last executing test programs:

9m28.444480211s ago: executing program 32 (id=281):
openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)
dup3(r1, r0, 0x0)

9m22.146103959s ago: executing program 33 (id=302):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2004054, &(0x7f0000000e80)=ANY=[@ANYBLOB="6d6f64653d30303031303030303030303030303030303030303030372c6c6f6e6761642c6d6f64653d3030303030303030303030303331342c616e63686f723d30303030303030303030303030303030303030312c726f6f746469723d30303030303030303030303030303030303030362c6e6f7672732c7569643d666f726765742c73657373696f6e3d31383434b9a76fffd5086131b750f9f4363734343037333730393535313336302c6769643d69676e6f72652c616e63686f723d31383434363734343037333730393535313631352c2869643d69676e6f72652c756e686964652c756e686964652c757466382c66696c657365743d30303030303536323934393935333432343936322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030322c757466382c726f6f746469723d30303030303030303030303030303030303030312c646f6e745f6d6561737572652c7375626a5f747970653d000000002e2c736d61636b6673666c6f6f723d6c6f6e6761642c736d61636b66737472616e736d7574653d2c6673636f6e746578743d757365725f752c7365636c6162656c2c009d1c66070a60e10db491"], 0x1, 0xc43, &(0x7f0000000200)="$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")
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f00000001c0)='.\x02\x00', 0x800853, 0x0, 0x2, 0x0, &(0x7f0000001180))
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1cc)
socket$nl_netfilter(0x10, 0x3, 0xc)
memfd_create(0x0, 0x5)
execve(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50)
pwrite64(r3, &(0x7f0000000000), 0x0, 0x8)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)

9m21.592647143s ago: executing program 34 (id=306):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x100, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x24000000)

9m8.963655787s ago: executing program 35 (id=341):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, 0x0)
syz_io_uring_setup(0x4000f00, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)

9m6.144061744s ago: executing program 36 (id=346):
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xa, 0x2, 0x4, 0x8}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

8m53.094324455s ago: executing program 37 (id=396):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="0d8abf226fb911000000b8c5000000ba000000000f300fb55e0c439d0f0dcab805000000b90c0000000f01c1c4e1737c0c1744f73166460fc736f3440fc736", 0x3f}], 0x1, 0x11, 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb3104333a2b85aa6}, 0xc, 0x0}, 0x40)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8m43.522549446s ago: executing program 38 (id=435):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)

8m37.864811754s ago: executing program 39 (id=451):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

8m35.120356s ago: executing program 40 (id=458):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x19, 0x0}}, 0x10)

8m33.590748977s ago: executing program 41 (id=463):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC, @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x16, 0xc49, &(0x7f0000001cc0)="$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")
mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0)
unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = fanotify_init(0x40, 0x40000)
futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x31a8eb60}})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0xa880, 0x97)
fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0)
getdents64(r2, &(0x7f00000001c0)=""/163, 0xba974ed140df4995)
fcntl$dupfd(r0, 0x0, r0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000680)=""/183, 0xb7, 0x40000100, &(0x7f0000000b00)={0x11, 0x1b, 0x0, 0x1, 0x9}, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}}, 0x40084)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0bb18aa529178851000000080000000c00d5", @ANYRES32, @ANYBLOB='\x00'/10, @ANYBLOB='\x00'/14], 0x48)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_route_sched_retired(r5, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x703d2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0xfff1}, {0xffe0, 0xf}, {0xa, 0xffe6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)

8m22.559310965s ago: executing program 42 (id=470):
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000380)={0x20, 0x17, 0x7, "9aa4628ca9447e"}, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "21f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x9, 0x8, 0x7ff00001}]})
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m17.962498038s ago: executing program 43 (id=477):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x280440e, &(0x7f00000008c0)={[{@sysvgroups}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=")
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)

8m10.57114299s ago: executing program 44 (id=492):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffff, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x1, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x1, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0x9, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x5, '\x00', 0x6}, {0x9, 0x0, 0x1, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x46}]}})
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

7m52.277138724s ago: executing program 45 (id=545):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e)
socket(0x2, 0x2, 0x1)
preadv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}], 0x1, 0x90000dd, 0x9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = fsopen(0x0, 0x1)
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0)

7m51.436971379s ago: executing program 46 (id=549):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000007c0)={[{@errors_remount}, {@noload}, {@stripe}, {@journal_checksum}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x563, &(0x7f0000000840)="$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")

7m49.020859113s ago: executing program 47 (id=559):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x40090)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7m43.839314529s ago: executing program 48 (id=568):
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
utimensat(r0, 0x0, &(0x7f0000000240), 0x0)

7m29.445024305s ago: executing program 49 (id=574):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x97)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
unshare(0x22020600)
r1 = epoll_create1(0x0)
fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14)
bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f00004f2000/0x400000)=nil)

7m27.375869033s ago: executing program 50 (id=581):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x66, 0x2, 0x6, 0x1, 0x683, 0x3, 0x0, 'syz1\x00'})

7m25.296551952s ago: executing program 51 (id=588):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4)
sendto$packet(r0, &(0x7f0000000140), 0x0, 0x400c010, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0)
read(r0, &(0x7f0000001780)=""/4096, 0x1000)

7m21.879622216s ago: executing program 52 (id=595):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x4, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x400, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)

7m3.865353793s ago: executing program 53 (id=603):
syz_open_procfs(0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)={[{@barrier_val={'barrier', 0x3d, 0x8}}]}, 0x1, 0x4c7, &(0x7f0000008740)="$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")
r0 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4)
preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7)
renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)

6m55.849788059s ago: executing program 54 (id=633):
mremap(&(0x7f0000285000/0x3000)=nil, 0x3000, 0xd000, 0x7, &(0x7f0000105000/0xd000)=nil)

6m55.363384655s ago: executing program 55 (id=638):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x1, 0x0, 0x0)
ioprio_get$pid(0x2, r0)
sched_getscheduler(r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
keyctl$session_to_parent(0x12)

6m52.662402218s ago: executing program 56 (id=645):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setreuid(0xee01, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
ioprio_get$uid(0x3, 0xee01)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000c1, &(0x7f0000000040), 0x3, 0x573, &(0x7f0000000ac0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)
userfaultfd(0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4010800}, 0x4000000)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
lseek(r4, 0x7ffffffe, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x5, 0x7, 0x401})

6m40.97399897s ago: executing program 57 (id=651):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x20, 0x3, 0x10, "9185c7174c970f8ad3f7539a579871cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

6m32.590539289s ago: executing program 58 (id=659):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="000fe70000", 0x5}, {&(0x7f0000000080)="80feffff0000000000dfe52c1f51218206f5abfd2a000000000000000000000000b46d", 0x23}], 0x2}, 0x20004b88)

6m23.678533476s ago: executing program 59 (id=696):
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00815fcb6c17c68f239cbc53c40972fb43da14f217bd93e6ebfde5585f63f1c1d8473fe39327852107a2489fc75846dd58657945c3ce4bed7d1452c74577e678a02e6b62c48846f9fea8ff6fd7f9a819961a1a6e18917f75cf633eaefe0f029d5d4b697ca0de784bd4fd4ee47740fafc2d46c7aa1279d7172ac4ec4b9cbe890200000075117934859797825acb3e8e4a67ae59d5e366af500cea3eee7b6bf3bfe9c4ae7b0f7fb33d5f1f72070000000e72da1075d5b83f93f03711b9e9ae0621abdf15468f20abaff376fd6ddaa87651396da731adf6214f92888f896d3f3d60f5fb009d365da32dd89b8589c3a08956a8ff185ef14e956b950f801b511c6d876127757678102f7b8851a569c0f6bc340fe0dbc1b5b828d9401d0ea1e86a43ececf69580430a29ade4f88535749e90b4d3391e03934cae898a63dad6cacaf559a55ab4b7810337d89efda43d160065705aec490f6ba91096230e5d45f2e74ed77d83f616047a6c6bfad569119396123ec0b842342c7494412ed535df4dcb2d18873b2df25b5fe02a5b29da44b90b2d52726e6886ac84ed4d6d164fd23d9525b8898ad3031c496ccb69d0f06bc00c5b3f19269c81f34c480b5cedce8125337c5aa57ae15d525b9dcc4edce1327f2d3d3eda95cbcf1bd1b362b7b6de289c8380a70035aac04f2641fd37e02c0bde93087f0c42d287d33387b200f3976a9fba9dddeba00ba4b561b767cfc5c9bb1b1572055f052e2f7694e39e1fca3719374528800e"], 0x1, 0x1a4, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000001"], 0x0)

6m11.654085811s ago: executing program 5 (id=774):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x4800)
syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0xc58, &(0x7f00000000c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

6m11.36997274s ago: executing program 5 (id=777):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80)
socket$inet6(0xa, 0x80003, 0x6)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
write$nbd(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x100, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
close_range(r5, 0xffffffffffffffff, 0x0)

6m9.29177897s ago: executing program 3 (id=782):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

6m8.570318892s ago: executing program 5 (id=785):
syz_mount_image$ext4(&(0x7f0000000b40)='ext4\x00', &(0x7f0000000b80)='./file1\x00', 0x0, &(0x7f0000000240), 0x7, 0x610, &(0x7f0000000500)="$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")
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./bus/file0\x00', 0x2, 0xffffffff)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0)

6m8.557814525s ago: executing program 3 (id=786):
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0)
keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2, 0x2e}, 0xffffffffffffffff)

6m7.879707574s ago: executing program 3 (id=791):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@dmode={'dmode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@block={'block', 0x3d, 0xe00}}]}, 0x5, 0xa51, &(0x7f0000001240)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)

6m7.448805905s ago: executing program 60 (id=791):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@dmode={'dmode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@block={'block', 0x3d, 0xe00}}]}, 0x5, 0xa51, &(0x7f0000001240)="$eJzs3ctvXNd9B/DvHZISQ7u24qiuKzjiSK4UxmEpkqqlCl6kEjmSmPJRkBRgoYsojahCEFu3cQs4RoEoQNFVjBZo0UW7M7rqykA2TReFN0W7a1ZdFCj8LwRdqSsG986QHJIzHIrhy8rnQ8zMffzuOec+zj2cmTv3hC+WtVe3jK2tVY99jt/75yMoMSfYrenPP/n04/Lxw6c5lb68U/xLMpiknvQneSMZmJpeXJjrkdCT5EGSz5Iiyek0X/fkQYq/zsub45+l+Mcy365O7TVlelnjl9pxH38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHASFVPT4+MTxanMzN97r96U1HeYml5cKLK2tnPO+jJNP6l6/S5+0jPfpCgfGRxc7+r7jbObs19PUr+YN5tjb1YdkmcwH730+pl3v9JfW1++W2l+Iaf3nuwH3//oyXdWV1e+13FuURxgqU6Y5jFypzE/s7QwM3fzTqM+s7RQv3Ht2viVu7eX6rdnZhtL95eWG3P1qcXGzeWFxfrI1NfrEzduXK03xu4v3Ju/Mz0221ifeP03J8fHr9W/NfZ7jZuLSwvzV741tjR1d2Z2dmb+ThVTzi5jrpcH4u/OLNeXGzfn6vVHj1dXrm4rWV+2Hb9l0ESv9SmDJnsFTY5PTk5MTE5O/LDVe/bGhGvv3Hjn+vh4/3jTy2kNZEfEIR20nCxf6r6bD/4kDvtUa7b/yWxmMp97eS/1jn9Tmc5iFjLXZX7Levt/6Upj12zT1v63Wvn+tvnnyqeLOd8aHezS/ncpy9H9fZDv56M8yXeymtWs5HvHXqKj/buTRuYzk6UsZCZzuVlNqbem1HMj13It4/l27mY4S+nP7cxkNo0s5X6WspxGdURNZTGN3MxyFrKYekYyla+nnoncyI1cTT2NjOV+FnIv87mT6dysUnmUx9V2v7pLGTeCJvYSNLlL0I7GvFv7v2H7Io3t/5zwAqrtupcP4SwO+7PWav9P9Q4dmdoy2n94hQIAAAAO1K//Z145+9p//G9S5KvV9/K3Z2Yb48ddLAAAAOAAVZfrvVm+DJRDX03h/T8AAAC8aIrqN3ZFkqEMN4fWfwnlQwAAAAB4QVTf/59PMbw5wft/AAAAeMH0vsd+z4hidP32v/WHzdeHrYjmWDF0e2a2MTa1MPvuRC5XdxmofmmwI7W+pBiofn7wdi40oy4MNV+HNlMs8xwsoybG3p3I27nYWpGRt8qXt0Y6RE42I7/WjPxae2RftkReLSMB4EV3cZf2eK/t/9sZbUaMnqua/P5zW9rgvqplHdeyAsBJsdHHzv+3ujTr0P6fb94b4Hy39v+3dnn/X0a8lkfDzUsKxvLdvJ/VPMxoWlccDHdKdb03guZlCKM9Pg0Yal2y8NPrtYzu+DxgcGNd22NXMpnRjp8ItKVbrJfhajOu77D2AgAcrYu7tsPr7X/1IXnX9n909/f/bW2uSwoB4CTY6MH+eQeG9x583OsIAGyllQYAAAAAAAAAAAAAAAAAAAAAAAAAAICDt6cb+P/X5WR1dSXZb2cBHQZ++u//+itdY370UjL4PCXcfaCWAynz6SQHsu6HN9CX5Lhy/2aee6lyH5+UTfciDRRPqwr7C6VzzCcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjkSR9HWaXktOJxlPcuXoS3V4nh53AQ5KfX+LFc/yLB/mlYMuDgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL7vW/f9rab6+1JyU/lpyKcmDJL9/3GV8HoM95j87onKcPH9UPbfd/7+WDGStSH/W1tbWkmJganpxYa48FIrT5fzPP/n04/LRNckfrA/s7FWhTKDMYUvnEq0c2qYMbF3qy9VSQ9MrHzz5s/f/pD59qzowby3fnp2eu7P4O5uBrxc/bnaB0N4Nwnp5/+LSv/1N2+RTrcx/nP5uK7I939tVvtM78/21Tkt3yXcPHq+uTJY5LTfeW/7zP661z3otF5K3RpKRrTn9YfnoktOF7dtzq+JnxV8Vr+Tv86Da/+XWKNaKche9Wq3/lx49Xl0Z++77qw83yvSDxx+2JXAmw0kebq1lPco0XJ1POnqpynWgzHW8CiqfzvZIb1dtKU5sbtct6/Dl6pAZeq51qHdfh0qP7d4q0dXtJVorK8nf/ulXcnnXPX26Q4qXe+TYUfGz4n+Ku/nv/GVb/x+1cv9fSsfa2SGJKrLtSGmft6V61S5trvlk+4xvb0+za63kEPwof5Df3tj/ter8315vJrvUm43z0TfbJnapN+tVq0u9OL21pu6oFy296sXOmvpPr+5oUbbmmrPbWqTW2afbMq1ynm1GdSnnr+YbSf+55zqjfKPHGaXX8vut//9QjOT/8lT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMlXJH2dpteSS0nOJHm1HK8na9tjnu4jv9pQsZ9iHpj9lPmLp+i6osWzPMuHeeWoSwQAAAAAAADA4bg1/fknn35cPqrv4/vyG7XWnHrSn+RM8XcDU9OLC3M9EhpIHqx/pT/YOaTL5Dwon17eHP+sHHujR37He/kAAHyh/TwAAP//FnluMg==")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)

6m7.438154928s ago: executing program 5 (id=794):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

6m6.726837356s ago: executing program 61 (id=795):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
getdents64(r2, 0xfffffffffffffffe, 0x29)

6m6.71291637s ago: executing program 5 (id=797):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x101002, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x80503d0a, &(0x7f0000000a80)={0x896c, 0x1})

6m6.327971237s ago: executing program 5 (id=798):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fcf9d8ecd329280f754d19a8429bd5a2e93653f510fe13d0cb600", 0x20)

6m5.803817333s ago: executing program 62 (id=798):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fcf9d8ecd329280f754d19a8429bd5a2e93653f510fe13d0cb600", 0x20)

5m44.880878121s ago: executing program 4 (id=859):
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0)
read(r0, &(0x7f00000002c0)=""/153, 0x99)

5m40.867603771s ago: executing program 8 (id=876):
syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

5m39.219226271s ago: executing program 8 (id=884):
syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9)
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000280), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x1000080, &(0x7f0000000000)=ANY=[], 0x1, 0x32f, &(0x7f00000001c0)="$eJzs3U9rXFUYB+A3aZNIJJ0sRFAQD7rRzSWJX8BBWhADSmykuhBuzY0OczsT5g6VqaLZufVzFJfuBPELZOPenQshG5ddFEcm1/yrUyql8abN80By3uTMb+65M5zh3Qxn/8b3t7rbVbadD2P27RSzETF7L2L5oKrN1L9m6r/m46TdeLN147dXPvz4k/fa6+tXN1K61r7+1lpK6cqrP3/59Q+v/TJ8/qMfr/y0EHvLn+7/ufb73ot7L+3/df2LTpU6Ver1hylPN/v9YX6zLNJWp+pmKX1QFnlVpE6vKgan5v8o+zs7o5T3tpYWdwZFVaW8N0rdYpSG/TQcjFL+ed7ppSzL0tJi8Cibdzc28nbTq+BsDQbtfLJ5F/41s3m3kQUBAI36z/3/5P8HdZP9/7b+/4nS/18Ek/5//p/9e5r+HwAAAAAAAAAAAAAAngb3xuPWeDxuHY4P/kyJzDWwTM7IY7z/PENOfHHvuYjyu9ubtzfrsZ5vb0cnyihiJVpxP2J8pK6vvbt+dSUdWI6lW9/W+cl46XR+NVqxPD2/WufT6fxcLJ7Mr0UrXpieX5uan483Xj+Rz6IVv34W/ShjKybZ4/w3qym98/76A/mFg8cBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDFk6cjU8/uz7GHzdf7ofP2VaMX96efzr0w9n/9yvHy52XsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEPV6E43L8tioHiGiq8uNXH1uSf6hLPn5cU8LmZ2601zXtbzyOJwlz9OvMEPJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjI8aHfTa8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJlWjO928LIvBGRYPu/ZMPez+j7cLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw7v0dAAD//4AzIso=")
openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a1441, 0x104)

5m38.543494699s ago: executing program 8 (id=888):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x210080, &(0x7f0000000200)={[], [{@context={'context', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}, 0x3, 0x58c, &(0x7f0000000600)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000a40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c", @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64], 0x1, 0x2b6, &(0x7f0000000c00)="$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")
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x8003, @any, 0x0, 0x1}, 0xe)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

5m36.013380286s ago: executing program 8 (id=894):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

5m35.652042657s ago: executing program 8 (id=897):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x20, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x4}, @nested={0x4b292f8ed58e6bc5, 0x0, 0x0, 0x1, [@generic="25dc00ae07d1ef"]}]}, 0x20}], 0x1}, 0x0)

5m35.375781454s ago: executing program 4 (id=899):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})

5m35.025817951s ago: executing program 8 (id=900):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
syz_usb_connect(0x0, 0x17d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d0010203010902"], 0x0)

5m34.282585148s ago: executing program 63 (id=900):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
syz_usb_connect(0x0, 0x17d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d0010203010902"], 0x0)

5m34.271324302s ago: executing program 4 (id=903):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000001180)={0xffff9bdd, 0x9, 0x10, 0x81, 0xffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
r0 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000011c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x7, 0x4, 0x800, 0x5, 0x6, 0x3, 0xa, 0x6f, 0x9, 0x9c8, 0xfffe, 0xf6}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

5m31.582766602s ago: executing program 4 (id=912):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

5m30.73014726s ago: executing program 4 (id=913):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

5m26.870627856s ago: executing program 4 (id=925):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
socket(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x2)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10a)
flock(r2, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
flock(r3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/prop1\x00', 0x1ff)

5m26.417215973s ago: executing program 64 (id=925):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
socket(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x2)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10a)
flock(r2, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
flock(r3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/prop1\x00', 0x1ff)

3m43.142650299s ago: executing program 7 (id=1482):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

3m41.988284561s ago: executing program 7 (id=1487):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
syz_emit_ethernet(0xbe, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x3, "153e2c20706c6c460e47cb4f54c611344033aed8ba6c162ef0d68154eb3a39ba", "3d46696bcc306ff6585ec886e89b12d00dcd03eb8cb4a87738a3b2f2ef40880f55774630a7b8b6f81871857d51e01749", "ab292fb021862a006cd1e40f50a9b763d37ae55a17daa80d287ad345", {"e7da662530662bcb18acf3abfc2a7887", "90017e565337ee48958e7f4739b9bb74"}}}}}}}, 0x0)

3m41.531701499s ago: executing program 7 (id=1491):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@nobh}, {@errors_remount}, {@block_validity}]}, 0x0, 0x480, &(0x7f0000000500)="$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")
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x0, 0x0})
pipe2$9p(0x0, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101003, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
pipe2$9p(&(0x7f0000000080), 0x800)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)

3m40.98856712s ago: executing program 7 (id=1492):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

3m38.723702012s ago: executing program 7 (id=1500):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffd7)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xff7ff00c}]}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x200040c4)
open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e)

3m38.126743529s ago: executing program 7 (id=1505):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

3m37.792717332s ago: executing program 65 (id=1505):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

3m19.607208246s ago: executing program 9 (id=1589):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x3, 0x0)

3m19.359967905s ago: executing program 9 (id=1590):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001d00070f"], 0x2c}}, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1001, 0x8000000000000000, 0xc595, 0x1, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="b4000000000000006110080000000000630a30"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m18.80401677s ago: executing program 9 (id=1593):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tgkill(r0, r0, 0x34)

3m18.619069122s ago: executing program 9 (id=1595):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

3m18.401370253s ago: executing program 9 (id=1596):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8000)

3m17.811716558s ago: executing program 9 (id=1602):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x5c, 0x0, &(0x7f0000000680)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x4, 0x2, 0x1b}, @flat=@weak_binder={0x77622a85, 0x81, 0x1}, @fda={0x66646185, 0x5, 0x1, 0x9}}, &(0x7f0000000640)={0x0, 0x20, 0x38}}, 0x400}], 0x5, 0x0, &(0x7f0000000700)="31ab19faaa"})
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x141000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0)

3m17.101215186s ago: executing program 66 (id=1602):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x5c, 0x0, &(0x7f0000000680)=[@request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x4, 0x2, 0x1b}, @flat=@weak_binder={0x77622a85, 0x81, 0x1}, @fda={0x66646185, 0x5, 0x1, 0x9}}, &(0x7f0000000640)={0x0, 0x20, 0x38}}, 0x400}], 0x5, 0x0, &(0x7f0000000700)="31ab19faaa"})
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x141000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0)

2m54.639423563s ago: executing program 3 (id=1604):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

2m54.126445226s ago: executing program 3 (id=1690):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$AUDIT_TRIM(r0, 0x0, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
chroot(&(0x7f0000001140)='./file0\x00')

2m46.5164704s ago: executing program 3 (id=1722):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x1000, 0x8})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@bridge_getneigh={0x28, 0x1e, 0xd15, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x48010)

2m45.493406095s ago: executing program 67 (id=1722):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x1000, 0x8})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@bridge_getneigh={0x28, 0x1e, 0xd15, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x48010)

7.344370048s ago: executing program 0 (id=2410):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000706010400000000000400000c0000040500010016"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x8800)

7.143263571s ago: executing program 0 (id=2412):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)

6.774098101s ago: executing program 1 (id=2415):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xdd, 0xf)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x221c013, &(0x7f0000001d40)=ANY=[@ANYRES64=r2, @ANYRESDEC=r1, @ANYBLOB="2199788f3418c90703b51b5f2c159501f060f845d49f676c71fd6f4bda6ab1f17bb887b256443e04226bfe2e99110786545d3cca68428583afa1fdee9a25e801f85230bd191451365f058bf0f71e985a82e1b522e3a905a4956f7413fd6b1c0d2e8e788c05572d9704a2b6268d54cdbcc865cfdbd026e6c2c1e5880ec8b8065a2a3e0e23e9455608f17df940cfd02536974017c616ddbaafe6e98f0f553151bb12525172b76cf8f7b24092d581fa74020ca4eb84ac4b82fd13d3c35c677cdd99f2a912d3553e1484d313d93143a24dbe5848dd0d5088ec84f995a21899a1db8e28a2e5b5f4e7507ed4dfaaa75b03a6d4", @ANYRES64=r0, @ANYBLOB="f4a984565a60fa9e185c408b29cf4c098ed8bcb7396ac7c0e86aa356dcdc19b90320c50fb225edbb2f4caff028505530c3779f417f7f7a9a3a6dfdc0cc5f5631b9d96e8a478b3ba6c5e0bb03a95bf726e7e298c734c091fb495031b16fdc503522de86fafd9379738e7f8d7b99b54833f87e0d394b64877365636e6346300a5d250090b001269c0059075bfd479cd09b7cc0c0923f92af191c854c7b9d2d6c6e11598973bc949536f68d821b6e"], 0x1, 0x6dc, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeuN1TBaRMaoSKsRCpIEYkdK4VwwSCEcqhQVQ49W4nTWN0kVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/b6LS/rGD6faDzPzPPMM7/57TMzuxOtNsD/rSvn0ryfIlfOvXGvXN5YX2hvrC+8UFe3k5TlRtLszlLcSooHyWJZXwxMGZhv8/HK5bc+e7jxeXepWU9V+4ndththRNu1esps3d/syC0n97uLtTq8vJjkaj0fNrXfvoYalkk7W8/h0HW2WTvI5gc5b4HnTO/uVHTvm9vMJMeSTNfvA1JfHRrji/DZONBVDgAAAI6AUY+9P719CIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkVX0/k7UC0X9+/5VxWyK3u//T/Ubd8vPocV9t7z/TOMAAAAAAAAAgPH4+qM8yr0c7y13iur//M9UCyfzRSf5Ut7P3SznTs7nXpaymtXcyXySmYGOpu4tra7eme9vWRq95cWRW14c1xEDAAAAAAAAwP+kX6a1+f//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSie6smk7W88yk0cxmXdaSfyaZOux4D6AYtfL++OMAAACAJzL9GNt8+VEe5V6O95Y7RfWZ/yvV5+XpvJ9bWc1KVtPOcq7Vn6HLT/2NjfWF9sb6ws1yKpeH+/3+vw8UxlTdw0S1NGrPp6sWrVzPSrXmfK5WwVxLo7vvs8npXjwDcQ34qIyp+F5tn5E167SWO/v9Tk8RnorhRxGNXVq2NoNL+hmZq2MrtzzRzUBRPahJtmZiz1enObQ0Uz8JKpV7mk+j/+Tn5JPkfG303o/V8/J4fvNMc35QM1V+J3O90c3Exd7oK8+Z3TORfOOvf3r7RvvWuzeu3z33/BzSHiZ2WN/PRD36FgYy8cqRzkTzgO3nqkyc6i9fyY/yk5zLbN7Mnazkp1nKapbTqeuX6vFc/p3ZPVOLQ0tv7hXJVP26dF+z/cQ0mx9WpaWcqbY9npUUuZ1rWc7r1b+Lmc+3cymXcnngFT61Y9zVsVVnfWPrWd97pf82Mviz36wL5dXtt5tXucXdjnin0fm0dK/9ZV5PDOS1O+of9ludGDgP5gay9FIvO5MjO3+c+1Hzq3Wh3Mev9rhPjNdMnYnyBOrdJXrRvdzNRLO6F20f53/olNulfavTubH03g79b71ZvFbPy2G1/rW9WveMfimernK8vJTp+koyPDrKupf7V5mBus7mWO7WDV5d56vtTlV1RdE7U3+c29UA2H6mTtXv4bb3dLGqe2Vk3UJVd3qgbuj9Vm6nnWtjyB8Aj+Mfb/eLMzk21fpX69PWJ61ft2603pj+wQvfeeHVqUz+ffK7zbmJ1xqvFn/JJ/n55ud/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg8d394MN3l9rt5TujC42dq4YKrWxds1fPWwpF/YM+B9vq+S1MJxlaU/3O0djDaG0NY1uh84tk7Pnp/Yjg6Da/KwvNbSNqVGFxaM2ft3f40QEjLPZ3XjzDQiPj3elERg+AQ7woAWNxYfXmexfufvDht1ZuLr2z/M7yrclLly7PXb70+sKF6yvt5bnu38OOEngWht4GAAAAAAAAAAAAAEfCqC8GnHlxry+N7Os7Hv01h32MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNF25Vya91Nkfu78XLm8sb7QLqdeebNlM0mjkRQ/S4oHyWK6U2YGuivyxwfpjNjPxyuX3/rs4cbnm301u+2TRj3f2e61SdbqKbNJJur5Exjq7+oT91f8p3cMZcK+6HQ6i08WHzwd/w0AAP//aKX0ZQ==")
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000340))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d80)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x100)
r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x180000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000440)={[{@debug}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}, {@block_validity}, {@noinit_itable}, {@norecovery}, {@init_itable}, {@test_dummy_encryption_v1}, {@data_ordered}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8)
r6 = getegid()
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x0, 0x0, {{0x6, 0x2, 0xd3f9, 0x4, 0xdd, 0x6, {0x1, 0x6c9, 0x3, 0x2, 0xb8, 0x1, 0x4, 0x8, 0x194a, 0x1000, 0x3, r5, r6, 0x9, 0x7c1}}}}, 0xa0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000000800890648", 0x19, 0x0, 0x0, 0x0)

6.431059903s ago: executing program 1 (id=2418):
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04031220"], 0x7)

4.65576955s ago: executing program 1 (id=2424):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

4.46806323s ago: executing program 1 (id=2427):
r0 = semget$private(0x0, 0x7, 0x195)
semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)

4.440139567s ago: executing program 6 (id=2428):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x859})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x5, 0x2, 0x1, 0x0, @irqchip={0x7, 0xb}}]})
r2 = eventfd2(0xa, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4})

4.350343251s ago: executing program 2 (id=2429):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file7/file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$UHID_INPUT(r2, 0x0, 0x0)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000002a80)={0x85, 0x200000, 0xfffffffb})
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file7/file0\x00', 0x10840, &(0x7f0000000580)=ANY=[@ANYBLOB="b383187c91ad3229682f235d2781213493fe127aa7ba6597640b6fbf391bc4b3d3200103f7b046bb6a2f9861dfed93a179cec8da7a924e4b92721b97eba682e8ff83754e87a7cb4a88c612af6da66d416c84eebfdeb325f68b67aaac9599a99eb1ccc8c33197cda0ea3dbb91734004560e695b3f1eadf1815d7e3269e7483839f58fe4768d044963a3fc6a8748eca42cee0ed2a260e980aef76e04ad4e08e3016af899"], 0x81, 0x279, &(0x7f0000000240)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/error_log\x00', 0x101083, 0x10)
close_range(r7, 0xffffffffffffffff, 0x0)
bind$inet6(r7, &(0x7f00000004c0)={0xa, 0x4e22, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xedcf}, 0x1c)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f00000027c0)=@get={0x1, &(0x7f00000017c0)=""/4096, 0x73})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0xa, 0x0, 0x0, 0xfd, 0x0, 0x800}, [@RTA_GATEWAY={0xfffffffffffffd93, 0x5, @loopback={0xfec0ffffffffffff, 0x2}}]}, 0x30}, 0x1, 0x11, 0x0, 0x4000081}, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x26f, &(0x7f0000000680)="$eJzs2s9rHGUYB/BnY2I3KelG/EUL4ose1MvS5OyhRSKIAUWNUAXp1Ex0zbgbMktgRUxOevVP8CwevQnSo5dc/As8eMslxx7Ekd3Z1CQWWjHdhPr5HIaHyXxn3nnf8PLssvuvfvv5xnrZXs/6MdVoxNS12I07jViIqTi0G6+8dOOX59698cGb11dWmuOzSymlS8///OGXP7xwu3/x/R8v/XQh9hY+2j9Y+n3vmb3L+3++92mnTJ0ydXv9lKVbvV4/u1Xkaa1TbrRTervIszJPnW6Zbx37+3rR29wcpKy7Nj+3uZWXZcq6g7SRD1K/l/pbg5R9knW6qd1up/m54L9Y/f5OVcVBNXMzqqqa/S4u3o7536IVjSdS48lrjadvNp7dbVw+qKrWyejs2YyY01Wv/+Pxr9efR8J4U19+J6VmTA+3hO3ViOKb4TGiGdfXoxNF5HE1ZuOP0b/JWF2//sbK8tU0shBfFzvbdX5ne/Wx0f3v5hejFQv3zi/W+XSYvxARw+Pc0fxStOKpe+eXTuTr5zfj5ReP5NvRil8/jl4UsRbDbOyMp2D5q8WUXntr5UT+yug6AIBHTbtunWai7t+GTdux/q09vuCf/V2dP9Iftu7TH57or6bjyvTZvjsR5eCLjawo8q3hB7xRcffMKRQz46ec2g0nUcwenZYHKQ6/Cnl4A5s6tmbnZaL+v8Xu+RjGQy0iPpv4bsSk/b3o9720OZEBAQAAAAAAAAAA8EAm8XPCs35HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgfPsrAAD//6c2uyA=")
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)={0x0, 0x0, @d}, 0x18, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

4.343449703s ago: executing program 1 (id=2430):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$eJzs3UFsHNd9B+D/G+2KSxmtmDhRndQuNm2RyorlypJiKlbhrGqabQBZFkIxtwBciZS6NUUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDowmCHpnWBZKLD0WAAj0RLWwERQ9sESAng8XMvqVWNGnToihR0vfZ0m939r2Z9+atZ2hBb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/+/K5E8+l+90KAOBeujD21RMn3f8B4JFyyf//AwAAAAAAAAAAAADAfpeiiMcjxdyFtTRRve9qnO/Ub9wcHxndutpgqmoeqMqXvxrPnTx1+ovPD5/p5fnOzIfUv9s+G6+OXTrXfGn2+tz81MLC1GRzfKZzZXZyasd72G39zY5VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dOxWkUZ/+dodN6RruxkeB6OI45Hime/9LLUjoojdn4vGvR37zQarThyrOjE+Mlp1ZLrTnlksP7zYOxFFRLOvUqt3jrYei6jV72kftteKWCqbXzb4WNm9sbn2fPvy9FTzYnt+sbPYmZ25mLqtLfvTjCLOpIjliFgd+ODu6lFELVJ85/BauhwRB3rn4QvVxODt21HsYR93oGxnsx6xXDwAY7aPDUQRr0SKn799NK7k60x1rfl8xCtl/jDizTJfjEjlF+N0xLtbfI94MNWiiL8ox//sWpqsrge968r5rzW/MnN1tq9s77ryMe8PH7hS3Kf7w+CmvDf2+bWpEUW0qyv+WrrzH3YAAAAAAAAAAAAAAAAAuNsGo4jPRIqX/+2PqnnFUc1LP3x2+PeGfql/zvgTH7GfsuyzEbFU7GxO7sE8MfBiupjSfZ5L/ChrRBF/nOf/fet+NwYAAAAAAAAAAAAAAAAAAOCRVsRPI8UL7xxNy9G/pnhn5lrzUvvydHdV2N7av70109fX19ebqZutnBM5l3Iu51zJudrNat5/Vb/I9XNO5FzKuZxzJedqzjiQ6+ds5ZzIuZRzOedKztWcUcv1c7ZyTuRcyrmccyXnas7YJ2v3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TIoo4v1I8e1vrKVIEdGKmIhurgzc79YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKWBVMT3I0Xz91sb22oRkap/u46Wv52O1sEyPxmt4TJfjNa5nO0qa61v3Yf2szv1VMRPIsVA462NAc/jX+++2/gaxJvfvPXus7VuHuh9OPTewGNHDp8dHv21J7Z7nbZqwLHznZkbN5vjI6OjY32ba/non+zbNpSPW9ydrhMRC6+/8Vp7enpq/s5flF+BbT5aX1//0/Iouz3EPnmRatv29JF8UQ7tPmjGHnawtqPC9X3Q1D0ZXB525f3/3Ujx2+/8R++GX93/axslNu7w8Ys/uXX/f2HzjnZ4/69trpfv/+U9fav7/+N9217IP43UaxGNxetz9SMRjYXX3zjeud6+NnVtaub0iRNfGh7+0qkT9YMRjaud6am+V7s/VwAAAAAAAAAAAAAAAAD3VCriy5Gi/ZO11IyIm9V8raGzw08ff+pAHKjmW902b/vVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu30cI1qutf4yOiedOYjDe5x+wcbL83OvT7fufYHi1t+fqhx7vLC4nz7ytYfx2AUEa3+LceqBo+PjFaNnu60Z6qqF7ecTP/x1VMR/xkprpxups/lbXn+/+YZ/rfN/1/avKM9mv//ib5t5TFTKuIXkeK3/vKJ+FzVzkPxgXOWy/1tpDh25slcLg6W5Xpt6D5XoDszsCz7v5HiH99/cqm/bG8+5OO3yj634xP7gCjH/3Ck+P6ffzd+PW+7/fkPW4//oc072qPx/1TftkO3Pa9g110nj//xSPHi42/Fb+RtH/b8j96zN47mwhvP59ij8f9037ahfNzfvDtdBwAAAAAAAAAAeKDVUxF/Fyl+NFpLz+dtO/n7f5Obd7RHf//rV/q2Td6d9Yo+8sWuTyoAAAAA7BP1VMRPI8W1xbc25lDfPv+7b/7n79ya/zmSNn1a/TnfL1fPDbibf/7Xbygfd2L33QYAAAAAAAAAAAAAAAAAAIB9JaUins/rqU9U8/knt11PfSVSvPzfz+Ry6UhZrrcO/FD1e+PC7Mzxc9PTs1fai+3L01PNsbn2lamy7qcixdrfPJnrFtX66r315rtrvDdqEVGtxT4fKUb/vle2uxZ7b23y7nrg3bXYy7KfiBT/9Q+3l+2tY/3pW2VPlmX/OlJ8/Z+2LnvkVtlTZdnvRooff73ZK3uoLNt7Pmr3maSNP4yIZ6/MFnswKgAAAAAAAAAAAAAAAAAAADxq6qmIP4sU/3N9eWMuf17/v973tvLmN/vW+9/kZrXO/1C1/v92r+9k/f/quQJL2x0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTimKeCNSzF1YSysD5fuuxvnOzI2b4yOjW1cbTFXNA1X58lfjuZOnTn/x+eEzvfzw+nfbZ+LVsUvnmi/NXp+bn1pYmJpsjs90rsxOTu14D9vXb9xRi45VJ6B5/bUbk1evLjRPPnvqto9vDr038NiRobPDTx9/qld2fGR0dKyvTK1+R0feUtpm+8Eo4q8ixTPf+1n60UBEER96LnbkI747e22w6sSxqhPjI6NVR6Y77ZnF8sOLvRNRRDT7KrV65+gejMWutCIGyuaXDT5Wdm9srj3fvjw91bzYnl/sLHZmZy6mbmvL/jSjiDMpYjkiVgc+uLt6FPFapPjO4bX0zwMRB3rn4QsXxr564uT27Sj2sI87ULazWY9YLh6AMdvHBqKIH0SKn799NP5lIKIW3V/x+YhXyvxhxJvRHe9UfjFOR7y7xfeIB1Mtivi/cvzPrqW3B8rrQe+6cv5rza/MXJ3tK9u7ruyr+8MP/v3j1hi8G4fd5Mvb/pCwz69NjSjix9UVfy39q/+uAQAAAAAAAAAAAAAAAPaRIn41UrzwztFUzQ/emFPcmbnWvNS+PN2d1teb+9ebM72+vr7eTN1s5ZzIuZRzOedKztWcUeT6OVtlNtbXJ/L7pZzLOVdyruaMA7l+zlbOiZxLOZdzruRczRm1XD9nK+dEzqWcyzlXcq7mjH0ydw8AAAAAAAAAAAAAAAAAAHi4FNU/Kb79jbW0PtBdX3oiurliPdCH3v8HAAD//z/B9Iw=")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000480)="405085abca", 0x5}, {&(0x7f00000007c0)="82c1382750", 0x5}], 0x3, 0x2000, 0x0, 0x3)

4.240366301s ago: executing program 6 (id=2431):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4)
ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7)

3.299295634s ago: executing program 1 (id=2432):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x82)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f00000001c0), 0x12)

3.294288015s ago: executing program 2 (id=2433):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @random="5a2cc6a9f74a"}, 0x10)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x58, 0x4)
recvmmsg(r4, 0x0, 0x0, 0x10000, 0x0)

2.669870413s ago: executing program 6 (id=2434):
syz_mount_image$ext4(&(0x7f0000000b40)='ext4\x00', &(0x7f0000000b80)='./file1\x00', 0x0, &(0x7f0000000240), 0x7, 0x610, &(0x7f0000000500)="$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")
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240))
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./bus/file0\x00', 0x2, 0xffffffff)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2.407919293s ago: executing program 0 (id=2435):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/154})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8881f5c0a000)
utimes(0x0, &(0x7f0000001d40)={{}, {0x0, 0x80000000}})
pipe2$9p(&(0x7f0000000100), 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write(r0, &(0x7f0000000140)='1', 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018})

2.150123902s ago: executing program 2 (id=2436):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@nobh}, {@errors_remount}, {@block_validity}]}, 0x0, 0x480, &(0x7f0000000500)="$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")
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x0, 0x0})
pipe2$9p(0x0, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101003, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
pipe2$9p(&(0x7f0000000080), 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7561a9e8b4f7c37563abfc47811e88d70985b0f00da86c71fa706a6efede3bec6e4ca8b0489159ab24eef513000000000000"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '!'}}], 0x6b}})

2.067918564s ago: executing program 6 (id=2437):
accept(0xffffffffffffffff, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x80)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x2, 0x0, 0x400000})
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82)

2.012049799s ago: executing program 0 (id=2438):
r0 = semget$private(0x0, 0x7, 0x195)
semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}], 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)

1.93516157s ago: executing program 2 (id=2439):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xc, 0x4, 0x4, 0x5, 0x0, r0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.895169131s ago: executing program 0 (id=2440):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

1.085468428s ago: executing program 2 (id=2441):
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000706010400000000000400000c0000040500010016"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x8800)

1.023943045s ago: executing program 6 (id=2442):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4}}}}}}}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tgkill(r3, r3, 0x34)

953.952624ms ago: executing program 2 (id=2443):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)

744.616579ms ago: executing program 0 (id=2444):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)='+', 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0)
close(r0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r7)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={0x0, 0x0, 0xf4})
syz_usbip_server_init(0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea)

0s ago: executing program 6 (id=2445):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r0, &(0x7f0000000840)={@void, @val={0x3, 0x3, 0xb, 0x6, 0x2, 0x4}, @ipv6=@tcp={0x0, 0x6, "5f6bd6", 0x14, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x40, 0x0, 0x7}}}}}, 0x46)

kernel console output (not intermixed with test programs):

m netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.531017][ T9553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.543819][ T9553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.561543][ T9553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.764671][ T7475] kernel read not supported for file /rfkill (pid: 7475 comm: kworker/1:9)
[  304.821756][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.859559][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.921022][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.946785][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.260546][ T9759] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode
[  306.288180][ T9755] loop5: detected capacity change from 0 to 512
[  306.313732][ T9755] EXT4-fs: Ignoring removed oldalloc option
[  306.356909][ T9755] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  306.770224][ T9779] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  306.940129][ T9790] loop5: detected capacity change from 0 to 2048
[  306.969919][ T9790] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  307.063352][ T7099] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  307.283084][ T7099] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  307.303790][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  307.316562][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  307.338064][ T9801] loop3: detected capacity change from 0 to 1024
[  307.345085][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  307.355121][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  307.366698][ T9801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  307.387866][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64
[  307.390408][ T9801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.434894][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64
[  307.482906][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64
[  307.520813][ T9801] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.778: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  307.548192][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  307.580516][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  307.592721][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  307.610768][ T9810] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.778: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  307.631943][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  307.633260][ T2203] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  307.644045][ T7099] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 1024
[  307.701719][ T7099] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  307.728922][ T7099] usb 2-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14
[  307.749533][ T9288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.770917][ T7099] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00
[  307.805719][ T7099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.842350][ T7099] usb 2-1: Product: syz
[  307.851792][ T7099] usb 2-1: Manufacturer: syz
[  307.856938][ T2203] usb 6-1: Using ep0 maxpacket: 32
[  307.862107][ T7099] usb 2-1: SerialNumber: syz
[  307.868823][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.892336][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.901835][ T2203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.905217][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.927293][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.931574][ T2203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.946547][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.946580][ T2203] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  307.954566][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.972198][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.974205][ T2203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.991134][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.999413][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  308.011236][ T2203] usb 6-1: config 0 descriptor??
[  308.020107][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  308.028311][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  308.035854][ T9783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  308.037319][ T2203] hub 6-1:0.0: USB hub found
[  308.047128][ T7099] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[  308.058771][ T7099] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7
[  308.079235][ T7099] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  308.095541][ T7099] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[  308.108009][ T7099] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  308.235412][ T2203] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  308.313562][ T5089] Bluetooth: hci2: command tx timeout
[  308.680533][ T7099] usb 2-1: USB disconnect, device number 3
[  308.718464][   T28] audit: type=1326 audit(1790774057.111:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.3.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311b19e159 code=0x7fc00000
[  309.112587][ T2203] usbhid 6-1:0.0: can't add hid device: -71
[  309.118636][ T2203] usbhid: probe of 6-1:0.0 failed with error -71
[  309.150495][ T7099] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  309.186697][ T2203] usb 6-1: USB disconnect, device number 2
[  309.195603][ T7099] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  309.267551][ T7099] keyspan 2-1:1.0: device disconnected
[  310.264440][ T9854] loop5: detected capacity change from 0 to 1024
[  310.295798][ T9854] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  310.399333][ T9854] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  310.429203][ T9854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.487425][ T9858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.788'.
[  310.512605][ T9858] Zero length message leads to an empty skb
[  310.748315][ T9407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.888846][   T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.049001][   T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.383707][   T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.647022][   T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.184990][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  312.195778][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  312.216587][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  312.237856][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  312.257284][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  312.279457][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  312.493333][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  312.517597][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  312.538549][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  312.556789][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  312.575100][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  312.594511][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.319949][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.330107][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.339876][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.348955][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.356947][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  313.375858][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  313.661529][ T9892] chnl_net:caif_netlink_parms(): no params data found
[  313.693675][ T9887] chnl_net:caif_netlink_parms(): no params data found
[  314.057979][   T60] hsr_slave_0: left promiscuous mode
[  314.076300][   T60] hsr_slave_1: left promiscuous mode
[  314.083492][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.091422][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.099919][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.107496][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.119679][   T60] bridge_slave_1: left allmulticast mode
[  314.125667][   T60] bridge_slave_1: left promiscuous mode
[  314.131421][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.155950][   T60] bridge_slave_0: left allmulticast mode
[  314.179747][   T60] bridge_slave_0: left promiscuous mode
[  314.190153][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.281961][   T60] veth1_macvtap: left promiscuous mode
[  314.289099][   T60] veth0_macvtap: left promiscuous mode
[  314.311984][   T60] veth1_vlan: left promiscuous mode
[  314.336888][   T60] veth0_vlan: left promiscuous mode
[  314.374001][ T5089] Bluetooth: hci1: command tx timeout
[  314.684554][ T5089] Bluetooth: hci2: command tx timeout
[  315.207854][   T28] audit: type=1326 audit(1790774063.631:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9e159 code=0x7ffc0000
[  315.233378][   T28] audit: type=1326 audit(1790774063.631:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9e159 code=0x7ffc0000
[  315.258025][   T28] audit: type=1326 audit(1790774063.631:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9e159 code=0x7ffc0000
[  315.282033][   T28] audit: type=1326 audit(1790774063.631:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f1ee0b9e159 code=0x7ffc0000
[  315.309170][   T28] audit: type=1326 audit(1790774063.631:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9e159 code=0x7ffc0000
[  315.333203][   T28] audit: type=1326 audit(1790774063.631:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9e159 code=0x7ffc0000
[  315.373416][   T28] audit: type=1326 audit(1790774063.631:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9e159 code=0x7ffc0000
[  315.397928][   T28] audit: type=1326 audit(1790774063.631:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9e159 code=0x7ffc0000
[  315.421881][   T28] audit: type=1326 audit(1790774063.631:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1ee0b9e159 code=0x7ffc0000
[  315.445812][   T28] audit: type=1326 audit(1790774063.631:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.0.809" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1ee0b97ed7 code=0x7ffc0000
[  315.482501][ T5089] Bluetooth: hci3: command tx timeout
[  315.517040][   T60] team0 (unregistering): Port device team_slave_1 removed
[  315.595903][   T60] team0 (unregistering): Port device team_slave_0 removed
[  315.673348][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.751207][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.160824][   T60] bond0 (unregistering): Released all slaves
[  316.286733][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.302565][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.322743][ T9887] bridge_slave_0: entered allmulticast mode
[  316.330238][ T9887] bridge_slave_0: entered promiscuous mode
[  316.391331][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.398953][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.409488][ T9887] bridge_slave_1: entered allmulticast mode
[  316.430784][ T9887] bridge_slave_1: entered promiscuous mode
[  316.442436][ T5089] Bluetooth: hci1: command tx timeout
[  316.551597][ T9887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.628874][ T9892] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.641887][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.650910][ T9892] bridge_slave_0: entered allmulticast mode
[  316.668065][ T9892] bridge_slave_0: entered promiscuous mode
[  316.677490][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.685535][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.693242][ T9892] bridge_slave_1: entered allmulticast mode
[  316.725946][ T9892] bridge_slave_1: entered promiscuous mode
[  316.747939][ T9887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.762448][ T5089] Bluetooth: hci2: command tx timeout
[  316.940614][ T9892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.001909][ T9887] team0: Port device team_slave_0 added
[  317.024234][ T9887] team0: Port device team_slave_1 added
[  317.071304][ T9892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.122778][ T9908] chnl_net:caif_netlink_parms(): no params data found
[  317.190179][ T9892] team0: Port device team_slave_0 added
[  317.216275][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.230590][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.264798][ T9887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.344829][ T9892] team0: Port device team_slave_1 added
[  317.364113][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.371102][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.429577][ T9887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.498358][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  317.505066][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  317.562321][ T5089] Bluetooth: hci3: command tx timeout
[  317.602797][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.609825][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.636455][ T9892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.650991][ T9892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.659058][ T9892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.685361][ T9892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.769518][   T60] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.801313][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.811635][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.819858][ T9908] bridge_slave_0: entered allmulticast mode
[  317.831580][ T9908] bridge_slave_0: entered promiscuous mode
[  317.845290][ T9887] hsr_slave_0: entered promiscuous mode
[  317.853427][ T9887] hsr_slave_1: entered promiscuous mode
[  317.887749][   T60] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.901456][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.910215][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.917559][ T9908] bridge_slave_1: entered allmulticast mode
[  317.925140][ T9908] bridge_slave_1: entered promiscuous mode
[  317.954669][ T9892] hsr_slave_0: entered promiscuous mode
[  317.960943][ T9892] hsr_slave_1: entered promiscuous mode
[  317.967680][ T9892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.975503][ T9892] Cannot create hsr debugfs directory
[  317.996084][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.019386][   T60] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.057763][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.091137][   T60] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.158480][ T9908] team0: Port device team_slave_0 added
[  318.223522][ T9908] team0: Port device team_slave_1 added
[  318.381270][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.388494][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.414752][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.460988][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.473548][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  318.500250][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.522474][ T5089] Bluetooth: hci1: command tx timeout
[  318.780020][   T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.799964][ T9908] hsr_slave_0: entered promiscuous mode
[  318.807139][ T9908] hsr_slave_1: entered promiscuous mode
[  318.813695][ T9908] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.821294][ T9908] Cannot create hsr debugfs directory
[  318.842345][ T5089] Bluetooth: hci2: command tx timeout
[  318.872419][   T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.955977][   T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.041746][   T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.642314][ T5089] Bluetooth: hci3: command tx timeout
[  320.610504][ T5089] Bluetooth: hci1: command tx timeout
[  320.923087][ T5089] Bluetooth: hci2: command tx timeout
[  321.680416][   T60] hsr_slave_0: left promiscuous mode
[  321.690352][   T60] hsr_slave_1: left promiscuous mode
[  321.696306][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.704579][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.715474][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.723151][ T5089] Bluetooth: hci3: command tx timeout
[  321.730543][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.738539][   T60] bridge_slave_1: left allmulticast mode
[  321.744356][   T60] bridge_slave_1: left promiscuous mode
[  321.750065][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.758959][   T60] bridge_slave_0: left allmulticast mode
[  321.764876][   T60] bridge_slave_0: left promiscuous mode
[  321.770548][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.783284][   T60] hsr_slave_0: left promiscuous mode
[  321.789154][   T60] hsr_slave_1: left promiscuous mode
[  321.796069][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.805354][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.813416][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.820838][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.828780][   T60] bridge_slave_1: left allmulticast mode
[  321.834523][   T60] bridge_slave_1: left promiscuous mode
[  321.840261][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.850630][   T60] bridge_slave_0: left allmulticast mode
[  321.856611][   T60] bridge_slave_0: left promiscuous mode
[  321.862740][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.895742][   T60] veth1_macvtap: left promiscuous mode
[  321.901303][   T60] veth0_macvtap: left promiscuous mode
[  321.907072][   T60] veth1_vlan: left promiscuous mode
[  321.912451][   T60] veth0_vlan: left promiscuous mode
[  321.919092][   T60] veth1_macvtap: left promiscuous mode
[  321.924715][   T60] veth0_macvtap: left promiscuous mode
[  321.930405][   T60] veth1_vlan: left promiscuous mode
[  321.936010][   T60] veth0_vlan: left promiscuous mode
[  323.620022][   T60] team0 (unregistering): Port device team_slave_1 removed
[  323.665386][   T60] team0 (unregistering): Port device team_slave_0 removed
[  323.711388][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  323.756835][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.069250][   T60] bond0 (unregistering): Released all slaves
[  324.648746][   T60] team0 (unregistering): Port device team_slave_1 removed
[  324.700562][   T60] team0 (unregistering): Port device team_slave_0 removed
[  324.751772][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.798406][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  325.115665][   T60] bond0 (unregistering): Released all slaves
[  325.866248][ T9887] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  325.889291][ T9887] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  325.899703][ T9887] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  325.909248][ T9887] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  326.051419][ T9892] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  326.064100][ T9892] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  326.074912][ T9892] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  326.090970][ T9892] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  326.136643][ T9887] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.207940][ T9908] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  326.221524][ T9908] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  326.234425][ T9887] 8021q: adding VLAN 0 to HW filter on device team0
[  326.251209][ T9908] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  326.271429][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.278626][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.293650][ T9908] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  326.315326][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.322539][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.407397][ T9892] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.494595][ T9892] 8021q: adding VLAN 0 to HW filter on device team0
[  326.517507][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.524716][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.545785][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.553004][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.640376][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.696643][ T9908] 8021q: adding VLAN 0 to HW filter on device team0
[  326.747429][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.754592][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.771608][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.778844][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.806054][ T9887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.871680][ T9908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  326.890389][ T9908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  327.002048][ T9887] veth0_vlan: entered promiscuous mode
[  327.040779][ T9887] veth1_vlan: entered promiscuous mode
[  327.060988][ T9892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.127693][ T9887] veth0_macvtap: entered promiscuous mode
[  327.151664][ T9887] veth1_macvtap: entered promiscuous mode
[  327.205225][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.223444][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.241048][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.267118][ T9887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.278007][ T9887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.290746][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.310610][ T9887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.320329][ T9887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.330061][ T9887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.352636][ T9887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.408512][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.531576][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.554373][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.575048][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.600799][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.688806][ T9892] veth0_vlan: entered promiscuous mode
[  327.734829][ T9892] veth1_vlan: entered promiscuous mode
[  327.823830][ T9892] veth0_macvtap: entered promiscuous mode
[  327.834478][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  327.870123][ T9892] veth1_macvtap: entered promiscuous mode
[  327.912735][    T9] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  327.976688][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.003274][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.032857][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.064085][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.103353][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.161643][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.178640][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.191385][ T9892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.206977][ T9892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.219773][ T9892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  328.257198][ T9892] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.269377][ T9892] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.289207][ T9892] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.298708][ T9892] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.385056][ T9908] veth0_vlan: entered promiscuous mode
[  328.419802][ T9908] veth1_vlan: entered promiscuous mode
[  328.562936][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.564781][ T9908] veth0_macvtap: entered promiscuous mode
[  328.591567][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.620616][ T9908] veth1_macvtap: entered promiscuous mode
[  328.718876][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.740296][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.753992][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.763419][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.793409][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.826335][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.856739][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.875712][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.919138][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.956603][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.009797][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.021856][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.040312][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.051605][ T9908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.062390][ T9908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.097085][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.758358][ T9908] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.811524][ T9908] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.839191][ T9908] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.863751][ T9908] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.194949][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.231406][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.330239][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.343447][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.497022][T10180] loop4: detected capacity change from 0 to 256
[  330.574510][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'.
[  330.588512][T10184] netlink: 55 bytes leftover after parsing attributes in process `syz.0.845'.
[  330.604326][T10089] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  334.781636][T10238] loop8: detected capacity change from 0 to 2048
[  334.934499][T10238] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.135182][ T9892] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.264365][T10257] loop2: detected capacity change from 0 to 256
[  335.326565][T10257] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  335.489703][T10260] loop8: detected capacity change from 0 to 1756
[  335.589522][T10260] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  335.610841][T10260] UDF-fs: Scanning with blocksize 512 failed
[  335.678972][T10260] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  335.712222][T10260] UDF-fs: Scanning with blocksize 1024 failed
[  335.762305][T10260] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  335.825225][T10260] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 64: 0x07 != 0x02
[  335.877076][T10260] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[  337.074646][T10282] loop8: detected capacity change from 0 to 2048
[  337.273252][T10282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  338.547611][T10317] dns_resolver: Unsupported content type (6)
[  339.173060][ T7099] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  339.389288][ T7099] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  339.418409][T10335] loop8: detected capacity change from 0 to 8
[  339.428453][ T7099] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  339.454466][ T7099] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64
[  339.493362][T10335] SQUASHFS error: lzo decompression failed, data probably corrupt
[  339.497933][ T7099] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  339.501233][T10335] SQUASHFS error: Failed to read block 0x0: -5
[  339.520610][ T7099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.555320][T10337] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  339.555829][T10335] SQUASHFS error: lzo decompression failed, data probably corrupt
[  339.582158][ T7099] usb 3-1: Product: syz
[  339.585498][T10335] SQUASHFS error: Failed to read block 0x0: -5
[  339.592136][ T7099] usb 3-1: Manufacturer: syz
[  339.597868][   T28] kauditd_printk_skb: 168 callbacks suppressed
[  339.597891][   T28] audit: type=1800 audit(1790774088.021:191): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.884" name="file2" dev="loop8" ino=3 res=0 errno=0
[  339.602997][ T7099] usb 3-1: SerialNumber: syz
[  339.660878][T10322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  339.911949][T10322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  339.942417][T10322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  340.117945][T10351] loop8: detected capacity change from 0 to 1024
[  340.138976][T10351] ext4: Unknown parameter 'context'
[  340.544374][T10362] loop8: detected capacity change from 0 to 128
[  340.922303][T10322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  341.607454][T10322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  341.880368][ T7099] cdc_ncm 3-1:1.0: bind() failure
[  341.951200][ T7099] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  342.002432][ T7099] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  342.054256][ T7099] usbtest: probe of 3-1:1.1 failed with error -71
[  342.134355][ T7099] usb 3-1: USB disconnect, device number 4
[  342.686784][T10379] loop2: detected capacity change from 0 to 256
[  342.787189][T10379] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  342.842608][T10379] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  342.869321][T10379] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  342.906029][T10379] exFAT-fs (loop2): failed to load alloc-bitmap
[  342.936100][T10379] exFAT-fs (loop2): failed to recognize exfat type
[  343.946899][  T993] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.992456][ T1218] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  344.106919][  T993] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.204930][ T1218] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  344.232182][ T1218] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  344.254647][  T993] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.276234][ T1218] usb 3-1: config 0 interface 0 has no altsetting 0
[  344.292466][ T1218] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  344.319990][T10407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.902'.
[  344.321902][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.346645][T10407] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.355965][T10407] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.384243][ T1218] usb 3-1: config 0 descriptor??
[  344.390725][T10379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  344.466001][  T993] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.582258][ T7099] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  344.825947][ T7099] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  344.866448][ T1218] input: HID 046d:c623 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C623.0005/input/input11
[  344.872248][ T7099] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  344.944066][ T7099] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64
[  344.961424][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  344.975485][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  344.995796][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  345.016336][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  345.017998][ T7099] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  345.037726][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  345.045551][ T7099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.048749][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  345.064991][T10420] capability: warning: `syz.0.905' uses 32-bit capabilities (legacy support in use)
[  345.077339][ T7099] usb 5-1: Product: syz
[  345.081557][ T7099] usb 5-1: Manufacturer: syz
[  345.118275][ T7099] usb 5-1: SerialNumber: syz
[  345.165288][T10408] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  345.176423][ T1218] logitech 0003:046D:C623.0005: input,hidraw0: USB HID v0.08 Joystick [HID 046d:c623] on usb-dummy_hcd.2-1/input0
[  345.212840][ T1218] usb 3-1: USB disconnect, device number 5
[  345.385503][T10408] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  345.401755][T10423] fido_id[10423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  345.417221][T10408] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  346.013764][T10416] chnl_net:caif_netlink_parms(): no params data found
[  346.029045][T10408] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  346.051850][T10408] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  346.293364][ T7099] cdc_ncm 5-1:1.0: bind() failure
[  346.328754][ T7099] cdc_ncm: probe of 5-1:1.1 failed with error -71
[  346.352294][ T7099] cdc_mbim: probe of 5-1:1.1 failed with error -71
[  346.391507][ T7099] usbtest: probe of 5-1:1.1 failed with error -71
[  346.459033][ T7099] usb 5-1: USB disconnect, device number 2
[  346.761963][  T993] hsr_slave_0: left promiscuous mode
[  346.786941][  T993] hsr_slave_1: left promiscuous mode
[  346.823644][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.831114][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.891173][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.924534][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.963165][  T993] bridge_slave_1: left allmulticast mode
[  346.968868][  T993] bridge_slave_1: left promiscuous mode
[  346.995865][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.015900][T10464] loop2: detected capacity change from 0 to 512
[  347.030299][  T993] bridge_slave_0: left allmulticast mode
[  347.042361][  T993] bridge_slave_0: left promiscuous mode
[  347.048211][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.113673][T10464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.164413][T10464] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  347.167270][ T5784] Bluetooth: hci2: command tx timeout
[  347.252088][  T993] veth1_macvtap: left promiscuous mode
[  347.361664][  T993] veth0_macvtap: left promiscuous mode
[  347.402737][  T993] veth1_vlan: left promiscuous mode
[  347.408317][  T993] veth0_vlan: left promiscuous mode
[  347.479070][T10464] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #2: block 18: comm syz.2.911: lblock 23 mapped to illegal pblock 18 (length 1)
[  347.635705][T10464] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.911: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  347.683327][T10464] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.911: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  347.911278][T10464] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.911: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  347.940656][T10464] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 14: comm syz.2.911: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  348.003198][T10464] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 15: comm syz.2.911: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  348.075903][T10464] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.911: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  348.160755][T10464] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 17: comm syz.2.911: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  348.221415][T10464] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #2: block 18: comm syz.2.911: lblock 23 mapped to illegal pblock 18 (length 1)
[  348.237676][T10464] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 19: comm syz.2.911: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  348.431018][ T9887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.244683][ T5784] Bluetooth: hci2: command tx timeout
[  349.978099][T10501] "syz.2.917" (10501) uses obsolete ecb(arc4) skcipher
[  350.532207][  T993] team0 (unregistering): Port device team_slave_1 removed
[  350.585845][  T993] team0 (unregistering): Port device team_slave_0 removed
[  350.630218][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  350.682744][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.056379][  T993] bond0 (unregistering): Released all slaves
[  351.177567][T10416] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.184813][T10416] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.192027][T10416] bridge_slave_0: entered allmulticast mode
[  351.199969][T10416] bridge_slave_0: entered promiscuous mode
[  351.322302][ T5784] Bluetooth: hci2: command tx timeout
[  351.379253][T10416] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.396863][T10416] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.427837][T10416] bridge_slave_1: entered allmulticast mode
[  351.443559][T10416] bridge_slave_1: entered promiscuous mode
[  351.463230][T10516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.922'.
[  351.552898][T10416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.614233][T10416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.768461][T10416] team0: Port device team_slave_0 added
[  351.785437][T10516] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [255]
[  351.796203][T10516] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  351.811690][T10416] team0: Port device team_slave_1 added
[  351.835653][T10516] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  351.848291][T10516] One or more global auth toks could not properly register; rc = [-22]
[  351.868554][T10416] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.875937][T10516] Error parsing options; rc = [-22]
[  351.881217][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.908209][T10416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.949326][T10416] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.974179][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.006028][T10416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.127561][T10416] hsr_slave_0: entered promiscuous mode
[  352.148948][T10416] hsr_slave_1: entered promiscuous mode
[  352.161815][T10416] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  352.182287][T10416] Cannot create hsr debugfs directory
[  352.325432][  T993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.546181][  T993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.721433][  T993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.735028][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  352.745113][ T5089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  352.770497][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  352.795929][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  352.803917][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  352.821392][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  352.847169][  T993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.402369][ T5784] Bluetooth: hci2: command tx timeout
[  354.060237][T10573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.934'.
[  354.320343][T10587] ip_tables: iptables: counters copy to user failed while replacing table
[  354.773741][T10552] chnl_net:caif_netlink_parms(): no params data found
[  354.924177][ T5784] Bluetooth: hci3: command tx timeout
[  355.245604][T10416] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  355.373185][T10416] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  355.384170][T10416] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  355.437061][T10552] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.460127][T10552] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.475040][T10552] bridge_slave_0: entered allmulticast mode
[  355.502965][T10552] bridge_slave_0: entered promiscuous mode
[  355.530638][T10416] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  355.599424][T10552] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.614773][T10552] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.628160][T10552] bridge_slave_1: entered allmulticast mode
[  355.637767][T10552] bridge_slave_1: entered promiscuous mode
[  356.071172][T10552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.177593][T10552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.891909][T10552] team0: Port device team_slave_0 added
[  356.980546][T10552] team0: Port device team_slave_1 added
[  357.002295][ T5784] Bluetooth: hci3: command tx timeout
[  357.194010][T10552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.201021][T10552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.290635][T10552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.314274][T10552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.321254][T10552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.378091][T10552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.433306][T10416] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.656359][T10416] 8021q: adding VLAN 0 to HW filter on device team0
[  357.697683][T10552] hsr_slave_0: entered promiscuous mode
[  357.709050][T10552] hsr_slave_1: entered promiscuous mode
[  357.724978][T10552] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  357.742610][T10552] Cannot create hsr debugfs directory
[  357.769371][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.776590][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.916712][  T993] hsr_slave_0: left promiscuous mode
[  357.935566][  T993] hsr_slave_1: left promiscuous mode
[  357.960971][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  357.972240][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  357.981868][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  357.992216][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.001873][  T993] bridge_slave_1: left allmulticast mode
[  358.007758][  T993] bridge_slave_1: left promiscuous mode
[  358.022595][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.046196][  T993] bridge_slave_0: left allmulticast mode
[  358.080735][  T993] bridge_slave_0: left promiscuous mode
[  358.086860][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.140361][  T993] veth1_macvtap: left promiscuous mode
[  358.146074][  T993] veth0_macvtap: left promiscuous mode
[  358.151766][  T993] veth1_vlan: left promiscuous mode
[  358.170320][  T993] veth0_vlan: left promiscuous mode
[  359.089682][ T5784] Bluetooth: hci3: command tx timeout
[  360.548154][  T993] team0 (unregistering): Port device team_slave_1 removed
[  360.764376][  T993] team0 (unregistering): Port device team_slave_0 removed
[  361.113254][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  361.163531][ T5784] Bluetooth: hci3: command tx timeout
[  361.356909][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  361.810851][  T993] bond0 (unregistering): Released all slaves
[  361.936623][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.943885][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.995678][T10416] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.203814][T10552] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  363.220432][T10552] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  363.235462][T10552] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  363.268181][T10552] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  363.551760][T10416] veth0_vlan: entered promiscuous mode
[  363.632798][T10416] veth1_vlan: entered promiscuous mode
[  363.854185][T10552] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.463441][T10416] veth0_macvtap: entered promiscuous mode
[  364.506114][T10552] 8021q: adding VLAN 0 to HW filter on device team0
[  364.544232][T10416] veth1_macvtap: entered promiscuous mode
[  364.620842][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.628098][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.670240][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.677464][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.708837][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.732406][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.761394][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.775421][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.998505][T10416] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.413053][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.427843][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.439456][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.450355][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.474238][T10416] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.574232][T10416] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.614226][T10416] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.642551][T10416] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.692167][T10416] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.056333][T10552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  366.506201][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.590658][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.717443][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.755695][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.871894][T10552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.802495][   T23] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  369.115893][   T23] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  369.144050][   T23] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  369.181709][   T23] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64
[  369.211724][   T23] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  369.221427][   T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.229941][   T23] usb 7-1: Product: syz
[  369.234600][   T23] usb 7-1: Manufacturer: syz
[  369.239222][   T23] usb 7-1: SerialNumber: syz
[  369.249984][T10840] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  369.599953][T10840] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  369.726134][T10840] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  370.050168][T10552] veth0_vlan: entered promiscuous mode
[  370.207404][T10552] veth1_vlan: entered promiscuous mode
[  370.316277][T10552] veth0_macvtap: entered promiscuous mode
[  370.328545][T10552] veth1_macvtap: entered promiscuous mode
[  370.381742][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.397742][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.410160][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.426191][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.436667][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.452136][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.462904][T10840] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  370.470229][T10840] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  370.483962][T10552] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.503059][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.515243][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.527469][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.538899][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.549243][T10552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.562137][T10552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.579170][T10552] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.598770][T10552] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.618869][T10552] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.729866][T10552] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.762402][T10552] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.826658][   T23] cdc_ncm 7-1:1.0: bind() failure
[  370.838480][   T23] cdc_ncm: probe of 7-1:1.1 failed with error -71
[  370.846346][   T23] cdc_mbim: probe of 7-1:1.1 failed with error -71
[  370.857159][   T23] usbtest: probe of 7-1:1.1 failed with error -71
[  370.874005][   T23] usb 7-1: USB disconnect, device number 4
[  371.866612][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.910921][T10886] loop6: detected capacity change from 0 to 256
[  371.932182][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.995325][T10886] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[  372.115606][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.152880][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.192661][T10897] loop7: detected capacity change from 0 to 1024
[  373.221836][T10897] ext4: Unknown parameter 'context'
[  373.625835][T10913] loop7: detected capacity change from 0 to 128
[  374.875186][T10933] loop6: detected capacity change from 0 to 1024
[  374.918164][T10933] ext4: Unknown parameter 'context'
[  375.998918][T10938] TCP: MD5 Hash mismatch for [fe88::101]:20004->[ff02::1]:20004 L3 index 0
[  376.047731][T10940] loop7: detected capacity change from 0 to 1024
[  376.237885][T10940] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  376.285493][T10940] System zones: 0-1, 3-8
[  376.317387][T10940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  376.382659][T10940] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.527200][T10940] EXT4-fs error (device loop7): ext4_free_blocks:6694: comm syz.7.1020: Freeing blocks not in datazone - block = 0, count = 16
[  376.610649][T10940] EXT4-fs (loop7): Remounting filesystem read-only
[  376.825155][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  378.802701][T11007] loop6: detected capacity change from 0 to 256
[  378.918762][T11007] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[  378.952743][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  378.960823][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  379.072159][   T28] audit: type=1800 audit(1790774127.471:192): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1038" name="file2" dev="loop6" ino=1048707 res=0 errno=0
[  379.406286][T11015] ip_tables: iptables: counters copy to user failed while replacing table
[  380.994731][T11051] loop7: detected capacity change from 0 to 164
[  381.628743][T11059] rock: directory entry would overflow storage
[  381.635632][T11059] rock: sig=0x4f50, size=4, remaining=3
[  381.642438][T11059] iso9660: Corrupted directory entry in block 5 of inode 1792
[  383.015621][T11077] loop6: detected capacity change from 0 to 512
[  383.035297][T11077] EXT4-fs: Ignoring removed nobh option
[  383.264680][T11077] EXT4-fs (loop6): orphan cleanup on readonly fs
[  383.272613][T11077] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #15: comm syz.6.1059: corrupted inode contents
[  383.294555][T11077] EXT4-fs (loop6): Remounting filesystem read-only
[  383.301260][T11077] EXT4-fs (loop6): 1 orphan inode deleted
[  383.308397][T11077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  383.407379][T10416] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.578212][T11092] loop6: detected capacity change from 0 to 256
[  383.900084][T11107] loop7: detected capacity change from 0 to 1024
[  383.940597][T11107] ext4: Unknown parameter 'context'
[  384.012134][T10841] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  384.075690][T11107] loop7: detected capacity change from 0 to 128
[  384.075912][T10841] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  384.091726][T10841] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  384.102888][T10841] Buffer I/O error on dev loop7, logical block 0, async page read
[  384.677127][T11139] loop7: detected capacity change from 0 to 512
[  384.787476][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'.
[  385.519743][T11155] loop7: detected capacity change from 0 to 512
[  385.534650][T11155] EXT4-fs: Ignoring removed nobh option
[  385.599182][T11155] EXT4-fs (loop7): orphan cleanup on readonly fs
[  385.608942][T11155] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1080: corrupted inode contents
[  385.638231][ T1218] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  385.717238][T11155] EXT4-fs (loop7): Remounting filesystem read-only
[  385.727280][T11155] EXT4-fs (loop7): 1 orphan inode deleted
[  385.742202][T11155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  385.877999][ T1218] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  385.904435][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.910182][ T1218] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  385.985692][ T1218] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64
[  386.038849][ T1218] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  386.062763][ T1218] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.070848][ T1218] usb 7-1: Product: syz
[  386.098750][T11161] xt_hashlimit: size too large, truncated to 1048576
[  386.106624][ T1218] usb 7-1: Manufacturer: syz
[  386.126421][ T5784] Bluetooth: hci0: command 0x0406 tx timeout
[  386.142124][ T1218] usb 7-1: SerialNumber: syz
[  386.154296][T11149] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  386.416156][T11149] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  386.452757][T11149] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  387.092453][T11149] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  387.100029][T11149] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  387.321765][ T1218] cdc_ncm 7-1:1.0: bind() failure
[  387.358980][ T1218] cdc_ncm: probe of 7-1:1.1 failed with error -71
[  387.375818][ T1218] cdc_mbim: probe of 7-1:1.1 failed with error -71
[  387.493459][ T1218] usbtest: probe of 7-1:1.1 failed with error -71
[  387.519137][ T1218] usb 7-1: USB disconnect, device number 5
[  388.957983][T11219] loop6: detected capacity change from 0 to 512
[  388.970920][T11219] EXT4-fs: Ignoring removed nobh option
[  389.038381][T11219] EXT4-fs (loop6): orphan cleanup on readonly fs
[  389.049857][T11219] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #15: comm syz.6.1095: corrupted inode contents
[  389.259345][T11219] EXT4-fs (loop6): Remounting filesystem read-only
[  389.266158][T11219] EXT4-fs (loop6): 1 orphan inode deleted
[  389.273262][T11219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  389.339573][T10416] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.730600][T11237] 9pnet_fd: Insufficient options for proto=fd
[  390.342183][    T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  390.536607][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  390.565871][    T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  390.596002][    T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  390.623612][    T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  390.644469][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.653992][    T9] usb 7-1: Product: syz
[  390.658357][    T9] usb 7-1: Manufacturer: syz
[  390.663566][    T9] usb 7-1: SerialNumber: syz
[  390.686292][T11253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  390.910743][T11253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  390.969137][T11277] loop7: detected capacity change from 0 to 256
[  391.054111][T11277] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[  391.112290][T11281] 9pnet_fd: Insufficient options for proto=fd
[  391.168991][   T28] audit: type=1800 audit(1790774139.591:193): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1108" name="file2" dev="loop7" ino=1048710 res=0 errno=0
[  392.073935][T11253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  392.350804][    T9] cdc_ncm 7-1:1.0: bind() failure
[  392.371947][T11298] loop7: detected capacity change from 0 to 512
[  392.393488][    T9] cdc_ncm: probe of 7-1:1.1 failed with error -71
[  392.412585][    T9] cdc_mbim: probe of 7-1:1.1 failed with error -71
[  392.420428][T11298] EXT4-fs: Ignoring removed i_version option
[  392.428012][    T9] usbtest: probe of 7-1:1.1 failed with error -71
[  392.446242][T11298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  392.487252][    T9] usb 7-1: USB disconnect, device number 6
[  392.654418][T11298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.720963][T11298] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  392.942411][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.152471][T11319] loop6: detected capacity change from 0 to 256
[  393.262995][T11321] loop7: detected capacity change from 0 to 512
[  393.350853][T11319] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[  393.556197][T11321] EXT4-fs: Ignoring removed nobh option
[  393.630004][T11321] EXT4-fs (loop7): orphan cleanup on readonly fs
[  393.637519][T11321] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1118: corrupted inode contents
[  393.651313][T11321] EXT4-fs (loop7): Remounting filesystem read-only
[  393.658080][T11321] EXT4-fs (loop7): 1 orphan inode deleted
[  393.665213][T11321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  393.689402][T11318] 9pnet_fd: Insufficient options for proto=fd
[  393.736566][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.032702][T11331] loop6: detected capacity change from 0 to 1024
[  394.063224][T11331] ext4: Unknown parameter 'context'
[  396.783946][T11336] loop7: detected capacity change from 0 to 512
[  396.796943][T11336] EXT4-fs: Ignoring removed i_version option
[  396.959355][T11336] EXT4-fs (loop7): 1 truncate cleaned up
[  396.966539][T11336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.231179][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.445965][T11356] FAULT_INJECTION: forcing a failure.
[  397.445965][T11356] name fail_futex, interval 1, probability 0, space 0, times 1
[  397.470293][T11356] CPU: 1 PID: 11356 Comm: syz.7.1127 Not tainted syzkaller #0
[  397.477823][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  397.487909][T11356] Call Trace:
[  397.491212][T11356]  <TASK>
[  397.494164][T11356]  dump_stack_lvl+0x18c/0x250
[  397.498883][T11356]  ? do_syscall_64+0x55/0xb0
[  397.503519][T11356]  ? show_regs_print_info+0x20/0x20
[  397.508753][T11356]  ? load_image+0x420/0x420
[  397.513305][T11356]  should_fail_ex+0x394/0x4c0
[  397.518026][T11356]  get_futex_key+0x136/0x1030
[  397.522734][T11356]  ? futex_setup_timer+0xc0/0xc0
[  397.527705][T11356]  ? __asan_memset+0x22/0x40
[  397.532333][T11356]  futex_requeue+0x246/0x13c0
[  397.537017][T11356]  ? preempt_schedule_thunk+0x1a/0x30
[  397.542406][T11356]  ? try_to_wake_up+0x6f5/0x10e0
[  397.547345][T11356]  ? put_task_struct+0xc0/0xc0
[  397.552114][T11356]  ? wake_up_q+0xca/0x100
[  397.556453][T11356]  ? futex_wake+0x42a/0x4f0
[  397.560975][T11356]  do_futex+0x32b/0x3e0
[  397.565141][T11356]  ? __ia32_sys_get_robust_list+0x110/0x110
[  397.571044][T11356]  ? __lock_acquire+0x7d80/0x7d80
[  397.576078][T11356]  __se_sys_futex+0x3a9/0x440
[  397.580758][T11356]  ? __x64_sys_futex+0xf0/0xf0
[  397.585528][T11356]  ? __x64_sys_futex+0x21/0xf0
[  397.590301][T11356]  do_syscall_64+0x55/0xb0
[  397.594732][T11356]  ? clear_bhb_loop+0x40/0x90
[  397.599438][T11356]  ? clear_bhb_loop+0x40/0x90
[  397.604121][T11356]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  397.610031][T11356] RIP: 0033:0x7f452719e159
[  397.614450][T11356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.634065][T11356] RSP: 002b:00007f4527fcd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  397.642483][T11356] RAX: ffffffffffffffda RBX: 00007f4527425fa0 RCX: 00007f452719e159
[  397.650457][T11356] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc
[  397.658460][T11356] RBP: 00007f452723506b R08: 0000000000000000 R09: 0000000000000000
[  397.666430][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  397.674403][T11356] R13: 00007f4527426038 R14: 00007f4527425fa0 R15: 00007ffefdef0488
[  397.682393][T11356]  </TASK>
[  397.685897][    T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  398.082944][T11364] loop7: detected capacity change from 0 to 512
[  398.095689][T11364] EXT4-fs: Ignoring removed nobh option
[  398.243822][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  398.256854][    T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  398.706720][T11364] EXT4-fs (loop7): orphan cleanup on readonly fs
[  398.715194][T11364] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1129: corrupted inode contents
[  398.738420][T11364] EXT4-fs (loop7): Remounting filesystem read-only
[  398.746201][T11364] EXT4-fs (loop7): 1 orphan inode deleted
[  398.753332][T11364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  398.843587][    T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  398.874900][    T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  398.886263][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.926414][    T9] usb 7-1: Product: syz
[  398.930786][    T9] usb 7-1: Manufacturer: syz
[  398.950563][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.966301][    T9] usb 7-1: SerialNumber: syz
[  399.008445][T11348] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  399.294608][T11348] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  400.095601][T11348] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  400.101956][T11391] loop7: detected capacity change from 0 to 1024
[  400.110478][T11391] ext4: Unknown parameter 'context'
[  400.333825][    T9] cdc_ncm 7-1:1.0: bind() failure
[  400.391886][    T9] cdc_ncm: probe of 7-1:1.1 failed with error -71
[  402.067678][    T9] cdc_mbim: probe of 7-1:1.1 failed with error -71
[  402.077755][    T9] usbtest: probe of 7-1:1.1 failed with error -71
[  402.251421][    T9] usb 7-1: USB disconnect, device number 7
[  403.159661][T11432] loop7: detected capacity change from 0 to 512
[  403.173120][T11432] EXT4-fs: Ignoring removed nobh option
[  403.326342][T11432] EXT4-fs (loop7): orphan cleanup on readonly fs
[  403.333372][T11432] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1145: corrupted inode contents
[  403.372702][T11432] EXT4-fs (loop7): Remounting filesystem read-only
[  403.379441][T11432] EXT4-fs (loop7): 1 orphan inode deleted
[  403.386532][T11432] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  403.474801][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.929224][ T6919] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  404.582855][T11459] loop7: detected capacity change from 0 to 512
[  404.590242][T11459] EXT4-fs: Ignoring removed nobh option
[  404.653739][T11459] EXT4-fs (loop7): orphan cleanup on readonly fs
[  404.660879][T11459] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1150: corrupted inode contents
[  404.674727][T11459] EXT4-fs (loop7): Remounting filesystem read-only
[  404.682344][T11459] EXT4-fs (loop7): 1 orphan inode deleted
[  404.689851][T11459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  404.812811][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.862407][ T6919] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  404.900385][ T6919] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  404.933419][ T6919] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  404.979040][ T6919] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  405.022489][ T6919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.030574][ T6919] usb 7-1: Product: syz
[  405.055486][ T6919] usb 7-1: Manufacturer: syz
[  405.060197][ T6919] usb 7-1: SerialNumber: syz
[  405.094138][T11436] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  405.335255][T11436] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  406.203832][T11485] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  406.472017][T11490] loop7: detected capacity change from 0 to 512
[  406.472271][ T6919] cdc_ncm 7-1:1.0: bind() failure
[  406.479541][T11490] EXT4-fs: Ignoring removed nobh option
[  406.538220][T11490] EXT4-fs (loop7): orphan cleanup on readonly fs
[  406.548516][T11490] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1157: corrupted inode contents
[  406.692389][T11490] EXT4-fs (loop7): Remounting filesystem read-only
[  406.699968][T11490] EXT4-fs (loop7): 1 orphan inode deleted
[  406.774076][T11490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  406.786275][ T6919] cdc_ncm: probe of 7-1:1.1 failed with error -71
[  406.850649][ T6919] cdc_mbim: probe of 7-1:1.1 failed with error -71
[  406.868178][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.894936][ T6919] usbtest: probe of 7-1:1.1 failed with error -71
[  406.943590][ T6919] usb 7-1: USB disconnect, device number 8
[  407.291348][T11508] loop6: detected capacity change from 0 to 128
[  407.515503][T11508] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  408.833711][T11536] loop7: detected capacity change from 0 to 512
[  408.846748][T11536] EXT4-fs: Ignoring removed nobh option
[  408.876308][T11536] EXT4-fs (loop7): orphan cleanup on readonly fs
[  408.887536][T11536] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1172: corrupted inode contents
[  408.901170][T11536] EXT4-fs (loop7): Remounting filesystem read-only
[  408.908698][T11536] EXT4-fs (loop7): 1 orphan inode deleted
[  408.922897][T11536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  409.184304][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.552230][T11557] loop7: detected capacity change from 0 to 1024
[  409.580637][T11557] hfsplus: unable to parse mount options
[  410.578092][T11551] loop7: detected capacity change from 0 to 4096
[  410.715684][T11551] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  410.783684][T11551] EXT4-fs (loop7): Test dummy encryption mode enabled
[  410.850863][T11551] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  411.462662][T11551] fuse: Bad value for 'fd'
[  412.320902][T11608] loop7: detected capacity change from 0 to 512
[  412.334105][T11608] EXT4-fs: Ignoring removed nobh option
[  412.372490][T11608] EXT4-fs (loop7): orphan cleanup on readonly fs
[  412.409115][T11608] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1189: corrupted inode contents
[  412.605292][T11608] EXT4-fs (loop7): Remounting filesystem read-only
[  412.612822][T11608] EXT4-fs (loop7): 1 orphan inode deleted
[  412.626602][T11608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  412.724751][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.925403][T11620] loop7: detected capacity change from 0 to 1764
[  413.575766][T11647] loop7: detected capacity change from 0 to 256
[  413.619280][T11647] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[  413.686776][   T28] audit: type=1800 audit(1790774162.101:194): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1201" name="file2" dev="loop7" ino=1048712 res=0 errno=0
[  413.921745][T11659] loop7: detected capacity change from 0 to 1024
[  413.977547][T11659] ext4: Unknown parameter 'context'
[  414.345067][T11671] loop7: detected capacity change from 0 to 128
[  418.788550][T11777] loop7: detected capacity change from 0 to 512
[  418.795950][T11777] EXT4-fs: Ignoring removed nobh option
[  418.813364][T11777] EXT4-fs (loop7): orphan cleanup on readonly fs
[  418.820305][T11777] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1236: corrupted inode contents
[  418.833422][T11777] EXT4-fs (loop7): Remounting filesystem read-only
[  418.840705][T11777] EXT4-fs (loop7): 1 orphan inode deleted
[  418.852916][T11777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  420.071286][T11790] netlink: 'syz.0.1238': attribute type 4 has an invalid length.
[  420.328519][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.543594][T11805] "syz.2.1244" (11805) uses obsolete ecb(arc4) skcipher
[  421.491060][T11841] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1254'.
[  421.554632][T11841] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1254'.
[  423.221538][T11875] loop7: detected capacity change from 0 to 1024
[  423.251013][T11875] ext4: Unknown parameter 'context'
[  424.526450][T11918] loop7: detected capacity change from 0 to 1024
[  424.560268][T11918] ext4: Unknown parameter 'context'
[  427.554842][T12015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1303'.
[  429.439866][T12083] FAULT_INJECTION: forcing a failure.
[  429.439866][T12083] name failslab, interval 1, probability 0, space 0, times 1
[  429.467634][T12083] CPU: 1 PID: 12083 Comm: syz.7.1321 Not tainted syzkaller #0
[  429.475185][T12083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  429.485284][T12083] Call Trace:
[  429.488611][T12083]  <TASK>
[  429.491580][T12083]  dump_stack_lvl+0x18c/0x250
[  429.496313][T12083]  ? show_regs_print_info+0x20/0x20
[  429.501741][T12083]  ? load_image+0x420/0x420
[  429.506456][T12083]  ? __might_sleep+0xe0/0xe0
[  429.511156][T12083]  ? __lock_acquire+0x7d80/0x7d80
[  429.516241][T12083]  should_fail_ex+0x394/0x4c0
[  429.520983][T12083]  should_failslab+0x9/0x20
[  429.525532][T12083]  slab_pre_alloc_hook+0x59/0x300
[  429.530612][T12083]  kmem_cache_alloc_lru+0x4d/0x2b0
[  429.535782][T12083]  ? shmem_alloc_inode+0x28/0x40
[  429.540763][T12083]  shmem_alloc_inode+0x28/0x40
[  429.545583][T12083]  ? shmem_match+0x160/0x160
[  429.550203][T12083]  new_inode_pseudo+0x63/0x1d0
[  429.555004][T12083]  new_inode+0x22/0x1d0
[  429.559293][T12083]  shmem_get_inode+0x34d/0xcd0
[  429.564115][T12083]  shmem_mknod+0x5f/0x1c0
[  429.568859][T12083]  shmem_mkdir+0x33/0x60
[  429.573206][T12083]  vfs_mkdir+0x2a5/0x470
[  429.577460][T12083]  do_mkdirat+0x1dc/0x450
[  429.581796][T12083]  ? vfs_mkdir+0x470/0x470
[  429.586234][T12083]  __x64_sys_mkdirat+0x89/0xa0
[  429.591092][T12083]  do_syscall_64+0x55/0xb0
[  429.595609][T12083]  ? clear_bhb_loop+0x40/0x90
[  429.600315][T12083]  ? clear_bhb_loop+0x40/0x90
[  429.605019][T12083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.611039][T12083] RIP: 0033:0x7f452719e159
[  429.615554][T12083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.635660][T12083] RSP: 002b:00007f4527fcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  429.644093][T12083] RAX: ffffffffffffffda RBX: 00007f4527425fa0 RCX: 00007f452719e159
[  429.652069][T12083] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  429.660043][T12083] RBP: 00007f452723506b R08: 0000000000000000 R09: 0000000000000000
[  429.668035][T12083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  429.676041][T12083] R13: 00007f4527426038 R14: 00007f4527425fa0 R15: 00007ffefdef0488
[  429.684047][T12083]  </TASK>
[  432.227182][T12154] loop7: detected capacity change from 0 to 512
[  432.234702][T12154] EXT4-fs: Ignoring removed nobh option
[  432.390339][T12154] EXT4-fs (loop7): orphan cleanup on readonly fs
[  432.414473][T12154] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1343: corrupted inode contents
[  432.431445][T12154] EXT4-fs (loop7): Remounting filesystem read-only
[  432.438476][T12154] EXT4-fs (loop7): 1 orphan inode deleted
[  432.445663][T12154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  433.349600][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.143280][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0c03
[  435.680230][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1370'.
[  437.337407][ T5784] Bluetooth: hci1: command 0x0406 tx timeout
[  437.725194][T12323] syz.2.1383 (12323) used greatest stack depth: 17896 bytes left
[  438.161403][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0c03
[  438.264887][T12356] loop7: detected capacity change from 0 to 512
[  438.272864][T12356] EXT4-fs: Ignoring removed nobh option
[  438.295677][T12356] EXT4-fs (loop7): orphan cleanup on readonly fs
[  438.303785][T12356] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1393: corrupted inode contents
[  438.316640][T12356] EXT4-fs (loop7): Remounting filesystem read-only
[  438.323492][T12356] EXT4-fs (loop7): 1 orphan inode deleted
[  438.330525][T12356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  439.410608][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0c03
[  439.419369][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.373895][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  440.380870][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  441.508318][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0c03
[  442.411769][T12486] loop7: detected capacity change from 0 to 512
[  442.429401][T12486] EXT4-fs: Ignoring removed nobh option
[  442.466200][T12486] EXT4-fs (loop7): orphan cleanup on readonly fs
[  442.476231][T12486] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1425: corrupted inode contents
[  442.491244][T12486] EXT4-fs (loop7): Remounting filesystem read-only
[  442.498952][T12486] EXT4-fs (loop7): 1 orphan inode deleted
[  442.506258][T12486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  442.835537][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.027443][T12499] loop7: detected capacity change from 0 to 512
[  443.108946][T12501] 9pnet_fd: Insufficient options for proto=fd
[  443.131579][T12499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.145455][T12499] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  443.213866][T12499] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #2: block 18: comm syz.7.1427: lblock 23 mapped to illegal pblock 18 (length 1)
[  443.286306][T12499] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.1427: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  443.347858][T12499] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 12: comm syz.7.1427: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  443.387725][T12499] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz.7.1427: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  443.463520][T12499] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 14: comm syz.7.1427: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  443.545055][T12516] netlink: 'syz.0.1431': attribute type 4 has an invalid length.
[  443.578539][T12499] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 15: comm syz.7.1427: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  443.633763][T12499] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz.7.1427: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  443.776020][T12499] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 17: comm syz.7.1427: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  443.842414][T12499] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #2: block 18: comm syz.7.1427: lblock 23 mapped to illegal pblock 18 (length 1)
[  443.877962][T12499] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 19: comm syz.7.1427: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  444.020686][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0c03
[  444.276209][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.264693][T12634] loop7: detected capacity change from 0 to 256
[  450.309470][T12634] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  452.469599][T12673] loop7: detected capacity change from 0 to 256
[  453.441283][T12682] loop7: detected capacity change from 0 to 2048
[  453.585325][T12682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.769316][T12691] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  454.666121][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.985624][T12717] loop7: detected capacity change from 0 to 512
[  455.006606][T12717] EXT4-fs: Ignoring removed nobh option
[  455.041447][T12717] EXT4-fs (loop7): orphan cleanup on readonly fs
[  455.051400][T12717] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1479: corrupted inode contents
[  455.067644][T12717] EXT4-fs (loop7): Remounting filesystem read-only
[  455.075204][T12717] EXT4-fs (loop7): 1 orphan inode deleted
[  455.088576][T12717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  455.362872][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.751826][T12746] ip_tables: iptables: counters copy to user failed while replacing table
[  456.971225][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0c03
[  457.094643][T12758] loop7: detected capacity change from 0 to 512
[  457.108928][T12758] EXT4-fs: Ignoring removed nobh option
[  457.178449][T12758] EXT4-fs (loop7): orphan cleanup on readonly fs
[  457.194129][T12758] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.1491: corrupted inode contents
[  457.209333][T12758] EXT4-fs (loop7): Remounting filesystem read-only
[  457.217185][T12758] EXT4-fs (loop7): 1 orphan inode deleted
[  457.231163][T12758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  457.504753][T10552] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.059141][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0c03
[  460.466927][   T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.611936][   T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.695877][   T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.884398][   T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.445025][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  461.462852][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  461.471666][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  461.497787][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  461.512438][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  461.521637][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  462.765810][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'.
[  462.863153][T12861] bridge_slave_1 (unregistering): left allmulticast mode
[  462.870329][T12861] bridge_slave_1 (unregistering): left promiscuous mode
[  462.878558][T12861] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.158198][T12844] chnl_net:caif_netlink_parms(): no params data found
[  463.561569][T12844] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.569706][ T5089] Bluetooth: hci3: command tx timeout
[  463.604575][T12895] fuse: Bad value for 'fd'
[  463.610494][T12844] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.651249][T12844] bridge_slave_0: entered allmulticast mode
[  463.673486][T12844] bridge_slave_0: entered promiscuous mode
[  464.388998][T12844] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.412279][T12844] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.419605][T12844] bridge_slave_1: entered allmulticast mode
[  464.454545][T12844] bridge_slave_1: entered promiscuous mode
[  464.538327][T12844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.584026][T12844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.917934][T12844] team0: Port device team_slave_0 added
[  464.938582][T12844] team0: Port device team_slave_1 added
[  464.990352][   T11] hsr_slave_0: left promiscuous mode
[  465.014986][   T11] hsr_slave_1: left promiscuous mode
[  465.034400][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  465.052343][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  465.088369][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  465.099297][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  465.113423][   T11] bridge_slave_1: left allmulticast mode
[  465.129267][   T11] bridge_slave_1: left promiscuous mode
[  465.141907][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.188693][   T11] bridge_slave_0: left allmulticast mode
[  465.196948][   T11] bridge_slave_0: left promiscuous mode
[  465.232389][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.337968][   T11] veth1_macvtap: left promiscuous mode
[  465.343744][   T11] veth0_macvtap: left promiscuous mode
[  465.349427][   T11] veth1_vlan: left promiscuous mode
[  465.374862][   T11] veth0_vlan: left promiscuous mode
[  465.644402][ T5089] Bluetooth: hci3: command tx timeout
[  467.722083][ T5784] Bluetooth: hci3: command tx timeout
[  467.868436][   T11] team0 (unregistering): Port device team_slave_1 removed
[  468.030427][   T11] team0 (unregistering): Port device team_slave_0 removed
[  468.042205][ T5784] Bluetooth: hci2: command 0x0406 tx timeout
[  468.144566][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  468.257478][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  468.994635][   T11] bond0 (unregistering): Released all slaves
[  469.328555][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1558'.
[  469.377669][T13000] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.524592][T13000] bridge_slave_1 (unregistering): left allmulticast mode
[  469.531803][T13000] bridge_slave_1 (unregistering): left promiscuous mode
[  469.581344][T13000] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.684524][T12844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.706595][T12844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.782471][T12844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  469.802248][ T5089] Bluetooth: hci3: command tx timeout
[  469.805940][T12844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  469.831410][T12844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.932103][T12844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.116753][T12844] hsr_slave_0: entered promiscuous mode
[  470.152538][T12844] hsr_slave_1: entered promiscuous mode
[  470.192927][T12844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  470.221009][T12844] Cannot create hsr debugfs directory
[  472.165350][T12844] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  472.188476][T12844] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  472.207537][T12844] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  472.226702][T12844] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  472.497382][T12844] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.558603][T12844] 8021q: adding VLAN 0 to HW filter on device team0
[  472.585322][T13052] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼
[  472.593932][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.601164][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.646620][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.653892][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.581566][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'.
[  474.501881][T12844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.617299][T13092] 9pnet_fd: Insufficient options for proto=fd
[  475.010721][T12844] veth0_vlan: entered promiscuous mode
[  475.041568][T12844] veth1_vlan: entered promiscuous mode
[  475.103231][T12844] veth0_macvtap: entered promiscuous mode
[  475.131323][T12844] veth1_macvtap: entered promiscuous mode
[  475.169797][T12844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.185215][T12844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.196731][T12844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.210903][T12844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.225764][T12844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  475.237325][T12844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.261845][T12844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  475.284833][T12844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.310019][T12844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.325060][T12844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.337881][T12844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.351015][T12844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.362706][T12844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.387385][T12844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.401031][T12844] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.422485][T12844] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.431418][T12844] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.447451][T12844] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.314468][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.325701][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.661810][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.701216][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.077063][ T3435] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.342488][ T3435] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.554530][ T3435] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.957167][ T3435] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.464461][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  482.477484][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  482.486590][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  482.500111][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  482.611360][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  482.626805][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  485.062207][ T5089] Bluetooth: hci3: command tx timeout
[  485.943847][T13259] chnl_net:caif_netlink_parms(): no params data found
[  487.083600][ T5089] Bluetooth: hci3: command tx timeout
[  487.113251][T13259] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.132318][T13259] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.172321][T13259] bridge_slave_0: entered allmulticast mode
[  487.192649][T13259] bridge_slave_0: entered promiscuous mode
[  487.282613][T13259] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.290064][T13259] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.326243][T13259] bridge_slave_1: entered allmulticast mode
[  487.334704][T13259] bridge_slave_1: entered promiscuous mode
[  487.447071][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.519251][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.685572][T13259] team0: Port device team_slave_0 added
[  487.715262][T13259] team0: Port device team_slave_1 added
[  487.790621][ T3435] hsr_slave_0: left promiscuous mode
[  487.813317][ T3435] hsr_slave_1: left promiscuous mode
[  487.839471][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.887464][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.915637][ T3435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  487.928233][ T3435] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.955107][ T3435] bridge_slave_1: left allmulticast mode
[  487.961539][ T3435] bridge_slave_1: left promiscuous mode
[  487.970816][ T3435] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.989284][ T3435] bridge_slave_0: left allmulticast mode
[  488.005275][ T3435] bridge_slave_0: left promiscuous mode
[  488.019212][ T3435] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.142459][ T3435] veth1_macvtap: left promiscuous mode
[  488.148188][ T3435] veth0_macvtap: left promiscuous mode
[  488.184011][ T3435] veth1_vlan: left promiscuous mode
[  488.387262][ T3435] veth0_vlan: left promiscuous mode
[  489.347546][ T5089] Bluetooth: hci3: command tx timeout
[  491.496560][ T5089] Bluetooth: hci3: command tx timeout
[  492.091064][ T3435] team0 (unregistering): Port device team_slave_1 removed
[  492.220466][ T3435] team0 (unregistering): Port device team_slave_0 removed
[  492.309048][ T3435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  492.487551][ T3435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.138322][ T3435] bond0 (unregistering): Released all slaves
[  493.261263][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.268528][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.295247][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.318672][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.349587][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.426399][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.216761][T13259] hsr_slave_0: entered promiscuous mode
[  494.267715][T13259] hsr_slave_1: entered promiscuous mode
[  494.307019][T13259] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  494.331386][T13259] Cannot create hsr debugfs directory
[  498.165454][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0000
[  499.102268][T13259] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  499.125250][T13259] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  499.154901][T13259] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  500.481920][T13259] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  500.830985][T13259] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.877136][T13259] 8021q: adding VLAN 0 to HW filter on device team0
[  500.933329][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.940539][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.982568][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.989779][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  501.117470][T13259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  501.118838][ T5089] Bluetooth: hci1: unexpected event for opcode 0x0000
[  501.808895][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  501.844816][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  502.067275][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0
[  502.206871][ T5089] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  502.217072][ T5089] Bluetooth: hci1: Injecting HCI hardware error event
[  502.227908][ T5784] Bluetooth: hci1: hardware error 0x00
[  502.631121][T13259] veth0_vlan: entered promiscuous mode
[  502.697438][T13259] veth1_vlan: entered promiscuous mode
[  502.813802][T13259] veth0_macvtap: entered promiscuous mode
[  502.853629][T13259] veth1_macvtap: entered promiscuous mode
[  502.914091][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  502.952042][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.961925][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.002451][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.036408][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  503.058068][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.094585][T13259] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.125366][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.155161][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.173413][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.185334][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.195845][T13259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  503.209596][T13259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  503.236061][T13259] batman_adv: batadv0: Interface activated: batadv_slave_1
[  503.259229][T13557] netlink: 'syz.6.1678': attribute type 4 has an invalid length.
[  503.378050][T13259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  503.396841][T13259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  503.422205][T13259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  503.451669][T13259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.528297][ T5089] Bluetooth: hci0: unexpected event for opcode 0x0003
[  503.623432][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.657141][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.724032][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.731922][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.362434][ T5784] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  512.196687][  T993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.397023][T13747] dns_resolver: Unsupported content type (6)
[  512.515131][T13742] cgroup: fork rejected by pids controller in /syz0
[  512.713873][  T993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.967262][  T993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.566778][  T993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.586203][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  514.604155][ T5089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  514.613092][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  514.621234][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  514.630364][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  514.637971][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  516.803536][ T5089] Bluetooth: hci3: command tx timeout
[  517.977603][T13882] chnl_net:caif_netlink_parms(): no params data found
[  518.429876][T13922] netlink: 'syz.2.1737': attribute type 4 has an invalid length.
[  518.861731][ T5089] Bluetooth: hci3: command tx timeout
[  519.250057][T13882] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.453525][T13882] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.460867][T13882] bridge_slave_0: entered allmulticast mode
[  519.473407][T13882] bridge_slave_0: entered promiscuous mode
[  520.223380][T13882] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.389218][T13882] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.466622][T13882] bridge_slave_1: entered allmulticast mode
[  520.740485][T13882] bridge_slave_1: entered promiscuous mode
[  520.932705][ T5089] Bluetooth: hci3: command tx timeout
[  521.375659][T13882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.399246][T13882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.475969][  T993] hsr_slave_0: left promiscuous mode
[  521.494534][  T993] hsr_slave_1: left promiscuous mode
[  521.500820][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.509938][  T993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.521832][  T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.530014][  T993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.538554][  T993] bridge_slave_1: left allmulticast mode
[  521.552242][  T993] bridge_slave_1: left promiscuous mode
[  521.558064][  T993] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.587693][  T993] bridge_slave_0: left allmulticast mode
[  521.593744][  T993] bridge_slave_0: left promiscuous mode
[  521.606236][  T993] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.659018][  T993] veth1_macvtap: left promiscuous mode
[  521.665798][  T993] veth0_macvtap: left promiscuous mode
[  521.671567][  T993] veth1_vlan: left promiscuous mode
[  521.681718][  T993] veth0_vlan: left promiscuous mode
[  522.470790][   T28] audit: type=1326 audit(1790774270.831:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13995 comm="syz.0.1754" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0b9e159 code=0x0
[  522.971746][T14002] fuse: Bad value for 'fd'
[  523.022378][ T5089] Bluetooth: hci3: command tx timeout
[  524.653553][  T993] team0 (unregistering): Port device team_slave_1 removed
[  524.804687][  T993] team0 (unregistering): Port device team_slave_0 removed
[  524.880255][  T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  525.608435][  T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.245683][  T993] bond0 (unregistering): Released all slaves
[  526.399696][T13882] team0: Port device team_slave_0 added
[  526.515112][T13882] team0: Port device team_slave_1 added
[  526.553085][T13969] netlink: 'syz.2.1746': attribute type 4 has an invalid length.
[  526.860654][   T28] audit: type=1326 audit(1790774275.271:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.6.1756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a019e159 code=0x0
[  527.553769][T13882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.592494][T13882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.662050][T13882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.713523][T13882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.721683][T13882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.922345][T13882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  528.602851][T13882] hsr_slave_0: entered promiscuous mode
[  528.625513][T13882] hsr_slave_1: entered promiscuous mode
[  528.655235][T13882] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  528.702750][T13882] Cannot create hsr debugfs directory
[  531.714617][   T28] audit: type=1326 audit(1790774280.081:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14065 comm="syz.2.1766" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f312279e159 code=0x0
[  532.288007][T13882] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  532.299762][T13882] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  532.319552][T13882] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  532.330781][T13882] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  533.259932][T13882] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.305789][T13882] 8021q: adding VLAN 0 to HW filter on device team0
[  533.330842][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.338119][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.376563][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.383855][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.993388][T13882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.115791][T13882] veth0_vlan: entered promiscuous mode
[  534.158460][T13882] veth1_vlan: entered promiscuous mode
[  534.248182][T13882] veth0_macvtap: entered promiscuous mode
[  534.295306][T13882] veth1_macvtap: entered promiscuous mode
[  534.352962][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.374753][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.412042][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.437224][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.459819][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.480804][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.828508][T13882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  535.167335][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.212609][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.230106][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.272211][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.302076][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.312908][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.373240][T13882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.511613][T13882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.541812][T13882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.551839][T13882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.561414][T13882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.777571][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.806439][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.834077][T14123] netlink: 'syz.2.1785': attribute type 4 has an invalid length.
[  535.906912][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.939051][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.381230][T14161] loop1: detected capacity change from 0 to 512
[  537.389083][T14161] EXT4-fs: Ignoring removed nobh option
[  537.420561][T14161] EXT4-fs (loop1): orphan cleanup on readonly fs
[  537.433192][T14161] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.1793: corrupted inode contents
[  537.446725][T14161] EXT4-fs (loop1): Remounting filesystem read-only
[  537.453564][T14161] EXT4-fs (loop1): 1 orphan inode deleted
[  537.460591][T14161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  537.663807][T13882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.800148][T14176] loop1: detected capacity change from 0 to 128
[  537.825048][T14176] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  538.054217][T14177] netlink: 'syz.2.1796': attribute type 4 has an invalid length.
[  540.757594][T14329] netlink: 'syz.0.1810': attribute type 4 has an invalid length.
[  542.134226][T14360] futex_wake_op: syz.0.1819 tries to shift op by 144; fix this program
[  563.258885][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  563.271246][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  567.826165][T14990] xt_CT: You must specify a L4 protocol and not use inversions on it
[  573.429353][T15113] mmap: syz.6.1979 (15113) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  574.642550][T15137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1982'.
[  587.571707][T15665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2041'.
[  590.833180][T15952] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2060'.
[  591.315779][T15961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  591.323798][T15961] IPv6: NLM_F_CREATE should be set when creating new route
[  591.331132][T15961] IPv6: NLM_F_CREATE should be set when creating new route
[  591.338410][T15961] IPv6: NLM_F_CREATE should be set when creating new route
[  591.452485][T15966] netlink: 'syz.1.2063': attribute type 2 has an invalid length.
[  591.470898][T15966] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2063'.
[  594.333705][T16003] syz.0.2073[16003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  594.333961][T16003] syz.0.2073[16003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  624.694555][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  624.722072][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  637.011301][ T5089] Bluetooth: hci3: command 0x0406 tx timeout
[  639.949067][T17942] netlink: 'syz.1.2290': attribute type 1 has an invalid length.
[  639.979870][T17942] netlink: 'syz.1.2290': attribute type 2 has an invalid length.
[  642.650063][ T7099] IPVS: starting estimator thread 0...
[  642.902268][T18129] IPVS: using max 19 ests per chain, 45600 per kthread
[  644.258309][T18150] cgroup: fork rejected by pids controller in /syz2
[  650.695264][T18477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2345'.
[  650.723644][T18477] netlink: 'syz.2.2345': attribute type 10 has an invalid length.
[  650.767263][T18477] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  654.408394][T18636] netlink: 'syz.0.2356': attribute type 1 has an invalid length.
[  658.749405][T18914] (null): rxe_set_mtu: Set mtu to 1024
[  658.910525][T18914] infiniband syz0: set down
[  658.915668][T18914] infiniband syz0: added bond0
[  658.976903][T18914] RDS/IB: syz0: added
[  658.982535][T18914] smc: adding ib device syz0 with port count 1
[  658.989064][T18914] smc:    ib device syz0 port 1 has pnetid 
[  661.374403][T18953] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  661.606570][T18993] jffs2: notice: (18993) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  661.709057][T19064] overlayfs: failed to clone upperpath
[  663.343393][T18956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  663.412404][T18956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  663.907096][T18956] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.917061][T18956] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.927498][T18956] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  663.936828][T18956] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  667.160755][T19258] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.168274][T19258] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.626653][T19258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.699733][T19258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  668.786160][T19294] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2405'.
[  669.426566][T19258] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.442640][T19258] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.462097][T19258] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.477720][T19258] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.792867][ T5089] Bluetooth: hci3: unexpected event for opcode 0x2012
[  674.402042][T19534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2429'.
[  678.552691][T19688] 
[  678.555096][T19688] =============================
[  678.559954][T19688] WARNING: suspicious RCU usage
[  678.565467][T19688] syzkaller #0 Not tainted
[  678.569907][T19688] -----------------------------
[  678.574906][T19688] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage!
[  678.583396][T19688] 
[  678.583396][T19688] other info that might help us debug this:
[  678.583396][T19688] 
[  678.593778][T19688] 
[  678.593778][T19688] rcu_scheduler_active = 2, debug_locks = 1
[  678.601881][T19688] 1 lock held by syz.6.2445/19688:
[  678.607585][T19688]  #0: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2fc/0x1d70
[  678.617055][T19688] 
[  678.617055][T19688] stack backtrace:
[  678.623082][T19688] CPU: 1 PID: 19688 Comm: syz.6.2445 Not tainted syzkaller #0
[  678.630571][T19688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  678.640644][T19688] Call Trace:
[  678.643927][T19688]  <TASK>
[  678.646902][T19688]  dump_stack_lvl+0x18c/0x250
[  678.651658][T19688]  ? load_image+0x420/0x420
[  678.656193][T19688]  ? show_regs_print_info+0x20/0x20
[  678.661415][T19688]  ? load_image+0x420/0x420
[  678.665927][T19688]  ? print_tainted+0x14c/0x170
[  678.670755][T19688]  lockdep_rcu_suspicious+0x1e1/0x300
[  678.676157][T19688]  ieee80211_check_concurrent_iface+0x46b/0x950
[  678.682524][T19688]  ieee80211_open+0xc1/0x200
[  678.687220][T19688]  __dev_open+0x2cb/0x430
[  678.691653][T19688]  ? dev_open+0x190/0x190
[  678.695996][T19688]  __dev_change_flags+0x1e8/0x6a0
[  678.701054][T19688]  ? dev_get_flags+0x1c0/0x1c0
[  678.705835][T19688]  ? apparmor_capable+0x137/0x1a0
[  678.710913][T19688]  dev_change_flags+0x7c/0x1a0
[  678.715685][T19688]  devinet_ioctl+0x949/0x1d70
[  678.720383][T19688]  ? inet_ifa_byprefix+0x2a0/0x2a0
[  678.725502][T19688]  ? _copy_from_user+0xa5/0xe0
[  678.730318][T19688]  ? get_user_ifreq+0x12b/0x180
[  678.735246][T19688]  inet_ioctl+0x42b/0x560
[  678.739579][T19688]  ? tomoyo_path_number_perm+0x217/0x5e0
[  678.745234][T19688]  ? inet_shutdown+0x370/0x370
[  678.749996][T19688]  ? slab_free_freelist_hook+0x130/0x1a0
[  678.755677][T19688]  ? tomoyo_path_number_perm+0x4b7/0x5e0
[  678.761318][T19688]  ? __kmem_cache_free+0xba/0x1f0
[  678.766362][T19688]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  678.771839][T19688]  sock_do_ioctl+0xfc/0x310
[  678.776353][T19688]  ? sock_show_fdinfo+0xb0/0xb0
[  678.781221][T19688]  sock_ioctl+0x5be/0x7e0
[  678.785565][T19688]  ? sock_poll+0x3e0/0x3e0
[  678.790002][T19688]  ? bpf_lsm_file_ioctl+0x9/0x10
[  678.794981][T19688]  ? security_file_ioctl+0x80/0xa0
[  678.800117][T19688]  ? sock_poll+0x3e0/0x3e0
[  678.804542][T19688]  __se_sys_ioctl+0xfd/0x170
[  678.809166][T19688]  do_syscall_64+0x55/0xb0
[  678.813595][T19688]  ? clear_bhb_loop+0x40/0x90
[  678.818390][T19688]  ? clear_bhb_loop+0x40/0x90
[  678.823080][T19688]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  678.828984][T19688] RIP: 0033:0x7f74a019e159
[  678.833408][T19688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  678.853024][T19688] RSP: 002b:00007f74a111d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  678.861446][T19688] RAX: ffffffffffffffda RBX: 00007f74a0425fa0 RCX: 00007f74a019e159
[  678.869430][T19688] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000004
[  678.877408][T19688] RBP: 00007f74a023506b R08: 0000000000000000 R09: 0000000000000000
[  678.885386][T19688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  678.893362][T19688] R13: 00007f74a0426038 R14: 00007f74a0425fa0 R15: 00007fffeecdf5d8
[  678.901351][T19688]  </TASK>
[  679.058238][T19688] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2445'.
[  679.093182][T19688] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2445'.
[  679.116892][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2445'.
[  686.126705][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  686.133216][ T1295] ieee802154 phy1 wpan1: encryption failed: -22