey VC010 type 2 USB webcam detected.
[  183.354626][ T5965] pwc: recv_control_msg error -32 req 02 val 2b00
[  183.407260][ T5965] pwc: recv_control_msg error -32 req 02 val 2700
[  183.426341][ T5965] pwc: recv_control_msg error -32 req 02 val 2c00
[  183.459836][ T5965] pwc: recv_control_msg error -32 req 04 val 1000
[  184.017384][ T6800] warning: `syz.3.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  184.583292][ T5965] pwc: recv_control_msg error -32 req 04 val 1300
[  184.659938][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout
[  184.667747][ T6016] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  184.802986][ T6801] loop0: detected capacity change from 0 to 4096
[  184.880790][ T6801] ntfs3(loop0): ino=1a, mi_enum_attr
[  184.886336][ T6801] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  185.541561][ T6016] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  186.066107][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'.
[  186.210121][ T5965] pwc: recv_control_msg error -71 req 04 val 1400
[  186.218649][ T5965] pwc: recv_control_msg error -71 req 02 val 2000
[  186.227170][ T5965] pwc: recv_control_msg error -71 req 02 val 2100
[  186.234236][ T5965] pwc: recv_control_msg error -71 req 04 val 1500
[  186.241458][ T5965] pwc: recv_control_msg error -71 req 02 val 2500
[  186.248501][ T5965] pwc: recv_control_msg error -71 req 02 val 2400
[  186.255474][ T5965] pwc: recv_control_msg error -71 req 02 val 2600
[  186.265811][ T5965] pwc: recv_control_msg error -71 req 02 val 2900
[  186.275863][ T5965] pwc: recv_control_msg error -71 req 02 val 2800
[  186.283139][ T5965] pwc: recv_control_msg error -71 req 04 val 1100
[  186.298811][ T5965] pwc: recv_control_msg error -71 req 04 val 1200
[  186.340935][ T5965] pwc: Registered as video103.
[  186.361197][ T5965] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[  186.374346][ T6816] fuse: Unknown parameter 'user_i00000000000000000000'
[  186.439033][ T5965] usb 3-1: USB disconnect, device number 7
[  186.448998][ T5911] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  186.654454][ T5911] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  186.720646][ T5911] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  186.761632][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.167'.
[  186.893164][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.235149][ T5911] gspca_main: stv0680-2.14.0 probing 041e:4007
[  187.537734][ T6826] cgroup: fork rejected by pids controller in /syz5
[  188.269496][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  188.275992][ T6016] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  188.300396][ T6016] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  188.341260][ T5911] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  188.444339][ T6818] loop2: detected capacity change from 0 to 32768
[  188.526507][ T6811] loop1: detected capacity change from 0 to 32768
[  188.540398][ T6818] (syz.2.165,6818,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  188.572189][ T5911] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  188.624123][ T6818] (syz.2.165,6818,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  188.639766][ T5911] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  188.702022][ T5911] usb 4-1: USB disconnect, device number 3
[  188.735356][ T6811] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.840138][ T6818] JBD2: Ignoring recovery information on journal
[  189.095248][ T6811] XFS (loop1): Ending clean mount
[  189.149240][ T6818] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  189.159141][ T6811] XFS (loop1): Quotacheck needed: Please wait.
[  189.171080][ T6887] loop5: detected capacity change from 0 to 64
[  189.230568][ T6811] XFS (loop1): Quotacheck: Done.
[  189.236619][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.169'.
[  189.294318][ T6887] MINIX-fs: bad superblock or unable to read bitmaps
[  190.161145][ T5823] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.533380][ T6904] capability: warning: `syz.0.173' uses 32-bit capabilities (legacy support in use)
[  190.576601][ T6904] program syz.0.173 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  190.721801][ T6818] syz.2.165 (6818) used greatest stack depth: 18040 bytes left
[  191.016081][ T5822] ocfs2: Unmounting device (7,2) on (node local)
[  191.134824][ T6913] cgroup: Invalid name
[  191.214246][ T6919] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  191.452656][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.172'.
[  191.519372][ T5965] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  192.003309][ T5965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.038861][ T5965] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  192.076796][ T5965] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  192.098907][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.135584][ T5965] usb 4-1: config 0 descriptor??
[  192.475450][ T6925] loop2: detected capacity change from 0 to 1024
[  192.504907][ T6925] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  192.613893][ T6925] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  192.653640][ T6925] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  192.686337][ T6925] EXT4-fs error (device loop2): ext4_ext_check_inode:528: inode #3: comm syz.2.174: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  192.728481][ T6925] EXT4-fs (loop2): no journal found
[  192.733916][ T6925] EXT4-fs (loop2): can't get journal size
[  192.749151][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  192.755489][ T6016] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  192.782131][ T6016] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  192.784789][ T6925] EXT4-fs error (device loop2): ext4_ext_check_inode:528: inode #3: comm syz.2.174: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  192.826096][ T6925] EXT4-fs (loop2): failed to initialize system zone (-117)
[  192.877414][ T6925] EXT4-fs (loop2): mount failed
[  193.305140][ T6940] fuse: Unknown parameter 'user_i00000000000000000000'
[  193.908500][ T6016] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  193.977968][ T6943] cgroup: fork rejected by pids controller in /syz2
[  194.098688][ T6016] usb 6-1: Using ep0 maxpacket: 8
[  194.112238][ T6016] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  194.143219][ T6016] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  194.173399][ T6016] usb 6-1: config 0 interface 0 has no altsetting 0
[  194.191760][ T6016] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  194.207028][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.225398][ T6016] usb 6-1: config 0 descriptor??
[  195.660532][ T5911] usb 4-1: USB disconnect, device number 4
[  195.958025][ T7008] netlink: 'syz.1.183': attribute type 10 has an invalid length.
[  195.967470][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.975144][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.025644][ T7003] loop2: detected capacity change from 0 to 4096
[  196.061926][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.069284][ T7008] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.076886][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.084158][ T7008] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.160489][ T7008] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  196.743121][ T6016] usbhid 6-1:0.0: can't add hid device: -71
[  196.798453][ T6016] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  196.859107][ T6016] usb 6-1: USB disconnect, device number 2
[  196.881422][ T7003] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  196.938393][ T7003] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  196.945239][ T7003] ntfs3(loop2): ino=5, mi_enum_attr
[  197.611204][ T5885] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  197.644165][ T7019] ntfs3(loop2): ino=5, "/" mi_enum_attr
[  197.999135][ T5885] usb 4-1: Using ep0 maxpacket: 16
[  198.098002][ T5885] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  198.153535][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.240741][ T5885] usb 4-1: Product: syz
[  198.245421][ T5885] usb 4-1: Manufacturer: syz
[  198.281113][ T5885] usb 4-1: SerialNumber: syz
[  198.319963][ T5885] usb 4-1: config 0 descriptor??
[  198.529412][ T7025] fuse: Unknown parameter 'user_i00000000000000000000'
[  198.608051][ T7014] loop3: detected capacity change from 0 to 2048
[  198.691048][ T7027] loop2: detected capacity change from 0 to 64
[  198.728913][ T7014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.794289][ T7027] MINIX-fs: bad superblock or unable to read bitmaps
[  199.241722][ T7029] cgroup: fork rejected by pids controller in /syz1
[  199.332796][ T5885] usb_8dev 4-1:0.0 can0: sending command message failed
[  199.349948][ T5885] usb_8dev 4-1:0.0 can0: can't get firmware version
[  199.432669][ T7023] loop5: detected capacity change from 0 to 32768
[  199.450135][ T5885] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22
[  199.494543][ T5885] usb 4-1: USB disconnect, device number 5
[  199.546248][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  199.707526][ T6904] syz.0.173 (6904): drop_caches: 1
[  199.807388][ T7071] loop1: detected capacity change from 0 to 1024
[  199.864202][ T7071] hfsplus: Unknown parameter 'asymmetPic@�u��й�d��Y��dI$(�S�BߙJ�&#mа4m�se�vS�:"-����X�F6�4�f��aLt@%a�'
[  199.982863][ T7033] cgroup: Invalid name
[  200.073340][ T7073] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  200.378195][ T7077] loop3: detected capacity change from 0 to 128
[  200.454147][ T7077] EXT4-fs (loop3): Test dummy encryption mode enabled
[  200.883847][ T7077] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  201.596659][ T7077] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  202.021434][ T7077] netlink: 'syz.3.194': attribute type 1 has an invalid length.
[  202.108730][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.197'.
[  202.141462][ T7077] 8021q: adding VLAN 0 to HW filter on device bond1
[  202.710708][ T7092] macvlan2: entered promiscuous mode
[  202.734711][ T7092] macvlan2: entered allmulticast mode
[  202.765977][ T7092] bond1: entered promiscuous mode
[  202.790197][ T7092] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  202.836476][ T7092] bond1: left promiscuous mode
[  202.847859][ T7107] loop0: detected capacity change from 0 to 1024
[  202.868064][ T7107] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.914095][ T7107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.047255][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.195149][ T7077] bond1: (slave ip6gretap1): making interface the new active one
[  204.253074][ T7077] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  204.645067][ T7111] veth1_to_bond: entered allmulticast mode
[  204.696417][ T5821] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  204.832425][ T7104] veth1_to_bond: left allmulticast mode
[  204.892800][ T7154] loop0: detected capacity change from 0 to 4096
[  205.079415][ T7164] ntfs3(loop0): failed to convert "0000" to iso8859-13
[  205.135240][ T7164] ntfs3(loop0): failed to convert name for inode 1e.
[  205.142406][ T7166] loop3: detected capacity change from 0 to 512
[  205.259975][ T7164] ntfs3(loop0): ino=1f, mi_enum_attr
[  205.265379][ T7164] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  205.311314][ T7110] loop2: detected capacity change from 0 to 32768
[  205.382715][ T7110] /dev/loop2: Can't open blockdev
[  205.483792][ T7166] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[  205.658448][ T6104] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  205.672773][ T7173] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[  205.798588][   T37] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  205.812281][ T7173] 8021q: adding VLAN 0 to HW filter on device bond1
[  205.882144][ T6104] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  205.900222][ T7175] bond1: (slave veth3): Enslaving as an active interface with an up link
[  205.918487][ T6104] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.945947][ T7176] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  205.955831][ T6104] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  205.977025][ T7173] vlan2: entered allmulticast mode
[  205.996280][   T37] usb 4-1: Using ep0 maxpacket: 32
[  205.996445][ T6104] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  206.029039][ T7173] veth1: entered allmulticast mode
[  206.036017][ T7173] veth1: entered promiscuous mode
[  206.058012][ T6104] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  206.060229][   T37] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  206.087751][ T7173] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  206.090073][ T6104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.111914][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.140797][ T6104] usb 3-1: Product: syz
[  206.145074][   T37] usb 4-1: Product: syz
[  206.153268][ T6104] usb 3-1: Manufacturer: syz
[  206.155780][   T37] usb 4-1: Manufacturer: syz
[  206.172920][ T6104] usb 3-1: SerialNumber: syz
[  206.174960][   T37] usb 4-1: SerialNumber: syz
[  206.205922][   T37] usb 4-1: config 0 descriptor??
[  206.243241][ T6104] cdc_ncm 3-1:1.0: skipping garbage
[  206.255818][ T6104] cdc_ncm 3-1:1.0: skipping garbage
[  206.262861][ T6104] cdc_ncm 3-1:1.0: skipping garbage
[  206.304959][ T6104] cdc_ncm 3-1:1.0: skipping garbage
[  206.318369][ T6104] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  206.335655][ T6104] cdc_ncm 3-1:1.0: bind() failure
[  206.455602][ T5965] usb 3-1: USB disconnect, device number 8
[  206.532335][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'.
[  206.543206][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'.
[  206.554073][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'.
[  206.852413][ T7184] netlink: 'syz.1.207': attribute type 1 has an invalid length.
[  206.878605][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[  206.943665][ T7182] syz.1.207 (7182): drop_caches: 1
[  206.975605][ T7187] loop0: detected capacity change from 0 to 64
[  207.009889][ T7187] MINIX-fs: bad superblock or unable to read bitmaps
[  207.636709][ T7195] FAULT_INJECTION: forcing a failure.
[  207.636709][ T7195] name failslab, interval 1, probability 0, space 0, times 1
[  207.652302][ T7195] CPU: 0 UID: 0 PID: 7195 Comm: syz.5.211 Not tainted syzkaller #0 PREEMPT(full) 
[  207.652332][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  207.652346][ T7195] Call Trace:
[  207.652355][ T7195]  <TASK>
[  207.652365][ T7195]  dump_stack_lvl+0xe8/0x150
[  207.652413][ T7195]  should_fail_ex+0x414/0x560
[  207.652454][ T7195]  should_failslab+0xa8/0x100
[  207.652489][ T7195]  __kmalloc_cache_noprof+0x84/0x700
[  207.652518][ T7195]  ? fput+0xa0/0xd0
[  207.652539][ T7195]  ? kvm_assign_ioeventfd_idx+0x95/0x920
[  207.652569][ T7195]  kvm_assign_ioeventfd_idx+0x95/0x920
[  207.652591][ T7195]  ? __might_fault+0xb0/0x130
[  207.652632][ T7195]  kvm_ioeventfd+0x1ee/0x330
[  207.652659][ T7195]  kvm_vm_ioctl+0x942/0xc60
[  207.652689][ T7195]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  207.652738][ T7195]  ? kasan_quarantine_put+0xbb/0x1f0
[  207.652776][ T7195]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  207.652803][ T7195]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  207.652830][ T7195]  ? do_vfs_ioctl+0xbe8/0x1430
[  207.652864][ T7195]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  207.652908][ T7195]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  207.652957][ T7195]  ? __fget_files+0x2a/0x420
[  207.652984][ T7195]  ? __fget_files+0x2a/0x420
[  207.653007][ T7195]  ? __fget_files+0x3a0/0x420
[  207.653028][ T7195]  ? __fget_files+0x2a/0x420
[  207.653055][ T7195]  ? bpf_lsm_file_ioctl+0x9/0x20
[  207.653085][ T7195]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  207.653112][ T7195]  __se_sys_ioctl+0xfc/0x170
[  207.653151][ T7195]  do_syscall_64+0xec/0xf80
[  207.653175][ T7195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.653197][ T7195]  ? trace_irq_disable+0x37/0x100
[  207.653216][ T7195]  ? clear_bhb_loop+0x40/0x90
[  207.653247][ T7195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.653269][ T7195] RIP: 0033:0x7ff69f78f749
[  207.653299][ T7195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.653317][ T7195] RSP: 002b:00007ff6a0581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  207.653340][ T7195] RAX: ffffffffffffffda RBX: 00007ff69f9e5fa0 RCX: 00007ff69f78f749
[  207.653355][ T7195] RDX: 0000200000000240 RSI: 000000004040ae79 RDI: 0000000000000006
[  207.653369][ T7195] RBP: 00007ff6a0581090 R08: 0000000000000000 R09: 0000000000000000
[  207.653382][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.653394][ T7195] R13: 00007ff69f9e6038 R14: 00007ff69f9e5fa0 R15: 00007ffe78af2aa8
[  207.653429][ T7195]  </TASK>
[  208.104429][ T7197] process 'syz.1.210' launched './file2' with NULL argv: empty string added
[  208.635526][   T37] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[  208.831024][   T37] usb 4-1: USB disconnect, device number 6
[  209.150037][ T7209] cgroup: Invalid name
[  209.262307][ T7212] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  209.872391][ T7220] binder: 7216:7220 unknown command 1847616617
[  209.888551][ T7220] binder: 7216:7220 ioctl c0306201 200000000080 returned -22
[  210.302359][ T7206] loop1: detected capacity change from 0 to 32768
[  210.399438][ T7206] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  210.427431][ T7206] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  210.700830][ T7206] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  210.910082][ T6060] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  210.922388][ T6060] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  210.993445][ T7230] bridge0: port 3(gretap0) entered blocking state
[  211.001746][ T7230] bridge0: port 3(gretap0) entered disabled state
[  211.011065][ T7230] gretap0: entered allmulticast mode
[  211.060917][ T7230] gretap0: entered promiscuous mode
[  211.072595][ T7230] bridge0: port 3(gretap0) entered blocking state
[  211.079598][ T7230] bridge0: port 3(gretap0) entered forwarding state
[  211.855644][ T6104] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  211.946694][ T7235] netlink: 'syz.5.221': attribute type 10 has an invalid length.
[  211.957890][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.966433][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.130012][ T6104] usb 1-1: Using ep0 maxpacket: 16
[  212.152114][ T6104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.163482][ T6104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.379401][ T6104] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  212.393510][ T6060] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1471ms
[  212.411544][ T6060] gfs2: fsid=syz:syz.0: jid=0: Done
[  212.418236][ T7206] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  212.442688][ T7206] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  213.259070][ T6104] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  213.296150][ T6104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.308026][ T6104] usb 1-1: config 0 descriptor??
[  213.601476][ T7245] loop2: detected capacity change from 0 to 1024
[  213.998569][ T7245] hfsplus: Unknown parameter 'asymmetPic@�u��й�d��Y��dI$(�S�BߙJ�&#mа4m�se�vS�:"-����X�F6�4�f��aLt@%a�'
[  214.032646][ T6104] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[  214.677582][ T6104] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max
[  214.782677][ T7257] virt_wifi0 speed is unknown, defaulting to 1000
[  214.795826][ T6104] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input7
[  214.812387][ T7245] loop2: detected capacity change from 0 to 2048
[  214.838748][ T7245] nilfs2: Unknown parameter 'keyring'
[  215.025159][ T6104] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  215.094136][ T6104] usb 1-1: USB disconnect, device number 5
[  215.106683][ T7265] loop3: detected capacity change from 0 to 64
[  215.182504][ T7265] MINIX-fs: bad superblock or unable to read bitmaps
[  215.785807][ T7271] trusted_key: encrypted_key: key user:syz not found
[  216.110442][ T7275] bridge0: port 3(gretap0) entered blocking state
[  216.126099][ T7275] bridge0: port 3(gretap0) entered disabled state
[  216.135693][ T7275] gretap0: entered allmulticast mode
[  216.173384][ T7275] gretap0: entered promiscuous mode
[  216.290697][ T7270] cgroup: Invalid name
[  218.124859][ T7288] netlink: 'syz.5.233': attribute type 10 has an invalid length.
[  218.203667][ T7280] fido_id[7280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  218.431549][ T7294] loop1: detected capacity change from 0 to 512
[  218.442453][ T7294] EXT4-fs (loop1): Test dummy encryption mode enabled
[  218.452453][ T7294] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  218.505609][ T7294] EXT4-fs (loop1): 1 truncate cleaned up
[  218.521537][ T7294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.778408][ T6060] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  219.014447][ T6060] usb 3-1: config 0 has no interfaces?
[  219.093074][ T6060] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  219.226705][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.370441][ T6060] usb 3-1: config 0 descriptor??
[  219.473113][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.604138][   T10] usb 3-1: USB disconnect, device number 9
[  219.935399][ T7306] bridge0: port 6(gretap0) entered blocking state
[  219.943033][ T7306] bridge0: port 6(gretap0) entered disabled state
[  219.950434][ T7306] gretap0: entered allmulticast mode
[  219.967243][ T7306] gretap0: entered promiscuous mode
[  219.975305][ T7306] bridge0: port 6(gretap0) entered blocking state
[  219.982144][ T7306] bridge0: port 6(gretap0) entered forwarding state
[  220.596408][ T7310] loop3: detected capacity change from 0 to 2048
[  220.629462][ T7310] nilfs2: Unknown parameter './file1'
[  220.784158][ T7300] loop0: detected capacity change from 0 to 40427
[  220.794029][ T7300] F2FS-fs (loop0): build fault injection rate: 174
[  220.818434][ T7300] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  220.849754][ T7300] F2FS-fs (loop0): invalid crc value
[  221.182398][ T7300] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  221.193146][ T7315] loop3: detected capacity change from 0 to 4096
[  221.247095][ T7300] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  221.277249][ T7322] loop2: detected capacity change from 0 to 2048
[  221.799737][ T7322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.797126][ T7335] netlink: 'syz.5.247': attribute type 10 has an invalid length.
[  223.497135][ T7338] loop2: detected capacity change from 0 to 512
[  223.704004][ T7338] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.248: inode has both inline data and extents flags
[  223.733849][ T7338] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.248: couldn't read orphan inode 15 (err -117)
[  223.782454][ T7338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.460970][ T7343] loop5: detected capacity change from 0 to 512
[  224.510371][ T7343] EXT4-fs (loop5): Test dummy encryption mode enabled
[  224.517174][ T7343] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  224.661447][ T7343] EXT4-fs (loop5): 1 truncate cleaned up
[  224.679143][ T7343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.844758][ T7348] netlink: 152 bytes leftover after parsing attributes in process `syz.3.250'.
[  225.523873][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.535058][ T6068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.822306][ T7357] loop5: detected capacity change from 0 to 2048
[  225.846656][ T7361] loop3: detected capacity change from 0 to 256
[  225.852743][ T7357] nilfs2: Unknown parameter './file1'
[  225.878107][ T7361] exfat: Deprecated parameter 'utf8'
[  225.925380][ T7361] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  225.942141][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  226.066182][ T7366] netlink: 'syz.0.255': attribute type 1 has an invalid length.
[  226.066495][ T7364] FAULT_INJECTION: forcing a failure.
[  226.066495][ T7364] name failslab, interval 1, probability 0, space 0, times 0
[  226.128361][   T10] usb 3-1: Using ep0 maxpacket: 16
[  226.148999][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  226.178981][   T10] usb 3-1: config 8 interface 0 has no altsetting 0
[  226.198403][ T7364] CPU: 0 UID: 0 PID: 7364 Comm: syz.5.256 Not tainted syzkaller #0 PREEMPT(full) 
[  226.198432][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  226.198446][ T7364] Call Trace:
[  226.198455][ T7364]  <TASK>
[  226.198465][ T7364]  dump_stack_lvl+0xe8/0x150
[  226.198504][ T7364]  should_fail_ex+0x414/0x560
[  226.198533][ T7364]  should_failslab+0xa8/0x100
[  226.198558][ T7364]  __kmalloc_cache_noprof+0x84/0x700
[  226.198577][ T7364]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  226.198596][ T7364]  ? __xdp_reg_mem_model+0x1d8/0x5a0
[  226.198619][ T7364]  __xdp_reg_mem_model+0x1d8/0x5a0
[  226.198641][ T7364]  ? __pfx___xdp_reg_mem_model+0x10/0x10
[  226.198661][ T7364]  ? page_pool_create_percpu+0x7f9/0xb80
[  226.198686][ T7364]  xdp_reg_mem_model+0x22/0x40
[  226.198704][ T7364]  bpf_test_run_xdp_live+0x21a/0x1b20
[  226.198725][ T7364]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  226.198745][ T7364]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  226.198769][ T7364]  ? __pfx_autoremove_wake_function+0x10/0x10
[  226.198788][ T7364]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  226.198808][ T7364]  ? 0xffffffffa02057c0
[  226.198836][ T7364]  ? 0xffffffffa02019d8
[  226.198868][ T7364]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  226.198896][ T7364]  ? _copy_from_user+0x94/0xb0
[  226.198914][ T7364]  ? bpf_test_init+0x113/0x150
[  226.198930][ T7364]  ? xdp_convert_md_to_buff+0x5b/0x340
[  226.198951][ T7364]  bpf_prog_test_run_xdp+0x7c4/0x1110
[  226.198981][ T7364]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  226.199004][ T7364]  ? __fget_files+0x2a/0x420
[  226.199024][ T7364]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  226.199044][ T7364]  bpf_prog_test_run+0x2c7/0x340
[  226.199063][ T7364]  __sys_bpf+0x5ee/0x8a0
[  226.199079][ T7364]  ? __pfx___sys_bpf+0x10/0x10
[  226.199105][ T7364]  ? ksys_write+0x22a/0x250
[  226.199127][ T7364]  ? __pfx_ksys_write+0x10/0x10
[  226.199153][ T7364]  __x64_sys_bpf+0x7c/0x90
[  226.199175][ T7364]  do_syscall_64+0xec/0xf80
[  226.199197][ T7364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.199212][ T7364]  ? trace_irq_disable+0x37/0x100
[  226.199225][ T7364]  ? clear_bhb_loop+0x40/0x90
[  226.199244][ T7364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.199259][ T7364] RIP: 0033:0x7ff69f78f749
[  226.199273][ T7364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.199286][ T7364] RSP: 002b:00007ff6a0581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  226.199302][ T7364] RAX: ffffffffffffffda RBX: 00007ff69f9e5fa0 RCX: 00007ff69f78f749
[  226.199313][ T7364] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  226.199322][ T7364] RBP: 00007ff6a0581090 R08: 0000000000000000 R09: 0000000000000000
[  226.199331][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.199339][ T7364] R13: 00007ff69f9e6038 R14: 00007ff69f9e5fa0 R15: 00007ffe78af2aa8
[  226.199363][ T7364]  </TASK>
[  226.527990][ T7366] 8021q: adding VLAN 0 to HW filter on device bond2
[  226.534887][ T7373] loop3: detected capacity change from 0 to 2048
[  226.549745][   T10] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice= f.ca
[  226.559104][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.567466][   T10] usb 3-1: Product: syz
[  226.572552][   T10] usb 3-1: Manufacturer: syz
[  226.577708][   T10] usb 3-1: SerialNumber: syz
[  226.682077][ T7373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.993814][ T7368] bond2: (slave veth5): Enslaving as an active interface with an up link
[  227.580704][ T7354] loop2: detected capacity change from 0 to 1024
[  227.992191][ T7371] bond1: (slave veth0_to_bond): Releasing backup interface
[  228.130028][ T7380] netlink: 'syz.5.259': attribute type 10 has an invalid length.
[  228.143487][ T7371] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  228.305976][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.260'.
[  228.323239][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.260'.
[  228.511990][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.551499][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.580624][ T7386] loop3: detected capacity change from 0 to 8
[  228.633073][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.697455][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.779110][ T7389] loop5: detected capacity change from 0 to 512
[  228.810850][ T7389] EXT4-fs (loop5): Test dummy encryption mode enabled
[  228.851939][ T7389] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  228.899791][   T10] usb 3-1: USB disconnect, device number 10
[  228.934894][ T7389] EXT4-fs (loop5): 1 truncate cleaned up
[  228.960329][ T7389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.078769][ T7396] tipc: Started in network mode
[  229.084039][ T7396] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  229.094131][ T7396] tipc: Enabled bearer <udp:syz0>, priority 10
[  229.696200][   T60] hfsplus: b-tree write err: -5, ino 4
[  229.808093][ T7400] binder: BINDER_SET_CONTEXT_MGR already set
[  229.888252][ T7401] binder: BINDER_SET_CONTEXT_MGR already set
[  229.918503][ T7400] binder: 7399:7400 ioctl 4018620d 200000000300 returned -16
[  229.937083][ T7401] binder: 7399:7401 ioctl 4018620d 200000000040 returned -16
[  229.951847][ T6068] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.227402][ T7406] gretap0: left allmulticast mode
[  230.232535][ T7406] gretap0: left promiscuous mode
[  230.237677][ T7406] bridge0: port 3(gretap0) entered disabled state
[  230.277414][ T7407] netlink: 'syz.2.265': attribute type 10 has an invalid length.
[  230.285319][ T7407] netlink: 2 bytes leftover after parsing attributes in process `syz.2.265'.
[  230.343332][ T7406] bridge_slave_0: left allmulticast mode
[  230.350611][ T7406] bridge_slave_0: left promiscuous mode
[  230.356470][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.377688][ T7406] bridge_slave_1: left allmulticast mode
[  230.384405][ T7406] bridge_slave_1: left promiscuous mode
[  230.390333][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.405231][ T7406] bond0: (slave bond_slave_0): Releasing backup interface
[  230.419808][ T7406] bond0: (slave bond_slave_1): Releasing backup interface
[  230.436170][ T7406] team0: Port device team_slave_0 removed
[  230.447556][ T7406] team0: Port device team_slave_1 removed
[  230.454433][ T7406] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.461986][ T7406] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.473704][ T7406] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.481317][ T7406] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.494012][ T7406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  230.510159][ T7407] team0: entered promiscuous mode
[  230.515485][ T7407] bridge0: port 1(team0) entered blocking state
[  230.522066][ T7407] bridge0: port 1(team0) entered disabled state
[  230.528818][ T7407] team0: entered allmulticast mode
[  230.536182][ T7407] bridge0: port 1(team0) entered blocking state
[  230.542669][ T7407] bridge0: port 1(team0) entered forwarding state
[  230.574543][ T6188] tipc: Node number set to 4269801488
[  230.602998][   T36] bridge0: port 1(team0) entered disabled state
[  231.017367][ T7420] loop5: detected capacity change from 0 to 4096
[  231.028426][ T7420] nilfs2: Unknown parameter '�����`E����λ�'
[  231.368642][ T7422] loop2: detected capacity change from 0 to 2048
[  231.431606][ T7422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.733408][ T7434] netlink: 'syz.2.272': attribute type 10 has an invalid length.
[  232.967393][ T7434] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  233.831577][ T7441] syzkaller1: entered promiscuous mode
[  233.850819][ T7441] syzkaller1: entered allmulticast mode
[  233.887369][ T7444] loop1: detected capacity change from 0 to 512
[  233.894349][ T7447] loop5: detected capacity change from 0 to 64
[  233.939408][ T7444] EXT4-fs (loop1): Test dummy encryption mode enabled
[  233.956283][ T7447] hfs: get root inode failed
[  233.972341][ T7444] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  234.064430][ T7444] EXT4-fs (loop1): 1 truncate cleaned up
[  234.072645][ T7444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.092472][ T7448] loop3: detected capacity change from 0 to 4096
[  234.109359][ T7448] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  234.175626][ T7448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.327270][ T7448] EXT4-fs (loop3): shut down requested (2)
[  235.365950][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.542200][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz.5.278'.
[  235.722612][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.270938][ T7466] loop2: detected capacity change from 0 to 2048
[  236.320105][ T7470] loop3: detected capacity change from 0 to 512
[  236.353787][ T7466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  236.450278][ T7470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.548532][ T7470] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  236.704799][ T7480] fuse: Bad value for 'user_id'
[  237.121335][ T7480] fuse: Bad value for 'user_id'
[  237.135988][ T7470] EXT4-fs error (device loop3): ext4_do_update_inode:5616: inode #2: comm syz.3.280: corrupted inode contents
[  237.258567][ T7470] EXT4-fs error (device loop3): ext4_dirty_inode:6501: inode #2: comm syz.3.280: mark_inode_dirty error
[  237.270541][ T7485] FAULT_INJECTION: forcing a failure.
[  237.270541][ T7485] name failslab, interval 1, probability 0, space 0, times 0
[  237.340455][ T7470] EXT4-fs error (device loop3): ext4_do_update_inode:5616: inode #2: comm syz.3.280: corrupted inode contents
[  237.348677][ T7485] CPU: 1 UID: 0 PID: 7485 Comm: syz.1.284 Not tainted syzkaller #0 PREEMPT(full) 
[  237.348751][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  237.348784][ T7485] Call Trace:
[  237.348806][ T7485]  <TASK>
[  237.348831][ T7485]  dump_stack_lvl+0xe8/0x150
[  237.348923][ T7485]  should_fail_ex+0x414/0x560
[  237.349126][ T7485]  should_failslab+0xa8/0x100
[  237.349219][ T7485]  kmem_cache_alloc_lru_noprof+0x8d/0x6e0
[  237.349295][ T7485]  ? alloc_inode+0xb8/0x1b0
[  237.349366][ T7485]  alloc_inode+0xb8/0x1b0
[  237.349428][ T7485]  path_from_stashed+0x200/0x5c0
[  237.349522][ T7485]  open_namespace_file+0x8f/0x130
[  237.349587][ T7485]  ? __pfx_open_namespace_file+0x10/0x10
[  237.349665][ T7485]  ? do_raw_spin_unlock+0x122/0x240
[  237.349739][ T7485]  vfs_open_tree+0xa9d/0xf50
[  237.349818][ T7485]  ? __x64_sys_open_tree+0x96/0x110
[  237.349889][ T7485]  ? __pfx_vfs_open_tree+0x10/0x10
[  237.349954][ T7485]  ? do_raw_spin_unlock+0x122/0x240
[  237.350021][ T7485]  ? alloc_fd+0x64c/0x6c0
[  237.350117][ T7485]  __x64_sys_open_tree+0x96/0x110
[  237.350181][ T7485]  do_syscall_64+0xec/0xf80
[  237.350245][ T7485]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.350299][ T7485]  ? trace_irq_disable+0x37/0x100
[  237.350354][ T7485]  ? clear_bhb_loop+0x40/0x90
[  237.350439][ T7485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.350507][ T7485] RIP: 0033:0x7f8e4d98f749
[  237.350560][ T7485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.350605][ T7485] RSP: 002b:00007f8e4bbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  237.350659][ T7485] RAX: ffffffffffffffda RBX: 00007f8e4dbe5fa0 RCX: 00007f8e4d98f749
[  237.350700][ T7485] RDX: 0000000000001802 RSI: 0000200000000000 RDI: ffffffffffffffff
[  237.350733][ T7485] RBP: 00007f8e4bbf6090 R08: 0000000000000000 R09: 0000000000000000
[  237.350765][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.350798][ T7485] R13: 00007f8e4dbe6038 R14: 00007f8e4dbe5fa0 R15: 00007ffd374fe618
[  237.350892][ T7485]  </TASK>
[  237.356464][ T7485] 
[  237.561961][ T7485] ============================================
[  237.568134][ T7485] WARNING: possible recursive locking detected
[  237.574401][ T7485] syzkaller #0 Not tainted
[  237.578829][ T7485] --------------------------------------------
[  237.585000][ T7485] syz.1.284/7485 is trying to acquire lock:
[  237.590927][ T7485] ffffffff8e29eed0 (namespace_sem){++++}-{4:4}, at: put_mnt_ns+0x170/0x2f0
[  237.599588][ T7485] 
[  237.599588][ T7485] but task is already holding lock:
[  237.606990][ T7485] ffffffff8e29eed0 (namespace_sem){++++}-{4:4}, at: lock_mount_exact+0x89/0x630
[  237.616073][ T7485] 
[  237.616073][ T7485] other info that might help us debug this:
[  237.624191][ T7485]  Possible unsafe locking scenario:
[  237.624191][ T7485] 
[  237.631664][ T7485]        CPU0
[  237.634965][ T7485]        ----
[  237.638288][ T7485]   lock(namespace_sem);
[  237.642575][ T7485]   lock(namespace_sem);
[  237.646944][ T7485] 
[  237.646944][ T7485]  *** DEADLOCK ***
[  237.646944][ T7485] 
[  237.655202][ T7485]  May be due to missing lock nesting notation
[  237.655202][ T7485] 
[  237.663810][ T7485] 2 locks held by syz.1.284/7485:
[  237.668951][ T7485]  #0: ffff888149040148 (&sb->s_type->i_mutex_key){++++}-{4:4}, at: lock_mount_exact+0x7d/0x630
[  237.679537][ T7485]  #1: ffffffff8e29eed0 (namespace_sem){++++}-{4:4}, at: lock_mount_exact+0x89/0x630
[  237.689157][ T7485] 
[  237.689157][ T7485] stack backtrace:
[  237.695273][ T7485] CPU: 1 UID: 0 PID: 7485 Comm: syz.1.284 Not tainted syzkaller #0 PREEMPT(full) 
[  237.695297][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  237.695309][ T7485] Call Trace:
[  237.695318][ T7485]  <TASK>
[  237.695327][ T7485]  dump_stack_lvl+0xe8/0x150
[  237.695354][ T7485]  print_deadlock_bug+0x279/0x290
[  237.695383][ T7485]  __lock_acquire+0x2540/0x2cf0
[  237.695408][ T7485]  ? irqentry_exit+0x5e8/0x670
[  237.695427][ T7485]  ? lockdep_hardirqs_on+0x7b/0x110
[  237.695445][ T7485]  ? irqentry_exit+0x5e8/0x670
[  237.695468][ T7485]  ? put_mnt_ns+0x170/0x2f0
[  237.695484][ T7485]  lock_acquire+0x107/0x340
[  237.695504][ T7485]  ? put_mnt_ns+0x170/0x2f0
[  237.695526][ T7485]  down_write+0x96/0x1f0
[  237.695547][ T7485]  ? put_mnt_ns+0x170/0x2f0
[  237.695563][ T7485]  ? __pfx_down_write+0x10/0x10
[  237.695583][ T7485]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  237.695601][ T7485]  ? kmem_cache_alloc_lru_noprof+0x3bd/0x6e0
[  237.695625][ T7485]  put_mnt_ns+0x170/0x2f0
[  237.695643][ T7485]  path_from_stashed+0x40a/0x5c0
[  237.695666][ T7485]  open_namespace_file+0x8f/0x130
[  237.695685][ T7485]  ? __pfx_open_namespace_file+0x10/0x10
[  237.695704][ T7485]  ? do_raw_spin_unlock+0x122/0x240
[  237.695722][ T7485]  vfs_open_tree+0xa9d/0xf50
[  237.695745][ T7485]  ? __x64_sys_open_tree+0x96/0x110
[  237.695762][ T7485]  ? __pfx_vfs_open_tree+0x10/0x10
[  237.695783][ T7485]  ? do_raw_spin_unlock+0x122/0x240
[  237.695801][ T7485]  ? alloc_fd+0x64c/0x6c0
[  237.695821][ T7485]  __x64_sys_open_tree+0x96/0x110
[  237.695838][ T7485]  do_syscall_64+0xec/0xf80
[  237.695856][ T7485]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.695873][ T7485]  ? trace_irq_disable+0x37/0x100
[  237.695888][ T7485]  ? clear_bhb_loop+0x40/0x90
[  237.695907][ T7485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.695925][ T7485] RIP: 0033:0x7f8e4d98f749
[  237.695941][ T7485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.695955][ T7485] RSP: 002b:00007f8e4bbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  237.695974][ T7485] RAX: ffffffffffffffda RBX: 00007f8e4dbe5fa0 RCX: 00007f8e4d98f749
[  237.695986][ T7485] RDX: 0000000000001802 RSI: 0000200000000000 RDI: ffffffffffffffff
[  237.695998][ T7485] RBP: 00007f8e4bbf6090 R08: 0000000000000000 R09: 0000000000000000
[  237.696008][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.696018][ T7485] R13: 00007f8e4dbe6038 R14: 00007f8e4dbe5fa0 R15: 00007ffd374fe618
[  237.696038][ T7485]  </TASK>
[  237.957030][ T7470] EXT4-fs error (device loop3): __ext4_ext_dirty:211: inode #2: comm syz.3.280: mark_inode_dirty error
[  237.984142][ T7482] EXT4-fs warning (device loop3): ext4_es_cache_extent:1081: inode #2: comm syz.3.280: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  237.984142][ T7482] 
[  238.036650][ T7491] netlink: 'syz.2.285': attribute type 10 has an invalid length.
[  238.112035][   T30] audit: type=1800 audit(2000000012.110:13): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.280" name="file1" dev="loop3" ino=18 res=0 errno=0
[  238.407214][ T7493] loop0: detected capacity change from 0 to 8