last executing test programs:

10m40.670719717s ago: executing program 0 (id=1146):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x5, 0x0)
io_submit(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sendto$inet(r1, &(0x7f0000000000)="a797c84ac737ff2dd1d916e565b796664e2fbda43abd2f4d3135fa8daa77d18dd1924f50241739bdd68792c3d208f7dd9f61dc79b7042cc0547399944b33f0b329d2019f6e8157d6017068600715f1e7d3d9009340fc8a144a0ef8caab88d7f19dec5363aa2cd7c3dc9a04b432b9977fd629b35720cd7f5ab6e4c17d8e80e75255ef4eab1e", 0x85, 0x40, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)

10m38.28802052s ago: executing program 0 (id=1155):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000200a})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000580))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
setuid(0xee01)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@errors_continue}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN")
r4 = syz_open_procfs(0x0, 0x0)
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}}, 0x0)
fdatasync(r0)
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)

10m36.35198066s ago: executing program 0 (id=1159):
r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2000c080)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsmount(r0, 0x0, 0x0)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioprio_set$pid(0x7, 0x0, 0x4004)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

10m35.046724565s ago: executing program 0 (id=1164):
socket(0x2, 0x805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00')
pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x2e)

10m33.629067073s ago: executing program 0 (id=1167):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x43861, &(0x7f0000000500)={[{@nobarrier}, {@oldalloc}, {@barrier}]}, 0x0, 0x53b, &(0x7f0000000780)="$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")
timer_create(0xfffffffffffffff4, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
close(r0)

10m28.002754091s ago: executing program 0 (id=1177):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r2, 0x0)
r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)

10m26.740353474s ago: executing program 32 (id=1177):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r2, 0x0)
r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)

20.619536619s ago: executing program 5 (id=2693):
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r5, 0x1488f346e7c00b43, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
splice(r0, 0x0, r2, 0x0, 0x3ff, 0x8)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x4000000, 0x2, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r6, 0x1)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0)
sendfile(r8, r7, &(0x7f0000000080)=0xb, 0x8)
accept4$x25(r6, 0x0, 0x0, 0x80800)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f00000003c0)={0x2e, "9bba14a574f790d4825264976cc28848a6393a7105000000a1f300c839efc88240b5c3916fdcc718ddad084b3300df9dfa0c55ad06525bab148dfce0c6aaa10b0a2ce9c8dea4b67e383a5f30613b6cdb019558585761c28807273bd8729fc78e035ccb7669bb5e304ebbbbf76d50922ecced439b393c2311961fe6bfbc8d5d39"})

18.683024163s ago: executing program 1 (id=2698):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
fchown(0xffffffffffffffff, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r6, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x408, 0x103)
r7 = socket(0x11, 0xa, 0x5)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000100)=0x2481, 0x4)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendto$inet(r7, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x24, 0xf7, 0x81, 0x7}, {0x5, 0x7, 0x0, 0x480}]}, 0x10)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1)
creat(&(0x7f00000000c0)='./file0\x00', 0x110)

17.474004307s ago: executing program 1 (id=2701):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$kcm(0x1e, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28)
recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
r2 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r3 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, 0x0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="030213"], 0xd, 0x1)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000001c0)=0x4)
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x1a8}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

15.88312374s ago: executing program 5 (id=2705):
open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0)
prlimit64(0x0, 0xc, 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
shutdown(r1, 0x1)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801)
signalfd(r4, &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

15.88234712s ago: executing program 1 (id=2706):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0xf, 0x2, 0x7fff7ffd}]})
syslog(0x0, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f0000000340), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/117, 0x75}], 0x1, 0xa, 0x1)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
r7 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001d00010028bd7000000000000a000000", @ANYRES32=r9, @ANYBLOB="0000ca000a120200b7a05857f0fe002af1073547344bfd7a"], 0x6f}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x72, 0x4)

11.972814739s ago: executing program 3 (id=2712):
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r5, 0x1488f346e7c00b43, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
splice(r0, 0x0, r2, 0x0, 0x3ff, 0x8)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x4000000, 0x2, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r6, 0x1)
r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0)
sendfile(r8, r7, &(0x7f0000000080)=0xb, 0x8)
accept4$x25(r6, 0x0, 0x0, 0x80800)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f00000003c0)={0x2e, "9bba14a574f790d4825264976cc28848a6393a7105000000a1f300c839efc88240b5c3916fdcc718ddad084b3300df9dfa0c55ad06525bab148dfce0c6aaa10b0a2ce9c8dea4b67e383a5f30613b6cdb019558585761c28807273bd8729fc78e035ccb7669bb5e304ebbbbf76d50922ecced439b393c2311961fe6bfbc8d5d39"})

9.899195096s ago: executing program 5 (id=2717):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
socket(0x10, 0x80002, 0x4)
r3 = syz_open_dev$usbfs(0x0, 0x205, 0x8401)
socket$nl_route(0x10, 0x3, 0x0)
r4 = fcntl$dupfd(r3, 0x406, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10)
r6 = socket(0x1e, 0x4, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

9.843309987s ago: executing program 4 (id=2718):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000003840)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r3, &(0x7f0000001500)=[{&(0x7f00000021c0)="bcc8", 0x2}], 0x1)
close(r1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x93bdb000)
kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r4, 0xfffffb6e})
prlimit64(r5, 0x0, &(0x7f0000000000)={0x4ffb, 0x3}, &(0x7f0000000080))
openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)

9.617483744s ago: executing program 3 (id=2720):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r3, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x0, 0xffed, 0xa001}, 'syz1\x00'})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

8.045399757s ago: executing program 2 (id=2721):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffff14)
syz_open_dev$usbfs(0x0, 0xf, 0x8041)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a73797a320000000014000000110101", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000040a0107e4000000000000000a00000a0c35cf4b909c9e411faae050b1a0db93fdbf04bc5194f6fa3709cf10a7ec7993f1e682c6d25cfbe59eced887fa4e9f73017e4121342edaf2db860ee7736e661793d2af8d6972d2760c099ec57ff971129b203b8475342177735bd0e3d765ef505d9419e8b5fae391b0088ed02778d61a97ee6e95a6b862a641b9568d4263de9e57e3f2682b01af6708fa669f809f4b51e64f3cf3e50a8ead62c058279fee9ffc9aecaa161177e2cc4924fbca30794ece805c8036cfcddaa82099eee957b7ec84fca6ad2b50c737ec9060c301719135f53600"/240], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x4040850}, 0x24000844)
readv(r5, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000400)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0)
close(r8)
close(r6)
r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$cgroup_int(r9, &(0x7f0000001480)=0x2, 0x12)
splice(r3, 0x0, r6, 0x0, 0x1100000000f336, 0x0)
mmap(&(0x7f0000176000/0x3000)=nil, 0x3000, 0x6, 0x810, 0xffffffffffffffff, 0xd78af000)
recvmmsg(r4, &(0x7f0000000200), 0x0, 0x2002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000800)=""/49, 0x31}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000900)=""/167, 0xa7}, {&(0x7f00000009c0)=""/109, 0x6d}, {&(0x7f0000000a40)=""/91, 0x5b}], 0x6}, 0x2020)

7.794385914s ago: executing program 4 (id=2722):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x8000)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8], 0x1, 0x320, &(0x7f0000000500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd496c71746da16b1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0x9}}, 0x26)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r8, &(0x7f0000000200), 0x0)
r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100))
r10 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r10, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r10, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0x40084146, 0x0)

7.039494995s ago: executing program 2 (id=2723):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x28000600)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
fcntl$getflags(r0, 0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x69a3b0a0, 0x0, 0x0, 0x0, 0x0, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
sendto$inet6(r5, &(0x7f0000000040)='D', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4e23, 0xfffc, @local, 0xfffffffd}, 0x1c)

6.983349947s ago: executing program 5 (id=2724):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffff00000000ca789bf71fe7ca8700482f00fe800000000000000000000000000021ff02000000000000000000000000000104206558000000000003000900000800000086dd080088be00000004100000000100000000000000080022eb00000000200080100200000000000008000100000800655800000000f169e1955e3003f155934d0f926691b72818b9e1c37d93fbac3d796805cf"], 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r3 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
ioctl$RTC_UIE_ON(r4, 0x7003)
ioctl$RTC_AIE_ON(r4, 0x7001)
ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0x15, 0x16, 0x3, 0x1, 0x0, 0x3, 0x56, 0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
io_setup(0x239f, 0x0)
io_submit(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xffff)
writev(r5, &(0x7f0000000080), 0x0)

6.261138617s ago: executing program 2 (id=2725):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpriority(0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0), 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0xf, 0x6, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, 0xa20, 0x4500}}, 0x20}}, 0x4000844)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r6)
sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000180)={'bond_slave_1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

6.127479161s ago: executing program 4 (id=2726):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0xffffffffffdffffe})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x84, 0xfe, 0x4, 0x4, @tick, {0x4}, {0xe}, @raw32}, {0xf9, 0x5, 0xbd, 0x8, @time={0x7, 0x4}, {0x0, 0x7}, {0x4, 0x2}, @raw8={"a89d4eae0d20a9ab8fe5f019"}}], 0x38)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)

5.277119944s ago: executing program 3 (id=2727):
open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0)
prlimit64(0x0, 0xc, 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
shutdown(r1, 0x1)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801)
signalfd(r4, &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

5.087002549s ago: executing program 4 (id=2728):
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r5, 0x1488f346e7c00b43, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
splice(r0, 0x0, r2, 0x0, 0x3ff, 0x8)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x4000000, 0x2, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(0x0, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r6, 0x1)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0)
sendfile(r8, r7, &(0x7f0000000080)=0xb, 0x8)
accept4$x25(r6, 0x0, 0x0, 0x80800)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f00000003c0)={0x2e, "9bba14a574f790d4825264976cc28848a6393a7105000000a1f300c839efc88240b5c3916fdcc718ddad084b3300df9dfa0c55ad06525bab148dfce0c6aaa10b0a2ce9c8dea4b67e383a5f30613b6cdb019558585761c28807273bd8729fc78e035ccb7669bb5e304ebbbbf76d50922ecced439b393c2311961fe6bfbc8d5d39"})

5.06520035s ago: executing program 2 (id=2729):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2)
ftruncate(r3, 0xffff)
fcntl$addseals(r3, 0x409, 0x7)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=<r5=>0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0xe47020)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
prlimit64(r5, 0xd, &(0x7f0000000280)={0x100000000, 0xf}, &(0x7f00000003c0))
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0)
r8 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
write$USERIO_CMD_REGISTER(r8, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0)
r9 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000})
r10 = fcntl$dupfd(r9, 0x0, r2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r11, 0xffffffffffffffff, 0x0)

3.547359712s ago: executing program 1 (id=2730):
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r5, 0x1488f346e7c00b43, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
splice(r0, 0x0, r2, 0x0, 0x3ff, 0x8)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x4000000, 0x2, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r6, 0x1)
r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0)
sendfile(r8, r7, &(0x7f0000000080)=0xb, 0x8)
accept4$x25(r6, 0x0, 0x0, 0x80800)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f00000003c0)={0x2e, "9bba14a574f790d4825264976cc28848a6393a7105000000a1f300c839efc88240b5c3916fdcc718ddad084b3300df9dfa0c55ad06525bab148dfce0c6aaa10b0a2ce9c8dea4b67e383a5f30613b6cdb019558585761c28807273bd8729fc78e035ccb7669bb5e304ebbbbf76d50922ecced439b393c2311961fe6bfbc8d5d39"})

3.448626545s ago: executing program 3 (id=2731):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
r2 = getpgid(0x0)
r3 = syz_pidfd_open(r2, 0x0)
readahead(r3, 0x8, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0)
write(r6, &(0x7f00000020c0)="45041a82eaec4743f56c0568fbc48e64307e18f0f65eb3b67e620374164f57cf681c", 0x22)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r6, 0x0)
ioctl(r6, 0x1, &(0x7f0000000080))
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000380)=ANY=[])
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x89fd, 0x0)
write(r7, &(0x7f0000000140)="24000000010006", 0x7)

3.407125066s ago: executing program 4 (id=2732):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000003840)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r2, &(0x7f0000001500)=[{&(0x7f00000021c0)="bcc8", 0x2}], 0x1)
close(r0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x93bdb000)
kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r3, 0xfffffb6e})
prlimit64(r4, 0x0, &(0x7f0000000000)={0x4ffb, 0x3}, &(0x7f0000000080))
openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)

3.24377222s ago: executing program 2 (id=2733):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x2)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect)
prctl$PR_SET_SECUREBITS(0x1c, 0xb3d6f486854de123)
socket$inet6_udplite(0xa, 0x2, 0x88)
clock_adjtime(0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r6 = fsmount(r1, 0x0, 0x0)
unshare(0x18000900)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x4e8, 0x7}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

1.597298826s ago: executing program 3 (id=2734):
r0 = socket(0x2, 0x805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00')
pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r3, 0x6}, 0x94)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000200))
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, 0x0)
syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$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")
r4 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r4, 0x12)

1.596964146s ago: executing program 5 (id=2735):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x28000600)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
fcntl$getflags(r0, 0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x69a3b0a0, 0x0, 0x0, 0x0, 0x0, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
sendto$inet6(r5, &(0x7f0000000040)='D', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4e23, 0xfffc, @local, 0xfffffffd}, 0x1c)

1.347479583s ago: executing program 4 (id=2736):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000003840)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r2, &(0x7f0000001500)=[{&(0x7f00000021c0)="bcc8", 0x2}], 0x1)
close(0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x93bdb000)
kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r3, 0xfffffb6e})
prlimit64(r4, 0x0, &(0x7f0000000000)={0x4ffb, 0x3}, &(0x7f0000000080))
openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)

1.258592565s ago: executing program 2 (id=2737):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r3, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccf060089d5de4d4f2c3e000009", "3e360600"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x0, 0xffed, 0xa001}, 'syz1\x00'})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

1.232717326s ago: executing program 1 (id=2738):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0xffffffffffdffffe})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x84, 0xfe, 0x4, 0x4, @tick, {0x4}, {0xe}, @raw32}, {0xf9, 0x5, 0xbd, 0x8, @time={0x7, 0x4}, {0x0, 0x7}, {0x4, 0x2}, @raw8={"a89d4eae0d20a9ab8fe5f019"}}], 0x38)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)

597.197823ms ago: executing program 3 (id=2739):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc)
close(r4)
syz_open_dev$video(&(0x7f0000002200), 0x7, 0x2)

357.29µs ago: executing program 5 (id=2740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r2=>0xffffffffffffffff})
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x40c140, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280))
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00')
pread64(r5, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x4, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x7fff, 0x7, 0xffffffff, 0x1ff, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x5, 0xffffffff, 0xfffffffa, 0x4, 0x6, 0xa2d8, 0x5, 0x1000, 0x8, 0x471, 0x7, 0x384, 0x8001, 0x4]})
sendmsg$nl_generic(r0, 0x0, 0x4000)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={<r6=>0x0}, &(0x7f0000000400)=0xc)
ptrace$peekuser(0x3, r6, 0x45d5)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={<r8=>0x0, 0x442, 0x7}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000000c0)={r8, 0xc5}, &(0x7f0000000100)=0x8)
socket(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=2741):
open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[], 0x0)
prlimit64(0x0, 0xc, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
shutdown(r1, 0x1)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = openat$qrtrtun(0xffffff9c, &(0x7f0000000040), 0x14801)
signalfd(r4, &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

9 code=0x0
[  124.569137][ T4938] netlink: 'syz.3.143': attribute type 1 has an invalid length.
[  124.587066][ T4938] netlink: 'syz.3.143': attribute type 2 has an invalid length.
[  127.276462][ T4959] loop3: detected capacity change from 0 to 8192
[  127.496116][ T4968] loop4: detected capacity change from 0 to 256
[  127.668126][ T4968] tipc: Started in network mode
[  127.673462][ T4968] tipc: Node identity ac14140f, cluster identity 4711
[  127.685438][ T4968] tipc: Enabled bearer <udp:syz2>, priority 10
[  128.660032][ T4977] loop0: detected capacity change from 0 to 1024
[  128.820279][ T4233] tipc: Node number set to 2886997007
[  129.116239][ T4977] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none.
[  129.328717][ T4977] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.704485][ T4985] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  130.578193][ T4233] Bluetooth: hci4: command 0x0405 tx timeout
[  131.846376][ T4999] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.761007][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  132.768202][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  133.678406][ T5020] loop1: detected capacity change from 0 to 512
[  137.671146][ T5046] device syzkaller0 entered promiscuous mode
[  138.271362][ T5060] loop1: detected capacity change from 0 to 512
[  138.395977][ T5060] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  138.403658][ T5060] UDF-fs: Scanning with blocksize 512 failed
[  138.415691][ T5060] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  138.423332][ T5060] UDF-fs: Scanning with blocksize 1024 failed
[  138.435835][ T5060] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  138.443766][ T5060] UDF-fs: Scanning with blocksize 2048 failed
[  138.460940][ T5060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  138.481186][ T5060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.191116][ T5065] hugetlbfs: syz.1.173 (5065): Using mlock ulimits for SHM_HUGETLB is deprecated
[  139.964330][ T5081] loop3: detected capacity change from 0 to 256
[  140.370506][ T5080] tipc: Started in network mode
[  140.375505][ T5080] tipc: Node identity ac14140f, cluster identity 4711
[  140.382958][ T5080] tipc: Enabled bearer <udp:syz2>, priority 10
[  141.538368][ T4232] tipc: Node number set to 2886997007
[  144.422693][ T5110] loop4: detected capacity change from 0 to 512
[  145.707135][ T5110] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  146.280547][ T5110] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.185: bg 0: block 473: padding at end of block bitmap is not set
[  146.337169][ T5110] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  147.307414][ T5110] EXT4-fs (loop4): 1 orphan inode deleted
[  147.341796][ T5110] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  147.640377][ T5110] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.292968][ T5165] loop4: detected capacity change from 0 to 256
[  153.256867][ T5165] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  154.713119][ T5194] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  156.284024][ T5208] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  156.716398][ T5208] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  156.762384][ T5218] loop3: detected capacity change from 0 to 512
[  156.821166][ T5208] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  156.841491][ T5208] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  156.861120][ T5208] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  156.882872][ T5208] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  156.927004][ T5218] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  157.450083][ T5218] UDF-fs: Scanning with blocksize 512 failed
[  157.568584][ T5218] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  157.579187][ T5208] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  157.621639][ T5218] UDF-fs: Scanning with blocksize 1024 failed
[  157.632659][ T5218] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  157.648017][ T5218] UDF-fs: Scanning with blocksize 2048 failed
[  157.698456][ T5218] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  157.769506][ T5218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.951571][ T5235] loop1: detected capacity change from 0 to 256
[  157.990434][ T5235] FAT-fs (loop1): "posix" option is obsolete, not supported now
[  159.063210][ T5248] binder: 5247:5248 ioctl 4018620d 0 returned -22
[  161.818588][ T5281] netlink: 'syz.2.230': attribute type 1 has an invalid length.
[  161.876045][ T5281] netlink: 'syz.2.230': attribute type 2 has an invalid length.
[  162.225513][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'.
[  162.316957][ T5295] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.324258][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.138595][ T5308] binder: 5307:5308 ioctl 4018620d 0 returned -22
[  163.167270][ T5302] loop0: detected capacity change from 0 to 512
[  163.313299][ T5302] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  163.818769][ T5302] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.276454][ T5322] loop1: detected capacity change from 0 to 32768
[  165.123019][ T5322] XFS (loop1): Mounting V5 Filesystem
[  165.804174][ T5322] XFS (loop1): Ending clean mount
[  165.846653][ T5322] XFS (loop1): Quotacheck needed: Please wait.
[  166.493016][ T5322] XFS (loop1): Quotacheck: Done.
[  167.109883][ T5353] ubi0: attaching mtd0
[  167.123858][ T5353] ubi0: scanning is finished
[  167.128559][ T5353] ubi0: empty MTD device detected
[  167.163448][   T26] audit: type=1800 audit(1785514323.845:4): pid=5350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.241" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0
[  167.386994][ T4195] XFS (loop1): Unmounting Filesystem
[  167.478896][ T5353] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  167.694293][ T5360] loop2: detected capacity change from 0 to 128
[  168.199546][ T5365] trusted_key: encrypted_key: insufficient parameters specified
[  168.694619][ T5370] device syzkaller0 entered promiscuous mode
[  169.002692][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'.
[  169.555053][ T5370] tipc: Started in network mode
[  169.577175][ T5370] tipc: Node identity 2a5037436a7c, cluster identity 4711
[  169.632612][ T5370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.662876][ T5370] tipc: Resetting bearer <eth:syzkaller0>
[  169.707810][ T5369] tipc: Resetting bearer <eth:syzkaller0>
[  169.756718][ T5369] tipc: Disabling bearer <eth:syzkaller0>
[  170.641586][ T5391] binder: 5389:5391 ioctl 4018620d 0 returned -22
[  170.787489][ T5395] loop2: detected capacity change from 0 to 8
[  171.723166][ T5399] ODEBUG: Out of memory. ODEBUG disabled
[  173.781485][ T5422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.266'.
[  175.672740][ T5448] binder: 5447:5448 ioctl 4018620d 0 returned -22
[  176.200531][ T5459] loop2: detected capacity change from 0 to 256
[  176.280139][ T5459] exfat: Deprecated parameter 'utf8'
[  176.362141][ T5460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'.
[  176.435977][ T5459] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  178.378991][ T5480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'.
[  179.265496][ T5489] ksmbd: Unknown IPC event: 3, ignore.
[  180.933984][ T5349] Bluetooth: hci3: command 0x0406 tx timeout
[  181.019843][ T4232] Bluetooth: hci0: command 0x0406 tx timeout
[  181.029364][ T4232] Bluetooth: hci1: command 0x0406 tx timeout
[  181.376288][ T4232] Bluetooth: hci2: command 0x0406 tx timeout
[  181.384089][ T5503] binder: 5494:5503 ioctl 4018620d 0 returned -22
[  181.396109][ T4232] Bluetooth: hci4: command 0x0406 tx timeout
[  182.678187][ T5516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  183.282856][ T5528] netlink: 'syz.3.294': attribute type 11 has an invalid length.
[  184.625895][ T5543] netlink: 'syz.4.299': attribute type 21 has an invalid length.
[  184.634186][ T5543] netlink: 156 bytes leftover after parsing attributes in process `syz.4.299'.
[  185.232301][ T5537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'.
[  186.034391][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'.
[  186.484734][ T5564] binder: BINDER_SET_CONTEXT_MGR already set
[  186.572029][ T5564] binder: 5563:5564 ioctl 4018620d 200000004a80 returned -16
[  188.020294][ T5583] netlink: 'syz.2.310': attribute type 11 has an invalid length.
[  188.878038][ T5593] loop3: detected capacity change from 0 to 256
[  189.657832][ T5593] exfat: Deprecated parameter 'utf8'
[  189.745203][ T5593] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  190.288586][ T5603] loop1: detected capacity change from 0 to 32768
[  190.982139][ T5621] binder: 5619:5621 ioctl c0306201 0 returned -14
[  191.007195][ T5603] XFS (loop1): Mounting V5 Filesystem
[  191.098253][ T5621] binder: BINDER_SET_CONTEXT_MGR already set
[  191.104275][ T5621] binder: 5619:5621 ioctl 4018620d 200000004a80 returned -16
[  192.387741][ T5635] loop2: detected capacity change from 0 to 128
[  192.428592][ T5635] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value
[  192.513670][ T5603] XFS (loop1): Ending clean mount
[  192.527273][ T5603] XFS (loop1): Quotacheck needed: Please wait.
[  192.572836][ T5603] XFS (loop1): Quotacheck: Done.
[  193.357463][ T4195] XFS (loop1): Unmounting Filesystem
[  193.692627][ T5651] loop2: detected capacity change from 0 to 32768
[  194.010544][ T5651] XFS (loop2): Mounting V5 Filesystem
[  194.088515][ T5651] XFS (loop2): Ending clean mount
[  194.098405][ T5651] XFS (loop2): Quotacheck needed: Please wait.
[  194.297755][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  194.304591][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  194.355867][ T5651] XFS (loop2): Quotacheck: Done.
[  194.939856][   T26] audit: type=1800 audit(1785514351.685:5): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.328" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  194.989022][ T4187] XFS (loop2): Unmounting Filesystem
[  196.490892][ T5693] loop1: detected capacity change from 0 to 256
[  197.530249][ T5693] exfat: Deprecated parameter 'utf8'
[  197.687892][ T5693] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  198.807419][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'.
[  199.128889][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'.
[  199.183224][ T5724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'.
[  199.221134][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.228693][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.311219][ T5720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  200.639924][ T5720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  200.650101][ T5739] loop3: detected capacity change from 0 to 256
[  200.656827][ T5720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  200.669378][ T5720] device bridge_slave_0 left promiscuous mode
[  200.677858][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.701678][ T5720] device bridge_slave_1 left promiscuous mode
[  200.709294][ T5739] FAT-fs (loop3): "posix" option is obsolete, not supported now
[  200.728137][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.753884][ T5720] bond0: (slave bond_slave_0): Releasing backup interface
[  201.078098][ T5745] trusted_key: encrypted_key: insufficient parameters specified
[  203.609397][ T5756] loop4: detected capacity change from 0 to 256
[  203.964725][ T5720] bond0: (slave bond_slave_1): Releasing backup interface
[  204.017703][ T5756] exfat: Deprecated parameter 'utf8'
[  204.031348][ T5756] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  205.199753][ T5720] team0: Port device team_slave_0 removed
[  205.700364][ T5720] team0: Port device team_slave_1 removed
[  205.729577][ T5720] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.757460][ T5720] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.767884][ T5720] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.805981][ T5720] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.470471][ T5794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.363'.
[  210.205431][ T5805] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  210.286596][ T5805] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  210.326294][ T5805] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  210.364970][ T5805] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  210.418362][ T5810] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  210.862420][ T5805] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.120556][ T5805] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.190074][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'.
[  211.338555][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.346324][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.321385][ T5825] ksmbd: Unknown IPC event: 3, ignore.
[  213.099600][ T4575] udevd[4575]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  213.280577][ T5844] loop2: detected capacity change from 0 to 512
[  213.370981][ T5846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.377'.
[  213.664785][ T5844] EXT4-fs (loop2): Ignoring removed nobh option
[  214.043939][ T5844] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  214.144226][ T5844] EXT4-fs (loop2): 1 truncate cleaned up
[  214.185982][ T5844] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  215.041419][ T5869] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  215.071669][ T5869] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  215.088132][ T5869] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  216.828957][ T5886] loop4: detected capacity change from 0 to 1024
[  219.265791][ T5899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.392'.
[  220.718978][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  220.871666][ T5911] loop3: detected capacity change from 0 to 40427
[  220.900820][ T5911] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  220.908860][ T5911] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  221.126451][ T5911] F2FS-fs (loop3): Found nat_bits in checkpoint
[  221.191612][ T5911] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  221.198701][ T5911] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  221.680297][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  221.688037][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  221.698481][ T5906] device bridge_slave_0 left promiscuous mode
[  221.704760][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.715382][ T5906] device bridge_slave_1 left promiscuous mode
[  221.723264][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.745760][ T5906] bond0: (slave bond_slave_0): Releasing backup interface
[  221.790143][ T5906] bond0: (slave bond_slave_1): Releasing backup interface
[  221.875317][ T5906] team0: Port device team_slave_0 removed
[  221.909657][ T5906] team0: Port device team_slave_1 removed
[  221.918481][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.926079][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.934852][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.942793][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.956836][ T5918] netlink: 'syz.1.396': attribute type 21 has an invalid length.
[  221.965135][ T5918] netlink: 156 bytes leftover after parsing attributes in process `syz.1.396'.
[  221.983407][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.4.395'.
[  222.280670][ T5933] loop4: detected capacity change from 0 to 32768
[  222.602749][ T5933] XFS (loop4): Mounting V5 Filesystem
[  222.716015][ T5933] XFS (loop4): Ending clean mount
[  222.724223][ T5933] XFS (loop4): Quotacheck needed: Please wait.
[  222.763750][ T5933] XFS (loop4): Quotacheck: Done.
[  223.686231][   T26] audit: type=1800 audit(1785514380.135:6): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.401" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0
[  223.966164][ T4191] XFS (loop4): Unmounting Filesystem
[  225.022366][ T5975] tipc: Started in network mode
[  225.077347][ T5975] tipc: Node identity 5e9cf0622ec5, cluster identity 4711
[  225.084644][ T5975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.113507][ T5972] device syzkaller0 entered promiscuous mode
[  225.436168][ T5982] tipc: Resetting bearer <eth:syzkaller0>
[  225.524222][ T5982] tipc: Disabling bearer <eth:syzkaller0>
[  225.651617][ T5986] loop1: detected capacity change from 0 to 4096
[  225.700380][ T5989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  225.866818][ T5989] bond1: (slave bond0): Releasing backup interface
[  226.337004][ T5998] Invalid ELF header magic: != ELF
[  228.513442][ T5989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  228.570114][ T5989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  228.579469][ T5989] device bridge_slave_0 left promiscuous mode
[  228.586851][ T6015] loop4: detected capacity change from 0 to 512
[  228.588985][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.648463][ T5989] device bridge_slave_1 left promiscuous mode
[  228.655043][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.776737][ T5989] bond0: (slave bond_slave_0): Releasing backup interface
[  229.819178][ T5989] bond0: (slave bond_slave_1): Releasing backup interface
[  230.064164][ T5989] team0: Port device team_slave_0 removed
[  230.123338][ T5989] team0: Port device team_slave_1 removed
[  230.147784][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.164923][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.182395][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.192441][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.221268][ T6065] loop4: detected capacity change from 0 to 512
[  235.231441][ T6096] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  235.329314][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'.
[  236.974850][ T6115] binder: 6114:6115 ioctl 4018620d 0 returned -22
[  237.192065][ T6118] loop3: detected capacity change from 0 to 512
[  239.477122][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'.
[  240.327236][ T6170] binder: 6166:6170 ioctl 4018620d 0 returned -22
[  244.361462][ T4348] Bluetooth: Error in BCSP hdr checksum
[  244.788578][ T4389] Bluetooth: Error in BCSP hdr checksum
[  245.443921][ T6219] binder: 6218:6219 ioctl 4018620d 0 returned -22
[  245.573035][ T6222] device syzkaller0 entered promiscuous mode
[  245.602300][ T6224] device syzkaller0 entered promiscuous mode
[  245.610865][ T6226] loop1: detected capacity change from 0 to 512
[  245.744678][ T6224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.117103][ T1111] Bluetooth: hci5: command 0x1003 tx timeout
[  246.147218][ T4202] Bluetooth: hci5: sending frame failed (-49)
[  246.499169][ T6223] tipc: Resetting bearer <eth:syzkaller0>
[  246.523509][ T6223] tipc: Disabling bearer <eth:syzkaller0>
[  246.747026][ T6243] loop1: detected capacity change from 0 to 512
[  248.505427][ T1111] Bluetooth: hci5: command 0x1001 tx timeout
[  248.512490][ T4202] Bluetooth: hci5: sending frame failed (-49)
[  249.665209][ T6274] loop1: detected capacity change from 0 to 512
[  249.677316][ T6272] binder: 6271:6272 ioctl c0306201 0 returned -14
[  250.982735][   T21] Bluetooth: hci5: command 0x1009 tx timeout
[  252.254592][ T6296] loop1: detected capacity change from 0 to 512
[  252.290204][ T6296] EXT4-fs (loop1): Ignoring removed nobh option
[  252.397764][ T6296] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  252.646240][ T6296] EXT4-fs (loop1): 1 truncate cleaned up
[  252.760000][ T6296] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  254.865701][ T6318] loop3: detected capacity change from 0 to 512
[  255.837344][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  255.843779][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  257.282420][ T6335] loop4: detected capacity change from 0 to 64
[  257.993863][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.993908][ T6340] bridge0: port 2(bridge_slave_1) entered listening state
[  257.994056][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.994095][ T6340] bridge0: port 1(bridge_slave_0) entered listening state
[  257.995602][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  257.995778][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  258.015542][ T6340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.204278][   T26] audit: type=1800 audit(1785514415.255:7): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.511" name="file1" dev="loop4" ino=21 res=0 errno=0
[  258.299015][ T6353] binder: BINDER_SET_CONTEXT_MGR already set
[  258.305063][ T6353] binder: 6352:6353 ioctl 4018620d 200000004a80 returned -16
[  258.334387][ T6354] loop3: detected capacity change from 0 to 512
[  258.335108][ T6353] binder: 6352:6353 ioctl c0306201 0 returned -14
[  258.410313][ T4191] hfs: node 4:3 still has 1 user(s)!
[  259.308453][ T6366] loop3: detected capacity change from 0 to 512
[  259.335376][ T6370] loop2: detected capacity change from 0 to 128
[  262.050208][ T6378] loop3: detected capacity change from 0 to 16
[  262.124432][ T6378] erofs: (device loop3): mounted with root inode @ nid 36.
[  266.531714][ T6410] loop3: detected capacity change from 0 to 512
[  266.675095][ T6415] fuse: Bad value for 'fd'
[  267.140273][ T6420] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  267.232147][ T6418] block device autoloading is deprecated and will be removed.
[  267.804839][ T6424] using random self ethernet address
[  267.810646][ T6424] using random host ethernet address
[  268.406999][ T6424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  268.415895][ T6424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  268.423612][ T6424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  272.569110][ T6456] binder: BINDER_SET_CONTEXT_MGR already set
[  272.586847][ T6456] binder: 6455:6456 ioctl 4018620d 200000004a80 returned -16
[  274.950728][ T6478] device syzkaller0 entered promiscuous mode
[  280.314565][ T6522] loop4: detected capacity change from 0 to 512
[  280.994524][ T6536] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  283.089572][ T6548] loop3: detected capacity change from 0 to 512
[  285.923131][ T6578] loop1: detected capacity change from 0 to 512
[  286.176230][ T6585] fuse: Bad value for 'fd'
[  286.327729][ T6586] autofs4:pid:6586:autofs_fill_super: called with bogus options
[  286.570357][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  286.579387][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  286.614673][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  286.623975][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  288.287859][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  288.295401][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  288.323921][ T6595] loop3: detected capacity change from 0 to 512
[  292.658386][ T6654] ipt_REJECT: ECHOREPLY no longer supported.
[  292.678643][ T6654] IPv6: NLM_F_CREATE should be specified when creating new route
[  293.024542][ T6658] loop1: detected capacity change from 0 to 512
[  294.342503][ T6672] loop1: detected capacity change from 0 to 512
[  294.717033][ T6676] loop3: detected capacity change from 0 to 32768
[  295.419367][ T6682] misc userio: Invalid payload size
[  295.435634][ T6682] netlink: 120 bytes leftover after parsing attributes in process `syz.0.605'.
[  295.562466][ T6676] XFS (loop3): Mounting V5 Filesystem
[  295.913329][ T6676] XFS (loop3): Ending clean mount
[  295.920942][ T6676] XFS (loop3): Quotacheck needed: Please wait.
[  297.344515][ T6676] XFS (loop3): Quotacheck: Done.
[  298.261042][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'.
[  298.273211][ T6706] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  298.282877][ T6706] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  298.292239][ T6706] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  298.300992][ T6706] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  298.319917][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'.
[  298.330481][ T4186] XFS (loop3): Unmounting Filesystem
[  298.331551][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'.
[  298.563619][ T6710] loop2: detected capacity change from 0 to 512
[  299.563314][ T6720] loop2: detected capacity change from 0 to 512
[  303.555621][ T6766] loop3: detected capacity change from 0 to 512
[  304.607387][ T6785] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  305.063678][   T26] audit: type=1326 audit(1785514461.635:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  305.324938][ T6787] loop1: detected capacity change from 0 to 512
[  305.391061][   T26] audit: type=1326 audit(1785514461.635:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  305.415752][   T26] audit: type=1326 audit(1785514461.645:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  305.455619][   T26] audit: type=1326 audit(1785514461.645:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  305.483471][   T26] audit: type=1326 audit(1785514461.645:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  305.511935][   T26] audit: type=1326 audit(1785514461.645:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  305.537738][   T26] audit: type=1326 audit(1785514461.645:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  306.111098][   T26] audit: type=1326 audit(1785514461.645:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  306.324512][   T26] audit: type=1326 audit(1785514461.645:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  306.414548][   T26] audit: type=1326 audit(1785514461.645:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.1.630" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41ef90d84e code=0x7ffc0000
[  307.652050][ T6824] ipt_REJECT: ECHOREPLY no longer supported.
[  307.670242][ T6824] IPv6: NLM_F_CREATE should be specified when creating new route
[  308.367583][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'.
[  309.978720][ T6856] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  310.819713][ T6859] loop2: detected capacity change from 0 to 512
[  310.867557][ T6861] device syzkaller0 entered promiscuous mode
[  312.246145][ T4235] Bluetooth: hci4: command 0x0405 tx timeout
[  313.060591][  T263] block nbd4: Attempted send on invalid socket
[  313.067586][  T263] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  315.832814][ T6908] loop1: detected capacity change from 0 to 512
[  315.850110][ T6907] loop3: detected capacity change from 0 to 512
[  316.684255][ T6915] loop4: detected capacity change from 0 to 512
[  318.322022][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  318.328376][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  318.368720][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.375975][    C0] bridge0: topology change detected, propagating
[  318.384825][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.392106][    C0] bridge0: topology change detected, propagating
[  318.470050][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  322.837475][ T6983] ipt_REJECT: ECHOREPLY no longer supported.
[  322.856920][ T6983] IPv6: NLM_F_CREATE should be specified when creating new route
[  323.533993][ T6991] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  328.476766][ T7035] loop4: detected capacity change from 0 to 256
[  328.501562][ T7032] device syzkaller0 entered promiscuous mode
[  328.571274][ T7035] FAT-fs (loop4): "posix" option is obsolete, not supported now
[  331.268206][ T7062] hub 8-0:1.0: USB hub found
[  331.273049][ T7062] hub 8-0:1.0: 1 port detected
[  334.837693][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'.
[  335.260853][ T7099] device veth1_macvtap left promiscuous mode
[  336.285611][ T7107] loop2: detected capacity change from 0 to 512
[  336.331391][ T7113] device syzkaller0 entered promiscuous mode
[  336.396679][ T7107] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  336.431712][ T7107] EXT4-fs (loop2): Ignoring removed orlov option
[  336.559218][ T7107] EXT4-fs (loop2): DAX unsupported by block device.
[  337.002737][ T7123] loop4: detected capacity change from 0 to 512
[  337.081659][ T7124] usb0: HOST MAC 76:78:a7:1e:27:d4
[  337.087973][ T7124] usb0: MAC e6:90:e6:a6:fd:c0
[  341.651595][ T7170] device syzkaller0 entered promiscuous mode
[  342.950275][ T7186] batman_adv: batadv0: Adding interface: macvtap1
[  342.969771][ T7186] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.980373][ T7190] loop3: detected capacity change from 0 to 512
[  343.006693][ T7188] fuse: Unknown parameter '0x0000000000000005'
[  343.194338][ T7186] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  344.007893][ T7191] batman_adv: batadv0: Removing interface: macvtap1
[  348.021178][ T7247] device syzkaller0 entered promiscuous mode
[  349.359863][ T7270] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  349.366861][ T7270] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  349.381541][ T7270] vhci_hcd vhci_hcd.0: Device attached
[  349.885172][ T7271] vhci_hcd: connection closed
[  350.090168][ T4303] vhci_hcd: stop threads
[  350.466982][ T4303] vhci_hcd: release socket
[  350.471627][ T4303] vhci_hcd: disconnect device
[  353.238688][ T7316] device syzkaller0 entered promiscuous mode
[  355.474765][ T7339] overlayfs: failed to clone upperpath
[  356.350276][ T7349] loop2: detected capacity change from 0 to 512
[  356.994772][ T7349] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.770: invalid indirect mapped block 4294967295 (level 1)
[  357.018768][ T7349] EXT4-fs (loop2): Remounting filesystem read-only
[  357.025429][ T7349] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.770: invalid indirect mapped block 4294967295 (level 1)
[  357.107851][ T7349] EXT4-fs (loop2): Remounting filesystem read-only
[  357.108412][ T7349] EXT4-fs (loop2): 2 truncates cleaned up
[  357.108513][ T7349] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,resuid=0x0000000000000000,. Quota mode: writeback.
[  358.515604][ T7357] input: syz0 as /devices/virtual/input/input7
[  359.006160][ T7357] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  359.009458][ T7355] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  359.041650][ T7357] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.071674][ T7355] EXT4-fs (loop2): Remounting filesystem read-only
[  360.722565][ T7357] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  360.735747][ T7357] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.788819][ T7382] device syzkaller0 entered promiscuous mode
[  360.831850][ T7389] loop1: detected capacity change from 0 to 512
[  361.553398][ T7389] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.778: iget: bad i_size value: 38620345925642
[  361.601065][ T7389] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.778: couldn't read orphan inode 15 (err -117)
[  361.627365][ T7389] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  362.806711][ T7419] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  363.494545][ T7389] EXT4-fs (loop1): shut down requested (1)
[  363.675703][ T7414] device bridge1 entered promiscuous mode
[  363.694420][ T7414] team0: Port device bridge1 added
[  364.578642][ T7428] device syzkaller0 entered promiscuous mode
[  365.464913][ T7432] binder: 7431:7432 ioctl c0306201 0 returned -14
[  367.940617][ T7481] loop2: detected capacity change from 0 to 64
[  368.743850][ T7482] Device name cannot be null; rc = [-22]
[  368.774502][ T7482] overlayfs: overlapping lowerdir path
[  368.801073][ T7482] overlayfs: overlapping lowerdir path
[  369.481929][ T7502] xt_hashlimit: max too large, truncated to 1048576
[  371.269698][ T7513] binder: 7512:7513 ioctl c0306201 0 returned -14
[  372.977138][ T7545] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4)
[  375.008886][ T4194] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  375.019070][ T4194] CPU: 0 PID: 4194 Comm: kworker/u5:2 Not tainted syzkaller #0
[  375.026647][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  375.036707][ T4194] Workqueue: hci2 hci_rx_work
[  375.041578][ T4194] Call Trace:
[  375.044915][ T4194]  <TASK>
[  375.047942][ T4194]  dump_stack_lvl+0x188/0x250
[  375.052759][ T4194]  ? show_regs_print_info+0x20/0x20
[  375.057972][ T4194]  ? load_image+0x410/0x410
[  375.062567][ T4194]  sysfs_create_dir_ns+0x26a/0x290
[  375.067868][ T4194]  ? sysfs_warn_dup+0xa0/0xa0
[  375.072559][ T4194]  ? kthread+0x42e/0x520
[  375.076882][ T4194]  ? do_raw_spin_unlock+0x11d/0x230
[  375.082165][ T4194]  kobject_add_internal+0x5ba/0xcd0
[  375.087462][ T4194]  kobject_add+0x160/0x230
[  375.091903][ T4194]  ? kobject_init+0x1c0/0x1c0
[  375.096603][ T4194]  ? __raw_spin_lock_init+0x41/0x100
[  375.101980][ T4194]  ? klist_children_get+0x50/0x50
[  375.107083][ T4194]  ? get_device_parent+0x121/0x3e0
[  375.112202][ T4194]  device_add+0x470/0x1050
[  375.116626][ T4194]  ? device_initialize+0x2a5/0x4d0
[  375.121751][ T4194]  hci_conn_add_sysfs+0xd1/0x1e0
[  375.126800][ T4194]  le_conn_complete_evt+0xc2e/0x14d0
[  375.132112][ T4194]  ? cs_le_create_conn+0x5e0/0x5e0
[  375.137240][ T4194]  ? __mutex_trylock_common+0x15c/0x260
[  375.142866][ T4194]  hci_le_meta_evt+0x285/0x3ca0
[  375.147729][ T4194]  ? hci_event_packet+0x363/0x1310
[  375.153061][ T4194]  ? __lock_acquire+0x7b50/0x7b50
[  375.158102][ T4194]  ? hci_remote_host_features_evt+0x240/0x240
[  375.164182][ T4194]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  375.170009][ T4194]  ? mark_lock+0x94/0x320
[  375.174353][ T4194]  ? mutex_unlock+0x10/0x10
[  375.178872][ T4194]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  375.184868][ T4194]  ? lock_chain_count+0x20/0x20
[  375.189732][ T4194]  ? __rwlock_init+0x140/0x140
[  375.194508][ T4194]  hci_event_packet+0xe0b/0x1310
[  375.199461][ T4194]  ? _raw_spin_unlock+0x40/0x40
[  375.204318][ T4194]  ? rcu_lock_release+0x20/0x20
[  375.209227][ T4194]  ? hci_send_to_monitor+0x9c/0x4a0
[  375.214445][ T4194]  hci_rx_work+0x255/0xa10
[  375.218880][ T4194]  process_one_work+0x867/0xff0
[  375.223836][ T4194]  ? worker_detach_from_pool+0x240/0x240
[  375.229472][ T4194]  ? lockdep_hardirqs_off+0x70/0x100
[  375.234798][ T4194]  ? _raw_spin_lock_irq+0xb7/0xf0
[  375.239829][ T4194]  ? _raw_spin_lock_irqsave+0x100/0x100
[  375.245380][ T4194]  ? wq_worker_running+0x97/0x170
[  375.250444][ T4194]  worker_thread+0xad7/0x12a0
[  375.255159][ T4194]  kthread+0x42e/0x520
[  375.259232][ T4194]  ? rcu_lock_release+0x20/0x20
[  375.264088][ T4194]  ? kthread_blkcg+0xd0/0xd0
[  375.268681][ T4194]  ret_from_fork+0x1f/0x30
[  375.273149][ T4194]  </TASK>
[  375.281921][ T4194] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  375.295749][ T4194] Bluetooth: hci2: failed to register connection device
[  376.145298][ T7567] xt_CT: You must specify a L4 protocol and not use inversions on it
[  376.164270][ T7567] loop2: detected capacity change from 0 to 1024
[  376.205592][ T7566] netlink: 'syz.3.814': attribute type 2 has an invalid length.
[  376.244504][ T7567] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  376.361386][ T7581] binder: 7576:7581 ioctl c0306201 0 returned -14
[  378.540702][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  378.547561][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  379.780461][ T7625] loop4: detected capacity change from 0 to 512
[  380.059424][ T7647] 9pnet: Insufficient options for proto=fd
[  383.266042][ T4234] Bluetooth: hci2: command 0x0406 tx timeout
[  384.454722][ T7687] device syzkaller0 entered promiscuous mode
[  386.806035][ T7700] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  386.812600][ T7700] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  386.821025][ T7700] vhci_hcd vhci_hcd.0: Device attached
[  386.828010][ T7701] vhci_hcd: connection closed
[  386.828842][ T4303] vhci_hcd: stop threads
[  386.861595][ T4303] vhci_hcd: release socket
[  386.866057][ T4303] vhci_hcd: disconnect device
[  388.126517][ T7721] loop1: detected capacity change from 0 to 512
[  391.265824][ T7756] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  391.289885][ T7756] cramfs: wrong magic
[  393.864428][ T7776] loop1: detected capacity change from 0 to 736
[  395.058137][ T7792] loop4: detected capacity change from 0 to 512
[  398.896486][   T26] kauditd_printk_skb: 12 callbacks suppressed
[  398.896587][   T26] audit: type=1326 audit(1785514555.465:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.1.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  399.126730][   T26] audit: type=1326 audit(1785514555.465:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.1.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  399.171186][   T26] audit: type=1326 audit(1785514555.465:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.1.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  399.196024][   T26] audit: type=1326 audit(1785514555.465:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.1.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  399.223354][   T26] audit: type=1326 audit(1785514555.465:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.1.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  399.247664][   T26] audit: type=1326 audit(1785514555.465:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.1.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  399.560064][   T26] audit: type=1326 audit(1785514555.465:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.1.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  399.590799][   T26] audit: type=1326 audit(1785514555.465:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.1.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  399.666931][ T7840] loop3: detected capacity change from 0 to 128
[  400.217139][   T26] audit: type=1326 audit(1785514555.465:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.1.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  400.239706][ T7843] loop1: detected capacity change from 0 to 512
[  400.253531][ T7840] FAT-fs (loop3): Directory bread(block 414) failed
[  400.260278][ T7840] FAT-fs (loop3): Directory bread(block 415) failed
[  400.267019][ T7840] FAT-fs (loop3): Directory bread(block 416) failed
[  400.273797][ T7840] FAT-fs (loop3): Directory bread(block 417) failed
[  400.280519][ T7840] FAT-fs (loop3): Directory bread(block 418) failed
[  400.287208][ T7840] FAT-fs (loop3): Directory bread(block 419) failed
[  400.293853][ T7840] FAT-fs (loop3): Directory bread(block 420) failed
[  400.300558][ T7840] FAT-fs (loop3): Directory bread(block 421) failed
[  400.342552][   T26] audit: type=1326 audit(1785514555.465:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.1.876" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef94d019 code=0x7ffc0000
[  400.446802][ T7843] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.884: invalid indirect mapped block 256 (level 2)
[  400.471050][ T7843] EXT4-fs (loop1): 2 truncates cleaned up
[  400.485101][ T7843] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  401.229672][ T7842] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.884: bg 0: block 5: invalid block bitmap
[  401.297558][ T7842] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  401.311270][ T7842] EXT4-fs (loop1): This should not happen!! Data will be lost
[  401.311270][ T7842] 
[  401.321089][ T7842] EXT4-fs (loop1): Total free blocks count 0
[  401.327187][ T7842] EXT4-fs (loop1): Free/Dirty block details
[  401.333220][ T7842] EXT4-fs (loop1): free_blocks=0
[  401.338328][ T7842] EXT4-fs (loop1): dirty_blocks=32
[  401.343525][ T7842] EXT4-fs (loop1): Block reservation details
[  401.349623][ T7842] EXT4-fs (loop1): i_reserved_data_blocks=32
[  404.227397][ T7876] binder: BINDER_SET_CONTEXT_MGR already set
[  404.379576][ T7876] binder: 7871:7876 ioctl 4018620d 200000004a80 returned -16
[  411.040645][ T7936] loop4: detected capacity change from 0 to 40427
[  411.112138][ T7936] F2FS-fs (loop4): invalid crc value
[  411.161713][ T7936] F2FS-fs (loop4): Found nat_bits in checkpoint
[  411.214689][ T7936] F2FS-fs (loop4): Start checkpoint disabled!
[  411.443161][ T7936] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  411.498617][ T7942] xt_CT: You must specify a L4 protocol and not use inversions on it
[  412.505226][ T7952] netlink: 'syz.4.910': attribute type 1 has an invalid length.
[  413.939357][ T4349] attempt to access beyond end of device
[  413.939357][ T4349] loop4: rw=2049, want=40976, limit=40427
[  415.892872][ T7989] loop1: detected capacity change from 0 to 128
[  416.465232][ T7989] FAT-fs (loop1): Directory bread(block 414) failed
[  416.471945][ T7989] FAT-fs (loop1): Directory bread(block 415) failed
[  416.478634][ T7989] FAT-fs (loop1): Directory bread(block 416) failed
[  416.485282][ T7989] FAT-fs (loop1): Directory bread(block 417) failed
[  416.491956][ T7989] FAT-fs (loop1): Directory bread(block 418) failed
[  416.498581][ T7989] FAT-fs (loop1): Directory bread(block 419) failed
[  416.505332][ T7989] FAT-fs (loop1): Directory bread(block 420) failed
[  416.511971][ T7989] FAT-fs (loop1): Directory bread(block 421) failed
[  424.496905][  T263] block nbd0: Attempted send on invalid socket
[  424.503160][  T263] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  425.803525][ T8108] fuse: Unknown parameter 'rootmode
'
[  425.837755][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  425.838212][   T26] audit: type=1326 audit(1785514582.585:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  426.440784][   T26] audit: type=1326 audit(1785514582.585:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  427.334070][   T26] audit: type=1326 audit(1785514582.585:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  427.374541][   T26] audit: type=1326 audit(1785514582.585:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  427.396526][ T8134] device syzkaller0 entered promiscuous mode
[  427.433750][   T26] audit: type=1326 audit(1785514582.585:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  427.457695][    C0] vkms_vblank_simulate: vblank timer overrun
[  428.281243][   T26] audit: type=1326 audit(1785514582.585:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  428.311709][   T26] audit: type=1326 audit(1785514582.585:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  428.335836][    C0] vkms_vblank_simulate: vblank timer overrun
[  428.356268][   T26] audit: type=1326 audit(1785514582.585:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  428.437779][ T8142] loop4: detected capacity change from 0 to 512
[  429.523122][   T26] audit: type=1326 audit(1785514582.585:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  430.019876][   T26] audit: type=1326 audit(1785514582.585:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  430.808262][ T8166] UBIFS error (pid: 8166): cannot open "", error -22
[  432.158192][ T8187] loop3: detected capacity change from 0 to 736
[  433.981927][ T8203] device syzkaller0 entered promiscuous mode
[  434.143420][ T8206] loop4: detected capacity change from 0 to 512
[  439.055357][ T8254] loop2: detected capacity change from 0 to 256
[  439.107963][ T8254] FAT-fs (loop2): "posix" option is obsolete, not supported now
[  439.976719][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  439.986919][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  440.506317][ T8267] loop4: detected capacity change from 0 to 512
[  441.108003][ T8279] loop3: detected capacity change from 0 to 40427
[  441.163543][ T8279] F2FS-fs (loop3): invalid crc value
[  441.171352][ T8283] loop2: detected capacity change from 0 to 128
[  441.188175][ T8279] F2FS-fs (loop3): Found nat_bits in checkpoint
[  441.283318][ T8283] FAT-fs (loop2): Directory bread(block 414) failed
[  441.302289][ T8279] F2FS-fs (loop3): Start checkpoint disabled!
[  441.314614][ T8283] FAT-fs (loop2): Directory bread(block 415) failed
[  441.336938][ T8283] FAT-fs (loop2): Directory bread(block 416) failed
[  441.344270][ T8283] FAT-fs (loop2): Directory bread(block 417) failed
[  441.351244][ T8279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  441.407510][ T8283] FAT-fs (loop2): Directory bread(block 418) failed
[  441.414563][ T8283] FAT-fs (loop2): Directory bread(block 419) failed
[  441.466228][ T8283] FAT-fs (loop2): Directory bread(block 420) failed
[  441.531207][ T8283] FAT-fs (loop2): Directory bread(block 421) failed
[  441.740169][ T8287] netlink: 'syz.3.998': attribute type 1 has an invalid length.
[  442.257829][  T144] attempt to access beyond end of device
[  442.257829][  T144] loop3: rw=2049, want=40976, limit=40427
[  443.536570][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1014'.
[  444.325152][ T8330] binder: BINDER_SET_CONTEXT_MGR already set
[  444.344200][ T8330] binder: 8328:8330 ioctl 4018620d 200000004a80 returned -16
[  445.216510][ T8339] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  445.223081][ T8339] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  445.231356][ T8339] vhci_hcd vhci_hcd.0: Device attached
[  445.581538][ T8340] vhci_hcd: connection closed
[  445.582126][  T144] vhci_hcd: stop threads
[  445.596078][ T4265] usb 38-1: SetAddress Request (2) to port 0
[  445.617312][ T4265] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  445.634154][  T144] vhci_hcd: release socket
[  445.699342][  T144] vhci_hcd: disconnect device
[  446.190468][ T8348] device syzkaller0 entered promiscuous mode
[  449.502504][ T8371] loop2: detected capacity change from 0 to 512
[  450.103608][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1020'.
[  450.937552][ T4265] usb 38-1: device descriptor read/8, error -110
[  451.407032][ T4265] usb usb38-port1: Cannot enable. Maybe the USB cable is bad?
[  451.961366][ T4265] usb usb38-port1: attempt power cycle
[  452.011321][ T8407] binder: BINDER_SET_CONTEXT_MGR already set
[  452.047991][ T8407] binder: 8403:8407 ioctl 4018620d 200000001000 returned -16
[  452.460036][ T4265] usb usb38-port1: Cannot enable. Maybe the USB cable is bad?
[  452.596836][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  452.596850][   T26] audit: type=1326 audit(1785514609.615:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  452.904377][   T26] audit: type=1326 audit(1785514609.615:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  452.983125][ T4265] usb usb38-port1: Cannot enable. Maybe the USB cable is bad?
[  452.990876][ T4265] usb usb38-port1: unable to enumerate USB device
[  453.036933][   T26] audit: type=1326 audit(1785514609.625:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  454.915673][   T26] audit: type=1326 audit(1785514609.625:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  456.515954][   T26] audit: type=1326 audit(1785514609.625:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  456.540201][   T26] audit: type=1326 audit(1785514609.625:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  456.641050][   T26] audit: type=1326 audit(1785514609.625:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  456.715258][ T8441] device syzkaller0 entered promiscuous mode
[  456.788706][   T26] audit: type=1326 audit(1785514609.625:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  457.502510][   T26] audit: type=1326 audit(1785514609.625:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  457.541924][   T26] audit: type=1326 audit(1785514609.625:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.4.1026" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  459.709884][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  459.709901][   T26] audit: type=1326 audit(1785514616.525:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.1043" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  459.787264][   T26] audit: type=1326 audit(1785514616.525:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.1043" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  459.843210][   T26] audit: type=1326 audit(1785514616.525:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.1043" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  459.935996][   T26] audit: type=1326 audit(1785514616.535:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.1043" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  460.147504][   T26] audit: type=1326 audit(1785514616.535:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.1043" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  460.404994][   T26] audit: type=1326 audit(1785514616.535:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.1043" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  460.665135][   T26] audit: type=1326 audit(1785514616.535:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.1043" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  460.879787][   T26] audit: type=1326 audit(1785514616.535:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.1043" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  460.904855][   T26] audit: type=1326 audit(1785514616.545:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.1043" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  461.304592][ T8502] block device autoloading is deprecated and will be removed.
[  461.495878][ T8504] device syzkaller0 entered promiscuous mode
[  461.566078][   T26] audit: type=1326 audit(1785514616.545:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.1043" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685cfc9019 code=0x7ffc0000
[  463.124406][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  463.131891][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  463.156978][ T8512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  463.879788][ T8538] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  463.895282][ T8538] ±ÿ: renamed from team_slave_1
[  466.785764][ T8560] device syzkaller0 entered promiscuous mode
[  472.023836][ T8610] netlink: 'syz.2.1076': attribute type 5 has an invalid length.
[  472.073244][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  472.081333][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  473.076031][ T8610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  476.084039][ T8635] device syzkaller0 entered promiscuous mode
[  479.404076][ T8664] device syzkaller0 entered promiscuous mode
[  479.833838][ T8673] loop4: detected capacity change from 0 to 128
[  479.906621][ T8673] FAT-fs (loop4): Directory bread(block 414) failed
[  479.913644][ T8673] FAT-fs (loop4): Directory bread(block 415) failed
[  479.921016][ T8673] FAT-fs (loop4): Directory bread(block 416) failed
[  479.927887][ T8673] FAT-fs (loop4): Directory bread(block 417) failed
[  479.934718][ T8673] FAT-fs (loop4): Directory bread(block 418) failed
[  479.941607][ T8673] FAT-fs (loop4): Directory bread(block 419) failed
[  479.949007][ T8673] FAT-fs (loop4): Directory bread(block 420) failed
[  479.955993][ T8673] FAT-fs (loop4): Directory bread(block 421) failed
[  480.705829][ T8687] syz.4.1097 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  481.376290][ T8689] device syzkaller0 entered promiscuous mode
[  482.644700][ T8709] loop4: detected capacity change from 0 to 128
[  483.165959][ T8709] FAT-fs (loop4): Directory bread(block 414) failed
[  483.172632][ T8709] FAT-fs (loop4): Directory bread(block 415) failed
[  483.179289][ T8709] FAT-fs (loop4): Directory bread(block 416) failed
[  483.185913][ T8709] FAT-fs (loop4): Directory bread(block 417) failed
[  483.192576][ T8709] FAT-fs (loop4): Directory bread(block 418) failed
[  483.199236][ T8709] FAT-fs (loop4): Directory bread(block 419) failed
[  483.205850][ T8709] FAT-fs (loop4): Directory bread(block 420) failed
[  483.212505][ T8709] FAT-fs (loop4): Directory bread(block 421) failed
[  483.916759][ T8727] input: syz0 as /devices/virtual/input/input8
[  484.546022][ T8738] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  484.552579][ T8738] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  484.561467][ T8738] vhci_hcd vhci_hcd.0: Device attached
[  484.906421][ T8739] vhci_hcd: connection closed
[  484.907339][ T4349] vhci_hcd: stop threads
[  484.947102][ T4232] usb 36-1: SetAddress Request (2) to port 0
[  484.962851][ T4232] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  484.985205][ T4349] vhci_hcd: release socket
[  485.055555][ T4349] vhci_hcd: disconnect device
[  486.084088][ T8751] loop4: detected capacity change from 0 to 128
[  486.118285][ T8748] device syzkaller0 entered promiscuous mode
[  486.168578][ T8751] FAT-fs (loop4): Directory bread(block 414) failed
[  486.175247][ T8751] FAT-fs (loop4): Directory bread(block 415) failed
[  486.182071][ T8751] FAT-fs (loop4): Directory bread(block 416) failed
[  486.188937][ T8751] FAT-fs (loop4): Directory bread(block 417) failed
[  486.195533][ T8751] FAT-fs (loop4): Directory bread(block 418) failed
[  486.202161][ T8751] FAT-fs (loop4): Directory bread(block 419) failed
[  486.208851][ T8751] FAT-fs (loop4): Directory bread(block 420) failed
[  486.215440][ T8751] FAT-fs (loop4): Directory bread(block 421) failed
[  487.425928][ T8765] fuse: Unknown parameter 'rootmode
'
[  488.783750][ T8781] input: syz1 as /devices/virtual/input/input9
[  489.558935][ T8792] loop1: detected capacity change from 0 to 128
[  490.198867][ T4232] usb 36-1: device descriptor read/8, error -110
[  490.287690][ T8792] FAT-fs (loop1): Directory bread(block 414) failed
[  490.294379][ T8792] FAT-fs (loop1): Directory bread(block 415) failed
[  490.301094][ T8792] FAT-fs (loop1): Directory bread(block 416) failed
[  490.307764][ T8792] FAT-fs (loop1): Directory bread(block 417) failed
[  490.314384][ T8792] FAT-fs (loop1): Directory bread(block 418) failed
[  490.321082][ T8792] FAT-fs (loop1): Directory bread(block 419) failed
[  490.327742][ T8792] FAT-fs (loop1): Directory bread(block 420) failed
[  490.334372][ T8792] FAT-fs (loop1): Directory bread(block 421) failed
[  490.637036][ T4232] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  490.659701][ T4232] usb usb36-port1: attempt power cycle
[  490.711898][ T4194] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  490.724055][ T4194] CPU: 0 PID: 4194 Comm: kworker/u5:2 Not tainted syzkaller #0
[  490.731640][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  490.741710][ T4194] Workqueue: hci1 hci_rx_work
[  490.746421][ T4194] Call Trace:
[  490.749799][ T4194]  <TASK>
[  490.752825][ T4194]  dump_stack_lvl+0x188/0x250
[  490.757609][ T4194]  ? show_regs_print_info+0x20/0x20
[  490.762821][ T4194]  ? load_image+0x410/0x410
[  490.767343][ T4194]  sysfs_create_dir_ns+0x26a/0x290
[  490.772462][ T4194]  ? sysfs_warn_dup+0xa0/0xa0
[  490.777139][ T4194]  ? kthread+0x42e/0x520
[  490.781420][ T4194]  ? do_raw_spin_unlock+0x11d/0x230
[  490.786629][ T4194]  kobject_add_internal+0x5ba/0xcd0
[  490.791842][ T4194]  kobject_add+0x160/0x230
[  490.796271][ T4194]  ? kobject_init+0x1c0/0x1c0
[  490.800961][ T4194]  ? __raw_spin_lock_init+0x41/0x100
[  490.806246][ T4194]  ? klist_children_get+0x50/0x50
[  490.811275][ T4194]  ? get_device_parent+0x121/0x3e0
[  490.816398][ T4194]  device_add+0x470/0x1050
[  490.820820][ T4194]  ? device_initialize+0x2a5/0x4d0
[  490.825938][ T4194]  hci_conn_add_sysfs+0xd1/0x1e0
[  490.830884][ T4194]  le_conn_complete_evt+0xc2e/0x14d0
[  490.836188][ T4194]  ? cs_le_create_conn+0x5e0/0x5e0
[  490.841310][ T4194]  ? __mutex_trylock_common+0x15c/0x260
[  490.846869][ T4194]  hci_le_meta_evt+0x285/0x3ca0
[  490.851826][ T4194]  ? hci_event_packet+0x363/0x1310
[  490.856946][ T4194]  ? __lock_acquire+0x7b50/0x7b50
[  490.862007][ T4194]  ? hci_remote_host_features_evt+0x240/0x240
[  490.868095][ T4194]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  490.873743][ T4194]  ? mark_lock+0x94/0x320
[  490.878090][ T4194]  ? mutex_unlock+0x10/0x10
[  490.882615][ T4194]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  490.888787][ T4194]  ? lock_chain_count+0x20/0x20
[  490.893655][ T4194]  ? __rwlock_init+0x140/0x140
[  490.898421][ T4194]  hci_event_packet+0xe0b/0x1310
[  490.903384][ T4194]  ? _raw_spin_unlock+0x40/0x40
[  490.908222][ T4194]  ? rcu_lock_release+0x20/0x20
[  490.913072][ T4194]  ? hci_send_to_monitor+0x9c/0x4a0
[  490.918257][ T4194]  hci_rx_work+0x255/0xa10
[  490.922669][ T4194]  process_one_work+0x867/0xff0
[  490.927520][ T4194]  ? worker_detach_from_pool+0x240/0x240
[  490.933136][ T4194]  ? lockdep_hardirqs_off+0x70/0x100
[  490.938413][ T4194]  ? _raw_spin_lock_irq+0xb7/0xf0
[  490.943425][ T4194]  ? _raw_spin_lock_irqsave+0x100/0x100
[  490.948955][ T4194]  ? wq_worker_running+0x97/0x170
[  490.953976][ T4194]  worker_thread+0xad7/0x12a0
[  490.958662][ T4194]  kthread+0x42e/0x520
[  490.962718][ T4194]  ? rcu_lock_release+0x20/0x20
[  490.967558][ T4194]  ? kthread_blkcg+0xd0/0xd0
[  490.972139][ T4194]  ret_from_fork+0x1f/0x30
[  490.976556][ T4194]  </TASK>
[  491.014246][ T4194] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  491.029902][ T4194] Bluetooth: hci1: failed to register connection device
[  491.064300][ T8811] netlink: 'syz.2.1117': attribute type 2 has an invalid length.
[  491.275157][ T4232] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  491.390665][ T8818] loop3: detected capacity change from 0 to 128
[  492.107365][ T8818] FAT-fs (loop3): Directory bread(block 414) failed
[  492.114182][ T8818] FAT-fs (loop3): Directory bread(block 415) failed
[  492.121034][ T8818] FAT-fs (loop3): Directory bread(block 416) failed
[  492.128365][ T8818] FAT-fs (loop3): Directory bread(block 417) failed
[  492.135103][ T8818] FAT-fs (loop3): Directory bread(block 418) failed
[  492.141935][ T8818] FAT-fs (loop3): Directory bread(block 419) failed
[  492.148663][ T8818] FAT-fs (loop3): Directory bread(block 420) failed
[  492.156240][ T8818] FAT-fs (loop3): Directory bread(block 421) failed
[  492.306635][ T8826] overlayfs: failed to clone upperpath
[  492.960753][ T8827] loop1: detected capacity change from 0 to 64
[  492.978876][ T4232] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  492.987258][ T4232] usb usb36-port1: unable to enumerate USB device
[  493.640005][ T8829] input: syz0 as /devices/virtual/input/input10
[  494.828565][ T8851] loop4: detected capacity change from 0 to 512
[  494.862332][ T8854] binder: 8849:8854 ioctl c0306201 0 returned -14
[  494.882299][ T8853] loop1: detected capacity change from 0 to 256
[  494.985784][ T8853] FAT-fs (loop1): Directory bread(block 64) failed
[  494.998486][ T8851] EXT4-fs error (device loop4): ext4_fill_super:4872: inode #2: comm syz.4.1134: inode has both inline data and extents flags
[  495.037268][ T8853] FAT-fs (loop1): Directory bread(block 65) failed
[  495.043980][ T8851] EXT4-fs (loop4): get root inode failed
[  495.057829][ T8851] EXT4-fs (loop4): mount failed
[  495.072068][ T8853] FAT-fs (loop1): Directory bread(block 66) failed
[  495.102584][ T8853] FAT-fs (loop1): Directory bread(block 67) failed
[  495.111904][ T8853] FAT-fs (loop1): Directory bread(block 68) failed
[  495.118952][ T8853] FAT-fs (loop1): Directory bread(block 69) failed
[  495.125750][ T8853] FAT-fs (loop1): Directory bread(block 70) failed
[  495.133421][ T8853] FAT-fs (loop1): Directory bread(block 71) failed
[  495.144014][ T8853] FAT-fs (loop1): Directory bread(block 72) failed
[  495.150719][ T8853] FAT-fs (loop1): Directory bread(block 73) failed
[  495.306407][ T8851] fuse: Unknown parameter '0x0000000000000005'
[  497.058981][ T8885] device bridge1 entered promiscuous mode
[  497.075390][ T8885] team0: Port device bridge1 added
[  498.471539][ T8900] 9pnet: Insufficient options for proto=fd
[  498.696988][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  498.707284][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:7 Not tainted syzkaller #0
[  498.714833][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  498.724890][ T4202] Workqueue: hci3 hci_rx_work
[  498.729571][ T4202] Call Trace:
[  498.732839][ T4202]  <TASK>
[  498.735762][ T4202]  dump_stack_lvl+0x188/0x250
[  498.740450][ T4202]  ? show_regs_print_info+0x20/0x20
[  498.745675][ T4202]  ? load_image+0x410/0x410
[  498.750199][ T4202]  sysfs_create_dir_ns+0x26a/0x290
[  498.755313][ T4202]  ? sysfs_warn_dup+0xa0/0xa0
[  498.759978][ T4202]  ? kthread+0x42e/0x520
[  498.764214][ T4202]  ? do_raw_spin_unlock+0x11d/0x230
[  498.769403][ T4202]  kobject_add_internal+0x5ba/0xcd0
[  498.774591][ T4202]  kobject_add+0x160/0x230
[  498.778996][ T4202]  ? kobject_init+0x1c0/0x1c0
[  498.783670][ T4202]  ? __raw_spin_lock_init+0x41/0x100
[  498.788957][ T4202]  ? klist_children_get+0x50/0x50
[  498.793974][ T4202]  ? get_device_parent+0x121/0x3e0
[  498.799072][ T4202]  device_add+0x470/0x1050
[  498.803479][ T4202]  ? device_initialize+0x2a5/0x4d0
[  498.808578][ T4202]  hci_conn_add_sysfs+0xd1/0x1e0
[  498.813504][ T4202]  le_conn_complete_evt+0xc2e/0x14d0
[  498.818785][ T4202]  ? cs_le_create_conn+0x5e0/0x5e0
[  498.823887][ T4202]  ? __mutex_trylock_common+0x15c/0x260
[  498.829424][ T4202]  hci_le_meta_evt+0x285/0x3ca0
[  498.834264][ T4202]  ? hci_event_packet+0x363/0x1310
[  498.839389][ T4202]  ? __lock_acquire+0x7b50/0x7b50
[  498.844474][ T4202]  ? hci_remote_host_features_evt+0x240/0x240
[  498.850701][ T4202]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  498.856343][ T4202]  ? mark_lock+0x94/0x320
[  498.860688][ T4202]  ? mutex_unlock+0x10/0x10
[  498.865214][ T4202]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  498.871294][ T4202]  ? lock_chain_count+0x20/0x20
[  498.876135][ T4202]  ? __rwlock_init+0x140/0x140
[  498.880902][ T4202]  hci_event_packet+0xe0b/0x1310
[  498.885840][ T4202]  ? _raw_spin_unlock+0x40/0x40
[  498.890683][ T4202]  ? rcu_lock_release+0x20/0x20
[  498.895553][ T4202]  ? hci_send_to_monitor+0x9c/0x4a0
[  498.900746][ T4202]  hci_rx_work+0x255/0xa10
[  498.905170][ T4202]  process_one_work+0x867/0xff0
[  498.910211][ T4202]  ? worker_detach_from_pool+0x240/0x240
[  498.915834][ T4202]  ? lockdep_hardirqs_off+0x70/0x100
[  498.921121][ T4202]  ? _raw_spin_lock_irq+0xb7/0xf0
[  498.926161][ T4202]  ? _raw_spin_lock_irqsave+0x100/0x100
[  498.931700][ T4202]  ? wq_worker_running+0x97/0x170
[  498.936766][ T4202]  worker_thread+0xad7/0x12a0
[  498.941486][ T4202]  kthread+0x42e/0x520
[  498.945564][ T4202]  ? rcu_lock_release+0x20/0x20
[  498.950411][ T4202]  ? kthread_blkcg+0xd0/0xd0
[  498.954990][ T4202]  ret_from_fork+0x1f/0x30
[  498.959405][ T4202]  </TASK>
[  498.962454][    C0] vkms_vblank_simulate: vblank timer overrun
[  498.992132][ T5225] Bluetooth: hci1: command 0x0406 tx timeout
[  498.997023][ T4202] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  499.012205][ T4202] Bluetooth: hci3: failed to register connection device
[  499.145442][ T8904] netlink: 'syz.4.1143': attribute type 2 has an invalid length.
[  499.361863][ T8915] binder: 8914:8915 ioctl c0306201 0 returned -14
[  500.460569][ T8925] loop4: detected capacity change from 0 to 256
[  501.398448][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  501.404791][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  502.041060][ T8925] FAT-fs (loop4): Directory bread(block 64) failed
[  502.086533][ T8925] FAT-fs (loop4): Directory bread(block 65) failed
[  502.094121][ T8925] FAT-fs (loop4): Directory bread(block 66) failed
[  502.101441][ T8925] FAT-fs (loop4): Directory bread(block 67) failed
[  502.108655][ T8925] FAT-fs (loop4): Directory bread(block 68) failed
[  502.115384][ T8925] FAT-fs (loop4): Directory bread(block 69) failed
[  502.122555][ T8925] FAT-fs (loop4): Directory bread(block 70) failed
[  502.129553][ T8925] FAT-fs (loop4): Directory bread(block 71) failed
[  502.140506][ T8925] FAT-fs (loop4): Directory bread(block 72) failed
[  502.154832][ T8925] FAT-fs (loop4): Directory bread(block 73) failed
[  503.429842][ T8962] overlayfs: failed to clone upperpath
[  504.861369][ T8977] binder: 8976:8977 ioctl c0306201 0 returned -14
[  505.490043][ T4234] Bluetooth: hci3: command 0x0406 tx timeout
[  510.222512][ T9022] loop1: detected capacity change from 0 to 16
[  510.232110][ T8809] Bluetooth: hci4: hcon ffff88801b1fc000 sent 1 < count 257
[  510.453089][ T9022] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 36
[  511.068614][ T9028] loop1: detected capacity change from 0 to 512
[  511.975239][ T4303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.146549][ T4303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.263456][ T4303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.359968][ T4303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.612767][ T9033] chnl_net:caif_netlink_parms(): no params data found
[  512.699183][ T4303] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.887839][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.930656][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.944780][ T9033] device bridge_slave_0 entered promiscuous mode
[  512.971876][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.003053][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.030284][ T9033] device bridge_slave_1 entered promiscuous mode
[  513.046192][ T9053] loop4: detected capacity change from 0 to 512
[  513.085826][ T4303] tipc: Left network mode
[  513.089312][ T9033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  513.114800][ T9033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.205938][ T9033] team0: Port device team_slave_0 added
[  514.281961][ T9033] team0: Port device team_slave_1 added
[  514.313736][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.324391][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.367300][ T4265] Bluetooth: hci0: command 0x0409 tx timeout
[  514.379260][ T9033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.393526][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.413956][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.444029][ T9033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.531627][ T9033] device hsr_slave_0 entered promiscuous mode
[  514.539111][ T9033] device hsr_slave_1 entered promiscuous mode
[  514.546154][ T9033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  514.554764][ T9033] Cannot create hsr debugfs directory
[  514.792971][ T9033] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  514.809553][ T9033] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  514.856942][ T9033] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  514.877476][ T9033] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  514.972150][ T9033] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.062014][ T9033] 8021q: adding VLAN 0 to HW filter on device team0
[  515.102923][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  515.111941][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  515.166010][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  515.180513][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  515.189249][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.196355][ T5758] bridge0: port 1(bridge_slave_0) entered forwarding state
[  515.204200][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  515.213132][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  515.223961][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.231061][ T5758] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.239381][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  515.248189][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  515.259159][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  515.288583][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  515.301638][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  515.344074][ T9033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  515.355377][ T9033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  515.368618][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  515.378003][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  515.388558][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  515.398666][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  515.408240][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  515.420818][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  515.429858][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  515.442680][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  515.495329][ T4303] device hsr_slave_0 left promiscuous mode
[  515.503752][ T4303] device hsr_slave_1 left promiscuous mode
[  515.539035][ T4303] device veth1_macvtap left promiscuous mode
[  515.545878][ T4303] device veth0_macvtap left promiscuous mode
[  515.556685][ T4303] device veth1_vlan left promiscuous mode
[  515.563997][ T4303] device veth0_vlan left promiscuous mode
[  515.664484][ T4303] bond1 (unregistering): Released all slaves
[  515.792094][ T4303] bond0 (unregistering): Released all slaves
[  515.916419][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  515.932120][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  515.945502][ T9033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.151401][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  516.161674][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  516.185852][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  516.195894][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  516.217659][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  516.226079][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  516.239613][ T9033] device veth0_vlan entered promiscuous mode
[  516.293149][ T9033] device veth1_vlan entered promiscuous mode
[  516.322927][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  516.335014][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  516.344066][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  516.356279][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  516.367642][ T9033] device veth0_macvtap entered promiscuous mode
[  516.409080][ T9033] device veth1_macvtap entered promiscuous mode
[  516.436186][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.443563][ T1108] Bluetooth: hci0: command 0x041b tx timeout
[  516.453593][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.465029][ T9033] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.474663][ T9033] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.483882][ T9033] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.493640][ T9033] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.504515][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  516.517930][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  516.538321][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  516.570954][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  516.583229][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  516.596289][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  516.679396][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.694707][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.730957][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  516.751933][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.763024][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.787109][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  518.516968][ T1108] Bluetooth: hci0: command 0x040f tx timeout
[  518.722649][ T9163] overlayfs: failed to clone upperpath
[  519.494470][ T9162] loop3: detected capacity change from 0 to 4096
[  520.701431][ T9162] ntfs3: Unknown parameter '
Ÿ6ä‡SËvj'
[  520.889708][ T4237] Bluetooth: hci0: command 0x0419 tx timeout
[  526.107000][ T9216] loop3: detected capacity change from 0 to 128
[  526.481552][ T9222] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9222]
[  526.514645][ T9222] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1203'.
[  526.525905][ T9222] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1203'.
[  526.712930][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'.
[  527.037660][ T9230] loop4: detected capacity change from 0 to 512
[  527.091812][ T9230] EXT4-fs (loop4): Ignoring removed nobh option
[  527.108153][ T9230] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  527.317213][ T9240] loop1: detected capacity change from 0 to 4096
[  528.707963][ T9240] ntfs3: Unknown parameter '
Ÿ6ä‡SËvj'
[  529.801396][ T9230] EXT4-fs (loop4): 1 truncate cleaned up
[  529.807439][ T9230] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  530.526034][ T9258] loop3: detected capacity change from 0 to 128
[  531.036600][ T9258] FAT-fs (loop3): Directory bread(block 414) failed
[  531.043784][ T9258] FAT-fs (loop3): Directory bread(block 415) failed
[  531.050557][ T9258] FAT-fs (loop3): Directory bread(block 416) failed
[  531.057357][ T9258] FAT-fs (loop3): Directory bread(block 417) failed
[  531.064098][ T9258] FAT-fs (loop3): Directory bread(block 418) failed
[  531.071484][ T9258] FAT-fs (loop3): Directory bread(block 419) failed
[  531.078302][ T9258] FAT-fs (loop3): Directory bread(block 420) failed
[  531.085027][ T9258] FAT-fs (loop3): Directory bread(block 421) failed
[  534.501562][ T9282] loop1: detected capacity change from 0 to 128
[  534.846531][ T9293] trusted_key: encrypted_key: key user:syz not found
[  536.108202][ T9312] loop2: detected capacity change from 0 to 512
[  538.793383][ T9338] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  538.870856][ T9335] loop2: detected capacity change from 0 to 32768
[  539.162792][ T9335] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  540.040996][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  540.041014][   T26] audit: type=1800 audit(1785514696.755:132): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1228" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  542.211038][ T4187] ocfs2: Unmounting device (7,2) on (node local)
[  544.295874][ T9387] loop1: detected capacity change from 0 to 512
[  544.496292][ T9378] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  544.562041][ T9403] comedi comedi0: 8255: I/O port conflict (0x5,4)
[  544.569377][ T9403] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  544.577425][ T9403] comedi comedi0: 8255: I/O port conflict (0x5,4)
[  544.585810][ T9403] comedi comedi0: 8255: I/O port conflict (0x4,4)
[  544.592677][ T9403] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4)
[  544.602474][ T9403] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4)
[  544.610656][ T9403] comedi comedi0: 8255: I/O port conflict (0x2,4)
[  544.624033][ T9403] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  544.632154][ T9403] comedi comedi0: 8255: I/O port conflict (0xc3,4)
[  544.639113][ T9403] comedi comedi0: 8255: I/O port conflict (0x1000007,4)
[  544.646408][ T9403] comedi comedi0: 8255: I/O port conflict (0x1,4)
[  544.653190][ T9403] comedi comedi0: 8255: I/O port conflict (0x10003,4)
[  544.660690][ T9403] comedi comedi0: 8255: I/O port conflict (0x801000,4)
[  544.667937][ T9403] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4)
[  544.675412][ T9403] comedi comedi0: 8255: I/O port conflict (0x3ff,4)
[  544.682352][ T9403] comedi comedi0: 8255: I/O port conflict (0x1001010,4)
[  544.689667][ T9403] comedi comedi0: 8255: I/O port conflict (0x1ff,4)
[  544.697351][ T9403] comedi comedi0: 8255: I/O port conflict (0x8,4)
[  544.704080][ T9403] comedi comedi0: 8255: I/O port conflict (0x3,4)
[  544.710733][ T9403] comedi comedi0: 8255: I/O port conflict (0x8001,4)
[  544.717724][ T9403] comedi comedi0: 8255: I/O port conflict (0x7,4)
[  544.724886][ T9403] comedi comedi0: 8255: I/O port conflict (0x3ff,4)
[  544.731867][ T9403] comedi comedi0: 8255: I/O port conflict (0x5,4)
[  544.738653][ T9403] comedi comedi0: 8255: I/O port conflict (0x6,4)
[  544.745362][ T9403] comedi comedi0: 8255: I/O port conflict (0x3,4)
[  544.752092][ T9403] comedi comedi0: 8255: I/O port conflict (0xfffd,4)
[  546.801112][ T9424] loop1: detected capacity change from 0 to 128
[  546.849752][ T9424] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  547.023391][ T8833] udevd[8833]: incorrect ext4 checksum on /dev/loop1
[  547.465243][ T8809] Bluetooth: hci3: hcon ffff88805913a000 sent 1 < count 257
[  547.530475][ T9432] loop4: detected capacity change from 0 to 16
[  547.548045][ T9434] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  548.051478][ T8438] udevd[8438]: incorrect ext4 checksum on /dev/loop1
[  548.083539][ T9432] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36
[  549.658983][ T9456] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  552.967204][ T9489] loop1: detected capacity change from 0 to 512
[  553.125433][   T26] audit: type=1326 audit(1785514710.175:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  553.167791][   T26] audit: type=1326 audit(1785514710.175:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  553.192170][   T26] audit: type=1326 audit(1785514710.215:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  554.421937][   T26] audit: type=1326 audit(1785514710.215:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  554.470304][   T26] audit: type=1326 audit(1785514710.215:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  554.495143][   T26] audit: type=1326 audit(1785514710.225:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  555.583040][   T26] audit: type=1326 audit(1785514710.225:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  555.613851][ T9518] loop4: detected capacity change from 0 to 128
[  555.774256][ T9518] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  555.965078][   T26] audit: type=1326 audit(1785514710.225:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  556.243859][   T26] audit: type=1326 audit(1785514710.225:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  556.268530][   T26] audit: type=1326 audit(1785514710.225:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9498 comm="syz.4.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ccd4e019 code=0x7ffc0000
[  560.944978][ T9569] loop3: detected capacity change from 0 to 512
[  562.839292][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  562.845640][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  564.667135][ T9600] loop3: detected capacity change from 0 to 128
[  565.440591][ T9600] FAT-fs (loop3): Directory bread(block 414) failed
[  565.447657][ T9600] FAT-fs (loop3): Directory bread(block 415) failed
[  565.454386][ T9600] FAT-fs (loop3): Directory bread(block 416) failed
[  565.461266][ T9600] FAT-fs (loop3): Directory bread(block 417) failed
[  565.467920][ T9600] FAT-fs (loop3): Directory bread(block 418) failed
[  565.474568][ T9600] FAT-fs (loop3): Directory bread(block 419) failed
[  565.481282][ T9600] FAT-fs (loop3): Directory bread(block 420) failed
[  565.488191][ T9600] FAT-fs (loop3): Directory bread(block 421) failed
[  569.592617][ T9645] loop1: detected capacity change from 0 to 512
[  572.065684][ T9688] loop3: detected capacity change from 0 to 128
[  572.757759][ T9688] FAT-fs (loop3): Directory bread(block 414) failed
[  572.764512][ T9688] FAT-fs (loop3): Directory bread(block 415) failed
[  572.771388][ T9688] FAT-fs (loop3): Directory bread(block 416) failed
[  572.778298][ T9688] FAT-fs (loop3): Directory bread(block 417) failed
[  572.785407][ T9688] FAT-fs (loop3): Directory bread(block 418) failed
[  572.792175][ T9688] FAT-fs (loop3): Directory bread(block 419) failed
[  572.798988][ T9688] FAT-fs (loop3): Directory bread(block 420) failed
[  572.805650][ T9688] FAT-fs (loop3): Directory bread(block 421) failed
[  572.885953][ T9694] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  576.402174][ T9718] loop3: detected capacity change from 0 to 512
[  576.557771][ T9716] loop4: detected capacity change from 0 to 32768
[  577.881460][ T9716] XFS (loop4): Mounting V5 Filesystem
[  579.360392][ T9716] XFS (loop4): AIL initialisation failed: error -12
[  579.549870][ T9716] XFS (loop4): log mount failed
[  580.476175][ T9753] loop1: detected capacity change from 0 to 32768
[  580.692980][ T9753] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  581.766798][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  581.766817][   T26] audit: type=1800 audit(1785514738.815:154): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1310" name="file1" dev="loop1" ino=17059 res=0 errno=0
[  582.103287][ T4195] ocfs2: Unmounting device (7,1) on (node local)
[  583.347819][ T9794] loop4: detected capacity change from 0 to 512
[  583.471624][ T9794] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback.
[  583.485932][ T9794] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.997641][ T9839] loop4: detected capacity change from 0 to 1764
[  588.791286][ T9839] iso9660: Corrupted directory entry in block 14 of inode 1920
[  592.219335][ T9868] loop5: detected capacity change from 0 to 2048
[  592.489081][ T9868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  592.508371][ T9876] loop1: detected capacity change from 0 to 64
[  592.798624][ T9884] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  594.617154][ T9894] loop5: detected capacity change from 0 to 128
[  595.154809][ T9894] FAT-fs (loop5): Directory bread(block 414) failed
[  595.161546][ T9894] FAT-fs (loop5): Directory bread(block 415) failed
[  595.168221][ T9894] FAT-fs (loop5): Directory bread(block 416) failed
[  595.174853][ T9894] FAT-fs (loop5): Directory bread(block 417) failed
[  595.181524][ T9894] FAT-fs (loop5): Directory bread(block 418) failed
[  595.188209][ T9894] FAT-fs (loop5): Directory bread(block 419) failed
[  595.194831][ T9894] FAT-fs (loop5): Directory bread(block 420) failed
[  595.201541][ T9894] FAT-fs (loop5): Directory bread(block 421) failed
[  595.247389][ T9884] VFS: Can't find a romfs filesystem on dev nullb0.
[  595.247389][ T9884] 
[  599.798225][ T9959] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  606.280756][T10042] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  606.361044][T10041] loop3: detected capacity change from 0 to 1764
[  606.449746][T10041] iso9660: Corrupted directory entry in block 14 of inode 1920
[  610.302612][T10061] loop4: detected capacity change from 0 to 512
[  614.566055][T10131] ALSA: mixer_oss: invalid OSS volume ''
[  615.717540][T10136] loop5: detected capacity change from 0 to 512
[  615.953650][T10147] loop4: detected capacity change from 0 to 256
[  616.634661][T10149] loop1: detected capacity change from 0 to 1024
[  618.069677][T10155] loop5: detected capacity change from 0 to 512
[  618.117037][T10149] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  618.122765][T10147] FAT-fs (loop4): Directory bread(block 64) failed
[  618.135662][T10149] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #32: comm syz.1.1391: iget: special inode unallocated
[  618.148828][T10147] FAT-fs (loop4): Directory bread(block 65) failed
[  618.160052][T10149] EXT4-fs (loop1): no journal found
[  618.165489][T10149] EXT4-fs (loop1): can't get journal size
[  618.172798][T10147] FAT-fs (loop4): Directory bread(block 66) failed
[  618.297065][T10147] FAT-fs (loop4): Directory bread(block 67) failed
[  618.303807][T10147] FAT-fs (loop4): Directory bread(block 68) failed
[  618.320928][T10147] FAT-fs (loop4): Directory bread(block 69) failed
[  618.328601][T10147] FAT-fs (loop4): Directory bread(block 70) failed
[  618.335450][T10147] FAT-fs (loop4): Directory bread(block 71) failed
[  618.342177][T10147] FAT-fs (loop4): Directory bread(block 72) failed
[  618.349373][T10147] FAT-fs (loop4): Directory bread(block 73) failed
[  618.365514][T10149] EXT4-fs (loop1): filesystem is read-only
[  618.371525][T10149] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none.
[  619.434699][T10170] attempt to access beyond end of device
[  619.434699][T10170] loop4: rw=524288, want=1772, limit=256
[  619.448563][T10170] attempt to access beyond end of device
[  619.448563][T10170] loop4: rw=0, want=1772, limit=256
[  619.627217][   T26] audit: type=1800 audit(1785514776.525:155): pid=10170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1390" name="file1" dev="loop4" ino=1048672 res=0 errno=0
[  622.674418][T10222] loop1: detected capacity change from 0 to 128
[  623.041365][T10222] FAT-fs (loop1): bogus number of FAT structure
[  623.073268][T10222] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  623.204184][T10222] FAT-fs (loop1): Can't find a valid FAT filesystem
[  624.280594][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  624.287042][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  626.462228][T10253] loop4: detected capacity change from 0 to 512
[  631.049177][T10330] loop3: detected capacity change from 0 to 512
[  631.302559][T10340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1428'.
[  632.566284][T10347] device syzkaller0 entered promiscuous mode
[  633.698333][T10372] binder: 10371:10372 ioctl 4018620d 0 returned -22
[  638.530180][T10423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1445'.
[  640.440968][T10436] binder: 10435:10436 ioctl 4018620d 0 returned -22
[  640.754064][T10446] loop5: detected capacity change from 0 to 128
[  640.918541][T10448] overlayfs: missing 'lowerdir'
[  659.181452][T10647] loop5: detected capacity change from 0 to 512
[  660.029943][T10654] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—�¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 10654 comm: syz.1.1497)
[  660.046752][T10654] tmpfs: Bad value for 'mpol'
[  671.222988][T10778] loop3: detected capacity change from 0 to 128
[  672.663595][T10786] loop5: detected capacity change from 0 to 32768
[  672.910937][T10786] XFS (loop5): Mounting V5 Filesystem
[  673.767482][T10786] XFS (loop5): Ending clean mount
[  673.782059][T10786] XFS (loop5): Quotacheck needed: Please wait.
[  673.924054][T10786] XFS (loop5): Quotacheck: Done.
[  674.113412][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'.
[  674.138315][T10812] device erspan1 entered promiscuous mode
[  674.680099][ T9033] XFS (loop5): Unmounting Filesystem
[  675.883438][T10851] loop3: detected capacity change from 0 to 128
[  679.362630][T10883] device syzkaller0 entered promiscuous mode
[  679.458424][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1545'.
[  679.484680][T10886] device erspan1 entered promiscuous mode
[  681.687925][T10909] device syzkaller0 entered promiscuous mode
[  682.413880][T10917] loop3: detected capacity change from 0 to 128
[  682.803290][T10927] overlayfs: bad mount option "redirect_dir=on\"
[  683.928245][T10936] device syzkaller0 entered promiscuous mode
[  683.947039][T10937] loop5: detected capacity change from 0 to 512
[  684.507623][T10927] IPv6: addrconf: prefix option has invalid lifetime
[  685.312704][T10958] loop5: detected capacity change from 0 to 128
[  685.339647][T10958] FAT-fs (loop5): Directory bread(block 414) failed
[  685.346581][T10958] FAT-fs (loop5): Directory bread(block 415) failed
[  685.353470][T10958] FAT-fs (loop5): Directory bread(block 416) failed
[  685.360661][T10958] FAT-fs (loop5): Directory bread(block 417) failed
[  685.367616][T10958] FAT-fs (loop5): Directory bread(block 418) failed
[  685.374378][T10958] FAT-fs (loop5): Directory bread(block 419) failed
[  685.381147][T10958] FAT-fs (loop5): Directory bread(block 420) failed
[  685.387917][T10958] FAT-fs (loop5): Directory bread(block 421) failed
[  685.649341][T10962] device syzkaller0 entered promiscuous mode
[  685.767277][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  688.422767][T11000] device wlan0 entered promiscuous mode
[  688.546523][T11010] device syzkaller0 entered promiscuous mode
[  690.267441][T11039] device syzkaller0 entered promiscuous mode
[  691.324719][T11050] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—�¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 11050 comm: syz.2.1583)
[  691.339269][T11050] tmpfs: Bad value for 'mpol'
[  694.314107][T11095] device syzkaller0 entered promiscuous mode
[  698.759685][T11146] tmpfs: Unknown parameter ''
[  698.847691][T11159] device syzkaller0 entered promiscuous mode
[  702.432891][T11199] fuse: Unknown parameter '0xffffffffffffffff'
[  703.798464][T11190] sctp: failed to load transform for md5: -2
[  703.857835][T11231] device syzkaller0 entered promiscuous mode
[  707.558287][T11260] loop3: detected capacity change from 0 to 128
[  707.857091][T11264] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  711.302942][T11324] overlayfs: bad mount option "redirect_dir=on\"
[  711.390071][T11325] IPv6: addrconf: prefix option has invalid lifetime
[  713.404737][T11354] binder: 11353:11354 ioctl c0306201 0 returned -14
[  713.509529][T11355] device syzkaller0 entered promiscuous mode
[  717.889412][T11416] loop3: detected capacity change from 0 to 512
[  719.557530][T11447] overlayfs: failed to clone upperpath
[  720.565363][ T1108] Bluetooth: hci4: command 0x0405 tx timeout
[  720.633819][T11456] loop3: detected capacity change from 0 to 512
[  720.657794][T11459] device syzkaller0 entered promiscuous mode
[  721.090482][T11466] device wlan0 entered promiscuous mode
[  725.068383][T11509] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  725.782731][T11509] VFS: Can't find a romfs filesystem on dev nullb0.
[  725.782731][T11509] 
[  725.906532][T11515] device syzkaller0 entered promiscuous mode
[  726.027355][T11520] device syzkaller0 entered promiscuous mode
[  730.434659][T11577] device syzkaller0 entered promiscuous mode
[  731.674510][T11596] loop3: detected capacity change from 0 to 512
[  731.694036][T11601] loop5: detected capacity change from 0 to 256
[  734.728860][T11637] device syzkaller0 entered promiscuous mode
[  736.582529][T11648] device syzkaller0 entered promiscuous mode
[  738.231591][T11660] loop3: detected capacity change from 0 to 512
[  742.443545][T11703] device syzkaller0 entered promiscuous mode
[  743.591232][T11716] device syzkaller0 entered promiscuous mode
[  747.640855][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  749.031369][T11765] device syzkaller0 entered promiscuous mode
[  749.058912][T11773] loop3: detected capacity change from 0 to 512
[  751.193333][T11800] device wlan0 entered promiscuous mode
[  753.966920][T11839] loop3: detected capacity change from 0 to 512
[  756.676514][T11879] loop5: detected capacity change from 0 to 512
[  763.521222][T11963] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1784'.
[  763.593700][T11952] netlink: zone id is out of range
[  763.599134][T11952] netlink: zone id is out of range
[  763.604514][T11952] netlink: zone id is out of range
[  763.717175][T11952] netlink: zone id is out of range
[  763.724177][T11952] netlink: zone id is out of range
[  763.737974][T11952] netlink: zone id is out of range
[  763.746213][T11952] netlink: zone id is out of range
[  763.756875][T11952] netlink: zone id is out of range
[  763.832089][T11952] netlink: zone id is out of range
[  763.842577][T11952] netlink: zone id is out of range
[  765.060620][T11984] overlayfs: failed to resolve './file1/file0': -2
[  765.304809][T11993] loop5: detected capacity change from 0 to 512
[  766.357353][T12014] program syz.2.1796 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  767.325203][T12014] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  772.984550][T12090] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1813'.
[  773.134348][T12096] loop5: detected capacity change from 0 to 512
[  775.281180][T12129] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  775.324666][T12129] IPVS: Error connecting to the multicast addr
[  778.600783][T12173] program syz.5.1833 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  778.657773][T12173] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  783.661720][T12215] program syz.1.1845 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  783.722096][T12215] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  789.263723][T12275] netlink: 'syz.1.1858': attribute type 4 has an invalid length.
[  791.076790][   T26] audit: type=1326 audit(1785514948.115:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8888596019 code=0x7ffc0000
[  791.626824][   T26] audit: type=1326 audit(1785514948.115:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8888596019 code=0x7ffc0000
[  792.243638][   T26] audit: type=1326 audit(1785514948.115:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8888596019 code=0x7ffc0000
[  792.555406][   T26] audit: type=1326 audit(1785514948.115:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8888596019 code=0x7ffc0000
[  792.579912][   T26] audit: type=1326 audit(1785514948.115:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8888596019 code=0x7ffc0000
[  792.617420][   T26] audit: type=1326 audit(1785514948.115:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8888596019 code=0x7ffc0000
[  794.877823][   T26] audit: type=1326 audit(1785514948.115:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8888596019 code=0x7ffc0000
[  794.903056][   T26] audit: type=1326 audit(1785514948.115:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8888596019 code=0x7ffc0000
[  794.929098][   T26] audit: type=1326 audit(1785514948.115:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8888596019 code=0x7ffc0000
[  794.956761][   T26] audit: type=1326 audit(1785514948.115:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1863" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8888596019 code=0x7ffc0000
[  795.964551][T12333] loop5: detected capacity change from 0 to 512
[  803.189420][T12400] device bridge1 entered promiscuous mode
[  804.041177][T12403] loop5: detected capacity change from 0 to 512
[  804.076510][T12403] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  805.101724][T12403] EXT4-fs (loop5): 1 truncate cleaned up
[  805.107482][T12403] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[  805.606866][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  805.606881][   T26] audit: type=1800 audit(1785514962.655:180): pid=12426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1890" name="file1" dev="loop5" ino=15 res=0 errno=0
[  808.883822][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  809.540541][T12471] block nbd5: NBD_DISCONNECT
[  814.130358][T12512] x_tables: duplicate underflow at hook 1
[  814.456362][T12514] IPVS: set_ctl: invalid protocol: 115 172.20.20.39:20002
[  824.690444][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'.
[  827.485497][T12627] befs: (nullb0): invalid magic header
[  827.799212][T12646] hub 8-0:1.0: USB hub found
[  827.805183][T12646] hub 8-0:1.0: 1 port detected
[  829.773903][T12656] IPVS: set_ctl: invalid protocol: 115 172.20.20.39:20002
[  847.669489][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'.
[  847.678726][T12819] netlink: 'syz.2.1984': attribute type 10 has an invalid length.
[  847.686802][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1984'.
[  847.699108][T12819] device geneve2 entered promiscuous mode
[  852.804138][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1996'.
[  856.676712][ T4424] Bluetooth: hci4: command 0x0405 tx timeout
[  868.384715][T13048] device syzkaller0 entered promiscuous mode
[  868.950859][T13065] device syzkaller0 entered promiscuous mode
[  870.040081][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  881.791483][T13221] device syzkaller0 entered promiscuous mode
[  885.051039][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'.
[  885.060304][T13247] netlink: 'syz.3.2086': attribute type 10 has an invalid length.
[  885.068320][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2086'.
[  885.080527][T13247] device geneve2 entered promiscuous mode
[  888.821358][T13302] 9pnet: Insufficient options for proto=fd
[  899.466270][T13433] tipc: Started in network mode
[  899.471493][T13433] tipc: Node identity 4, cluster identity 4711
[  899.478124][T13433] tipc: Node number set to 4
[  900.518898][T13445] using random self ethernet address
[  900.524368][T13445] using random host ethernet address
[  905.604245][T13492] device syzkaller0 entered promiscuous mode
[  905.628670][T13496] loop5: detected capacity change from 0 to 4096
[  908.487647][T13496] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  911.341196][T13556] loop5: detected capacity change from 0 to 256
[  911.986899][T13564] net_ratelimit: 68 callbacks suppressed
[  911.986987][T13564] sctp: failed to load transform for md5: -2
[  914.615327][T13556] FAT-fs (loop5): Directory bread(block 64) failed
[  914.625393][T13556] FAT-fs (loop5): Directory bread(block 65) failed
[  914.632746][T13556] FAT-fs (loop5): Directory bread(block 66) failed
[  914.642834][T13556] FAT-fs (loop5): Directory bread(block 67) failed
[  914.652033][T13556] FAT-fs (loop5): Directory bread(block 68) failed
[  915.363493][T13578] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001
[  915.377596][T13556] FAT-fs (loop5): Directory bread(block 69) failed
[  915.400497][T13578] netlink: 'syz.3.2161': attribute type 1 has an invalid length.
[  915.408296][T13578] netlink: 'syz.3.2161': attribute type 2 has an invalid length.
[  915.446304][T13556] FAT-fs (loop5): Directory bread(block 70) failed
[  915.453518][T13556] FAT-fs (loop5): Directory bread(block 71) failed
[  915.462596][T13556] FAT-fs (loop5): Directory bread(block 72) failed
[  915.469605][T13556] FAT-fs (loop5): Directory bread(block 73) failed
[  918.373457][T13643] loop5: detected capacity change from 0 to 4096
[  918.877898][T13649] input: syz1 as /devices/virtual/input/input49
[  919.948738][T13659] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2179'.
[  921.399384][T13666] input: syz1 as /devices/virtual/input/input50
[  921.405846][T13666] input: failed to attach handler leds to device input50, error: -6
[  921.687926][T13674] device syzkaller0 entered promiscuous mode
[  921.702230][T13643] EXT4-fs: error -4 creating inode table initialization thread
[  921.759032][T13643] EXT4-fs (loop5): mount failed
[  928.882031][T13763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  929.189288][T13763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  930.473760][T13788] loop5: detected capacity change from 0 to 128
[  932.585076][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  940.590926][T13867] loop5: detected capacity change from 0 to 512
[  955.961802][T14009] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001
[  955.979257][T14009] netlink: 'syz.2.2264': attribute type 1 has an invalid length.
[  955.987254][T14009] netlink: 'syz.2.2264': attribute type 2 has an invalid length.
[  957.437053][T14025] loop5: detected capacity change from 0 to 128
[  961.624136][T14058] loop5: detected capacity change from 0 to 512
[  962.868477][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'.
[  966.376801][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  967.881998][ T1108] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  968.873659][ T1108] usb 3-1: config 0 has no interface number 0
[  968.880003][ T1108] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  969.865163][ T1108] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  969.875234][ T1108] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  970.886828][ T1108] usb 3-1: string descriptor 0 read error: -71
[  970.894473][ T1108] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  970.904011][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  971.209083][ T1108] usb 3-1: config 0 descriptor??
[  971.226976][ T1108] usb 3-1: can't set config #0, error -71
[  971.244132][ T1108] usb 3-1: USB disconnect, device number 2
[  975.233998][T14214] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  976.156458][T14222] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  976.165025][T14222] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  976.173907][T14222] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  981.255942][T14287] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2328'.
[  986.620807][T14339] loop5: detected capacity change from 0 to 512
[  987.817364][T14353] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2343'.
[  992.931609][T14414] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead
[  992.942617][T14414] xt_CT: You must specify a L4 protocol and not use inversions on it
[  992.971950][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  993.501384][T14415] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  993.510453][T14415] overlayfs: missing 'lowerdir'
[ 1020.066997][T14661] futex_wake_op: syz.3.2418 tries to shift op by 144; fix this program
[ 1020.825456][T14674] device bridge1 entered promiscuous mode
[ 1020.859358][T14674] team0: Port device bridge1 added
[ 1026.356262][T14722] loop5: detected capacity change from 0 to 512
[ 1026.449458][T14726] futex_wake_op: syz.4.2432 tries to shift op by 144; fix this program
[ 1028.758908][T14746] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736
[ 1028.766076][T14746] PKCS7: Only support pkcs7_signedData type
[ 1036.651251][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2453'.
[ 1037.485134][   T26] audit: type=1800 audit(1785515706.533:181): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2455" name="SYSV798dd81c" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1041.195757][T14840] loop5: detected capacity change from 0 to 128
[ 1041.335964][T14840] FAT-fs (loop5): Directory bread(block 414) failed
[ 1041.343402][T14840] FAT-fs (loop5): Directory bread(block 415) failed
[ 1041.350251][T14840] FAT-fs (loop5): Directory bread(block 416) failed
[ 1041.357008][T14840] FAT-fs (loop5): Directory bread(block 417) failed
[ 1041.363723][T14840] FAT-fs (loop5): Directory bread(block 418) failed
[ 1041.370602][T14840] FAT-fs (loop5): Directory bread(block 419) failed
[ 1041.377342][T14840] FAT-fs (loop5): Directory bread(block 420) failed
[ 1041.385392][T14840] FAT-fs (loop5): Directory bread(block 421) failed
[ 1043.186199][T14865] device bridge2 entered promiscuous mode
[ 1043.286256][T14865] team0: Port device bridge2 added
[ 1044.962743][T14880] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551612)
[ 1045.836695][T14880] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[ 1046.367266][ T1340] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1047.566681][ T1340] usb 6-1: Using ep0 maxpacket: 16
[ 1048.556743][ T1340] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1049.196826][ T1340] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1049.593870][ T1340] usb 6-1: can't read configurations, error -71
[ 1054.382369][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.918778][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2496'.
[ 1055.951878][  T263] block nbd1: Attempted send on invalid socket
[ 1055.958668][  T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1056.255211][T15004] efs: cannot read volume header
[ 1056.340021][T15047] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1056.348917][T15047] overlayfs: missing 'lowerdir'
[ 1056.533217][T15049] device bridge2 entered promiscuous mode
[ 1056.540750][T15049] team0: Port device bridge2 added
[ 1060.319821][T15098] loop5: detected capacity change from 0 to 4096
[ 1062.403933][T15107] device syzkaller0 entered promiscuous mode
[ 1063.445631][T15098] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1063.880428][   T26] audit: type=1800 audit(1785515988.935:182): pid=15135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2531" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0
[ 1064.033232][T15143] device syzkaller0 entered promiscuous mode
[ 1065.049958][T15145] netlink: 'syz.4.2534': attribute type 3 has an invalid length.
[ 1068.551779][T15182] sctp: [Deprecated]: syz.1.2543 (pid 15182) Use of int in max_burst socket option deprecated.
[ 1068.551779][T15182] Use struct sctp_assoc_value instead
[ 1068.728662][T15194] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2543'.
[ 1071.846234][T15223] device syzkaller0 entered promiscuous mode
[ 1073.353028][T15246] device batadv_slave_0 entered promiscuous mode
[ 1073.368281][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2559'.
[ 1074.982866][T15255] loop5: detected capacity change from 0 to 4096
[ 1074.997663][T15272] device syzkaller0 entered promiscuous mode
[ 1076.502391][T15297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2571'.
[ 1076.548794][T15255] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1079.409503][T15330] device syzkaller0 entered promiscuous mode
[ 1080.715776][T15353] device bridge1 entered promiscuous mode
[ 1080.735122][T15353] team0: Port device bridge1 added
[ 1086.133672][T15428] device syzkaller0 entered promiscuous mode
[ 1086.919380][T15412] fuse: Bad value for 'fd'
[ 1090.822836][T15477] device syzkaller0 entered promiscuous mode
[ 1092.022244][T15497] fuse: Bad value for 'fd'
[ 1093.066258][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'.
[ 1093.082191][T15512] 9pnet_virtio: no channels available for device syz
[ 1094.993113][T15546] device bridge3 entered promiscuous mode
[ 1094.999927][T15546] team0: Port device bridge3 added
[ 1095.240290][   T26] audit: type=1800 audit(1785516020.295:183): pid=15551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2635" name="idVendor" dev="configfs" ino=65023 res=0 errno=0
[ 1095.270838][   T26] audit: type=1800 audit(1785516020.325:184): pid=15551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2635" name="serialnumber" dev="configfs" ino=66239 res=0 errno=0
[ 1095.448657][   T26] audit: type=1800 audit(1785516020.435:185): pid=15551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2635" name="manufacturer" dev="configfs" ino=65031 res=0 errno=0
[ 1095.469759][   T26] audit: type=1800 audit(1785516020.445:186): pid=15551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2635" name="product" dev="configfs" ino=65032 res=0 errno=0
[ 1098.183499][T15580] fuse: Bad value for 'fd'
[ 1100.398730][T15608] fuse: Bad value for 'fd'
[ 1100.790644][T15613] device batadv_slave_0 entered promiscuous mode
[ 1100.798173][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2644'.
[ 1100.807310][T15613] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1101.633364][T15613] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1104.648016][T15653] loop5: detected capacity change from 0 to 512
[ 1106.887825][T15677] fuse: Bad value for 'fd'
[ 1108.438628][T15692] fuse: Unknown parameter '0x0000000000000003'
[ 1109.497768][T15686] bond0 speed is unknown, defaulting to 1000
[ 1109.758621][T15686] bond0 speed is unknown, defaulting to 1000
[ 1109.800519][T15686] bond0 speed is unknown, defaulting to 1000
[ 1109.845904][T15686] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1109.888620][T15686] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1110.413250][T15714] sctp: [Deprecated]: syz.3.2675 (pid 15714) Use of int in max_burst socket option deprecated.
[ 1110.413250][T15714] Use struct sctp_assoc_value instead
[ 1110.834734][T15686] bond0 speed is unknown, defaulting to 1000
[ 1110.861672][T15723] binder: 15721:15723 ioctl c0306201 0 returned -14
[ 1112.168341][T15733] fuse: Bad value for 'fd'
[ 1112.174151][T15686] bond0 speed is unknown, defaulting to 1000
[ 1112.181406][T15686] bond0 speed is unknown, defaulting to 1000
[ 1112.201756][T15686] bond0 speed is unknown, defaulting to 1000
[ 1112.208591][T15686] bond0 speed is unknown, defaulting to 1000
[ 1114.188140][T15751] fuse: Unknown parameter '0x0000000000000003'
[ 1115.800182][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.241879][T15776] binder: 15775:15776 ioctl c0306201 0 returned -14
[ 1130.537544][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1130.730987][T15895] netlink: 'syz.2.2721': attribute type 29 has an invalid length.
[ 1130.757111][T15895] netlink: 'syz.2.2721': attribute type 29 has an invalid length.
[ 1130.784949][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2721'.
[ 1130.862606][T15895] netlink: 'syz.2.2721': attribute type 29 has an invalid length.
[ 1131.807906][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1133.693040][T15921] loop5: detected capacity change from 0 to 512
[ 1133.729813][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1135.007983][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1135.066951][ T5225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1135.648861][T15947] xt_check_target: 4 callbacks suppressed
[ 1135.648946][T15947] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1136.887469][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1136.897715][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1137.108941][T15949] hub 8-0:1.0: USB hub found
[ 1137.113674][T15949] hub 8-0:1.0: 1 port detected
[ 1137.477935][T15963] fuse: Bad value for 'fd'
[ 1138.136000][ T7994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1138.834759][T15975] 
[ 1138.837128][T15975] ======================================================
[ 1138.844133][T15975] WARNING: possible circular locking dependency detected
[ 1138.851134][T15975] syzkaller #0 Not tainted
[ 1138.855522][T15975] ------------------------------------------------------
[ 1138.862514][T15975] syz.3.2739/15975 is trying to acquire lock:
[ 1138.868550][T15975] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0
[ 1138.879815][T15975] 
[ 1138.879815][T15975] but task is already holding lock:
[ 1138.887154][T15975] ffff88805e2e73f0 (&sb->s_type->i_mutex_key#39){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0
[ 1138.897590][T15975] 
[ 1138.897590][T15975] which lock already depends on the new lock.
[ 1138.897590][T15975] 
[ 1138.907979][T15975] 
[ 1138.907979][T15975] the existing dependency chain (in reverse order) is:
[ 1138.916981][T15975] 
[ 1138.916981][T15975] -> #2 (&sb->s_type->i_mutex_key#39){++++}-{3:3}:
[ 1138.925663][T15975]        down_write+0x38/0x60
[ 1138.930322][T15975]        configfs_depend_item_unlocked+0x14f/0x430
[ 1138.936805][T15975]        usbg_make_tpg+0x1f3/0x580
[ 1138.941965][T15975]        target_fabric_make_tpg+0xa0/0x6d0
[ 1138.947917][T15975]        configfs_mkdir+0x511/0x9e0
[ 1138.953094][T15975]        vfs_mkdir+0x386/0x570
[ 1138.957863][T15975]        do_mkdirat+0x1dd/0x5c0
[ 1138.962696][T15975]        __x64_sys_mkdir+0x6a/0x80
[ 1138.967799][T15975]        do_syscall_64+0x4c/0xa0
[ 1138.972735][T15975]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1138.979131][T15975] 
[ 1138.979131][T15975] -> #1 (&opts->dep_lock){+.+.}-{3:3}:
[ 1138.986752][T15975]        __mutex_lock_common+0x1e5/0x2400
[ 1138.992467][T15975]        mutex_lock_nested+0x17/0x20
[ 1138.997747][T15975]        tcm_set_name+0x26/0x90
[ 1139.002572][T15975]        function_make+0x195/0x350
[ 1139.007711][T15975]        configfs_mkdir+0x511/0x9e0
[ 1139.012885][T15975]        vfs_mkdir+0x386/0x570
[ 1139.017622][T15975]        do_mkdirat+0x1dd/0x5c0
[ 1139.022447][T15975]        __x64_sys_mkdir+0x6a/0x80
[ 1139.027532][T15975]        do_syscall_64+0x4c/0xa0
[ 1139.032451][T15975]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1139.038850][T15975] 
[ 1139.038850][T15975] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[ 1139.047112][T15975]        __lock_acquire+0x2c66/0x7b50
[ 1139.052486][T15975]        lock_acquire+0x19e/0x400
[ 1139.057509][T15975]        __mutex_lock_common+0x1e5/0x2400
[ 1139.063230][T15975]        mutex_lock_nested+0x17/0x20
[ 1139.068515][T15975]        uvcg_streaming_header_allow_link+0x6d/0x4a0
[ 1139.075259][T15975]        configfs_symlink+0x5a4/0x13b0
[ 1139.080704][T15975]        vfs_symlink+0x245/0x3d0
[ 1139.085715][T15975]        do_symlinkat+0x1ab/0x6b0
[ 1139.090728][T15975]        __x64_sys_symlinkat+0x95/0xa0
[ 1139.096182][T15975]        do_syscall_64+0x4c/0xa0
[ 1139.101103][T15975]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1139.107495][T15975] 
[ 1139.107495][T15975] other info that might help us debug this:
[ 1139.107495][T15975] 
[ 1139.117695][T15975] Chain exists of:
[ 1139.117695][T15975]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#39
[ 1139.117695][T15975] 
[ 1139.132350][T15975]  Possible unsafe locking scenario:
[ 1139.132350][T15975] 
[ 1139.139777][T15975]        CPU0                    CPU1
[ 1139.145133][T15975]        ----                    ----
[ 1139.150471][T15975]   lock(&sb->s_type->i_mutex_key#39);
[ 1139.155907][T15975]                                lock(&opts->dep_lock);
[ 1139.162824][T15975]                                lock(&sb->s_type->i_mutex_key#39);
[ 1139.170778][T15975]   lock(gadget_subsys.su_mutex);
[ 1139.175789][T15975] 
[ 1139.175789][T15975]  *** DEADLOCK ***
[ 1139.175789][T15975] 
[ 1139.183921][T15975] 2 locks held by syz.3.2739/15975:
[ 1139.189089][T15975]  #0: ffff88814680c460 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[ 1139.198367][T15975]  #1: ffff88805e2e73f0 (&sb->s_type->i_mutex_key#39){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0
[ 1139.209209][T15975] 
[ 1139.209209][T15975] stack backtrace:
[ 1139.215069][T15975] CPU: 1 PID: 15975 Comm: syz.3.2739 Not tainted syzkaller #0
[ 1139.222500][T15975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1139.232532][T15975] Call Trace:
[ 1139.235799][T15975]  <TASK>
[ 1139.238704][T15975]  dump_stack_lvl+0x188/0x250
[ 1139.243375][T15975]  ? load_image+0x410/0x410
[ 1139.247855][T15975]  ? show_regs_print_info+0x20/0x20
[ 1139.253029][T15975]  ? print_circular_bug+0x12b/0x1a0
[ 1139.258258][T15975]  check_noncircular+0x296/0x330
[ 1139.263170][T15975]  ? add_chain_block+0x9b0/0x9b0
[ 1139.268080][T15975]  ? lockdep_lock+0xf1/0x1f0
[ 1139.272657][T15975]  ? mark_lock+0x94/0x320
[ 1139.276979][T15975]  ? _find_first_zero_bit+0xd1/0xf0
[ 1139.282215][T15975]  __lock_acquire+0x2c66/0x7b50
[ 1139.287045][T15975]  ? stack_trace_save+0xf0/0xf0
[ 1139.291910][T15975]  ? arch_stack_walk+0xf2/0x140
[ 1139.296796][T15975]  ? verify_lock_unused+0x140/0x140
[ 1139.301975][T15975]  ? kmem_cache_free+0x8f/0x210
[ 1139.306845][T15975]  ? stack_trace_save+0xa6/0xf0
[ 1139.311670][T15975]  ? mark_lock+0x94/0x320
[ 1139.315982][T15975]  lock_acquire+0x19e/0x400
[ 1139.320474][T15975]  ? uvcg_streaming_header_allow_link+0x6d/0x4a0
[ 1139.326794][T15975]  ? __might_sleep+0xf0/0xf0
[ 1139.331416][T15975]  ? read_lock_is_recursive+0x10/0x10
[ 1139.336862][T15975]  ? verify_lock_unused+0x140/0x140
[ 1139.342037][T15975]  __mutex_lock_common+0x1e5/0x2400
[ 1139.347227][T15975]  ? uvcg_streaming_header_allow_link+0x6d/0x4a0
[ 1139.353532][T15975]  ? lock_chain_count+0x20/0x20
[ 1139.358357][T15975]  ? uvcg_streaming_header_allow_link+0x6d/0x4a0
[ 1139.364683][T15975]  ? mutex_lock_io_nested+0x60/0x60
[ 1139.369858][T15975]  ? rwsem_write_trylock+0x135/0x1c0
[ 1139.375119][T15975]  ? clear_nonspinnable+0x60/0x60
[ 1139.380124][T15975]  mutex_lock_nested+0x17/0x20
[ 1139.384966][T15975]  uvcg_streaming_header_allow_link+0x6d/0x4a0
[ 1139.391120][T15975]  ? inode_permission+0xef/0x480
[ 1139.396050][T15975]  ? bpf_lsm_inode_permission+0x5/0x10
[ 1139.401555][T15975]  ? security_inode_permission+0xac/0xf0
[ 1139.407210][T15975]  configfs_symlink+0x5a4/0x13b0
[ 1139.412141][T15975]  ? end_current_label_crit_section+0x14b/0x170
[ 1139.418400][T15975]  ? common_perm+0x15d/0x1b0
[ 1139.422960][T15975]  ? from_kgid+0x14f/0x6a0
[ 1139.427393][T15975]  ? apparmor_path_symlink+0x1ac/0x230
[ 1139.432825][T15975]  ? lookup_one_qstr_excl+0x11c/0x240
[ 1139.438171][T15975]  ? detach_groups+0x370/0x370
[ 1139.442948][T15975]  ? inode_permission+0xef/0x480
[ 1139.447871][T15975]  ? bpf_lsm_inode_symlink+0x5/0x10
[ 1139.453056][T15975]  ? security_inode_symlink+0xb2/0x100
[ 1139.458493][T15975]  vfs_symlink+0x245/0x3d0
[ 1139.462886][T15975]  do_symlinkat+0x1ab/0x6b0
[ 1139.467365][T15975]  ? strncpy_from_user+0x1f4/0x350
[ 1139.472449][T15975]  ? vfs_symlink+0x3d0/0x3d0
[ 1139.477033][T15975]  __x64_sys_symlinkat+0x95/0xa0
[ 1139.481946][T15975]  do_syscall_64+0x4c/0xa0
[ 1139.486343][T15975]  ? clear_bhb_loop+0x30/0x80
[ 1139.491008][T15975]  ? clear_bhb_loop+0x30/0x80
[ 1139.495671][T15975]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1139.501546][T15975] RIP: 0033:0x7f685cfc9019
[ 1139.505938][T15975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1139.525596][T15975] RSP: 002b:00007f685b221028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 1139.534042][T15975] RAX: ffffffffffffffda RBX: 00007f685d250fa0 RCX: 00007f685cfc9019
[ 1139.541992][T15975] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500
[ 1139.549940][T15975] RBP: 00007f685d06000c R08: 0000000000000000 R09: 0000000000000000
[ 1139.557891][T15975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1139.565849][T15975] R13: 00007f685d251038 R14: 00007f685d250fa0 R15: 00007ffff5504658
[ 1139.573816][T15975]  </TASK>
[ 1140.760762][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1140.769363][  T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1141.156755][ T5225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1141.165229][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1141.173840][ T1340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1141.182439][ T5225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1142.677234][ T4389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1144.196749][ T5225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1145.797562][ T4389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1145.877894][ T4389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1147.236741][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1147.797103][ T4389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog