last executing test programs:

15m15.465785352s ago: executing program 0 (id=1521):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x1f84, 0x2c, 0x20, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0xfff2}, {0x10, 0xd}, {0x10, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_bpf={{0x8}, {0x1f48, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_ACT={0x1ed0, 0x1, [@m_police={0xcb4, 0x1d, 0x0, 0x0, {{0xb}, {0xc40, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff0a, 0x3, 0xfffffff8, 0xfff, 0xb43, 0xfffffffd, 0x40, 0xb, 0x10000, 0x0, 0x5, 0xb, 0x2, 0xa, 0x3, 0x7, 0xb2, 0x9, 0x7, 0x40000, 0xfb, 0x8000, 0x5, 0xfff, 0x8, 0x1, 0x0, 0x9, 0x12b33cd4, 0x7, 0x5, 0xfffffffe, 0x5, 0x10001, 0x3, 0xa6000000, 0xd71, 0x3, 0x7, 0x1000, 0x2, 0x9, 0x4, 0x2, 0xa, 0x7, 0x8, 0x5, 0x80, 0xe808, 0x4, 0xffffffd2, 0x5c, 0xa60, 0x1000, 0x3ff, 0x6, 0x8, 0x0, 0x2, 0x6, 0x3ff, 0x0, 0x80000000, 0x6, 0x4, 0x3, 0x9fce, 0x9, 0x8001, 0xfff, 0x877d, 0x40, 0x0, 0x726, 0xb, 0x2d01, 0x1, 0x6, 0x2, 0xc, 0xa3a, 0xfffffff1, 0x4a4de691, 0x3, 0x6, 0x8, 0xcda, 0x8, 0xe3, 0x2, 0xaa, 0x5, 0x919a, 0x10, 0x2, 0x8, 0x2, 0x80000000, 0xfffffffc, 0xe2, 0x7, 0x7, 0x7e9901aa, 0x2, 0x8, 0x3, 0x8, 0x2, 0xb40, 0x97, 0xd, 0x0, 0x80, 0xb, 0x3, 0x3, 0x4, 0x0, 0x6, 0x9, 0x401, 0xffff, 0xad8, 0x2b, 0x1, 0x10001, 0x1615, 0x6, 0x6, 0x4, 0xf, 0x0, 0x8, 0x6, 0x5, 0xfffffffa, 0x7, 0x90000000, 0x9, 0x3, 0x9, 0x3, 0x6, 0x9, 0x2, 0x6, 0xf38, 0xb, 0x2bcc, 0x7, 0x0, 0xfcb, 0x401, 0x6, 0x7, 0x4, 0x6, 0xfffff548, 0xb7e, 0x10000, 0xfe80, 0xb2, 0x5, 0x55, 0x5, 0xc, 0x1, 0x4, 0x3, 0xffff0000, 0x0, 0x8, 0x8, 0x1, 0x5, 0xd4, 0x10000, 0x9, 0x7, 0x4, 0xfffffc00, 0x200, 0x9, 0x61, 0x3, 0x3, 0x64b, 0x9, 0x7, 0x80000001, 0x81, 0x8, 0x8, 0x2, 0x6, 0x2, 0x81, 0xc, 0xfffffffb, 0x8, 0x6, 0x1, 0x5, 0x5, 0x5, 0x2, 0x3ff, 0x1, 0x8, 0xb, 0x85a, 0x80000001, 0x6, 0x9, 0x2, 0x5, 0x6, 0x5, 0x4, 0x85a, 0x86, 0x101, 0x9, 0x7fff, 0x9, 0xe5, 0x8, 0x1, 0x8, 0x0, 0x4, 0x6, 0x9, 0x7, 0x2, 0x0, 0x9, 0x100, 0x3, 0x6, 0x10001, 0x0, 0x4, 0x7b9, 0x80000001, 0x7, 0x4, 0x2, 0x8, 0x9, 0x3, 0x93, 0xb9f3, 0x0, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffcdc, 0xf8, 0x4, 0x9, 0x17800000, 0x3, 0x4, 0x33, 0x81, 0x8, 0x80, 0x2, 0x9, 0x1, 0x0, 0x4, 0x8, 0x2, 0xa760, 0x8001, 0x8, 0x1, 0x3ff, 0x7, 0x1, 0x4, 0xe51, 0x3e6, 0x5, 0x0, 0x5, 0x5b9, 0x0, 0x5, 0x8, 0x7b80, 0xc, 0x8, 0x10, 0x6, 0x2, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0x85, 0x5, 0x10, 0x8, 0xff, 0x401, 0x200, 0xff, 0x40, 0xd, 0xffff, 0x5, 0x6, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x7, 0x4, 0x2, 0x4, 0x4, 0x0, 0x0, 0x8, 0x80000001, 0x8b, 0x8, 0xfffffffb, 0x2, 0x0, 0x200, 0x5, 0x3, 0x9, 0x3326, 0x6, 0x6, 0x2, 0x8, 0xa, 0x5, 0xf, 0x200, 0x1, 0x2, 0x81, 0x9f, 0x1, 0xfffffffe, 0xffffff07, 0x1, 0x6, 0x9a4c, 0x32a3a3da, 0x81, 0x0, 0x9, 0x8, 0x3, 0x3, 0x0, 0x2, 0x7ff, 0x0, 0x6, 0xf, 0x2, 0x8, 0x10001, 0xfff, 0x1, 0x7f, 0x9, 0x2, 0x1d6, 0xd3f, 0x3, 0xffffffff, 0x7, 0x16bc, 0x1, 0x10, 0x2, 0x8000, 0x7fff, 0x10000000, 0x9f73, 0x88, 0x6, 0x4, 0x2, 0x8, 0x8, 0x9, 0xdc, 0x8001, 0x45, 0x7fff, 0x401, 0x80000001, 0xffff, 0x6548, 0x9, 0x40, 0x9, 0x2, 0x52731fb6, 0x23, 0x400, 0xf, 0x1, 0x1, 0x3, 0x1, 0x1ff, 0x6, 0x2, 0x4, 0xffffffff, 0x1, 0xfffffffc, 0x8, 0xcff, 0x5, 0x29fc4b1a, 0x0, 0x5, 0x3, 0x722ee72c, 0x6, 0x9, 0xfff, 0x0, 0x0, 0x3, 0x0, 0x100, 0xd, 0xfff, 0x7, 0xead5, 0x40, 0x5, 0x80000001, 0x5, 0x7f1, 0x85, 0x4, 0x8, 0x7, 0x2a, 0x9, 0x9, 0xe08, 0x5, 0x6, 0x8, 0xfffffff8, 0x9, 0x6dc, 0xfff, 0xc, 0x8, 0x8, 0x4, 0x200, 0x0, 0x6, 0x7, 0x0, 0x6, 0x80, 0x4, 0x81, 0x7, 0x5, 0x6, 0x0, 0x100, 0x6eaa, 0x7, 0x9bc, 0x24, 0x0, 0x545, 0x8001, 0x1, 0x5, 0x8000000, 0x3ff, 0x9, 0x8, 0xfffffff0, 0x9, 0xc, 0x8, 0x10, 0xff, 0x0, 0xffff, 0x9, 0xc6b4, 0x1, 0x7fff, 0x1, 0x9, 0x2, 0x1e00, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x10, 0x66472fee, 0xfffffff7, 0x2, 0x101, 0x3, 0x9, 0x0, 0x15f, 0x2, 0x80000000, 0x44, 0x7, 0x0, 0x4, 0x8, 0x3, 0x9, 0x1, 0x6, 0x80, 0x7fd, 0x40, 0xc, 0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x3, 0x75c7a422, 0x57e, 0x3ff, 0x7, 0xfff, 0x1a3e, 0x5, 0x4, 0x7fffffff, 0x0, 0x4, 0x4bf4ed6d, 0x4, 0x2, 0x4, 0x7, 0x6, 0x4, 0x3, 0xfffffff6, 0x2, 0x10000, 0x311, 0x2dfd, 0x5, 0x4, 0x80000001, 0x9, 0x0, 0x3, 0x200, 0x7, 0xfffffff8, 0x1, 0x6, 0x6, 0x6, 0x1, 0x4, 0x9, 0x7, 0x1, 0x5, 0x9, 0x0, 0x7fffffff, 0x9, 0x7, 0x5, 0x0, 0x1, 0x9, 0x8, 0x6, 0x400, 0xa, 0xb, 0x8, 0x2, 0x1, 0x0, 0x5, 0x3, 0x4000000, 0x5, 0x7, 0x1ff, 0x3ff, 0x2, 0x81, 0x3ff, 0x8, 0x82, 0x8, 0x844d, 0x80000000, 0xf, 0xf9b6, 0x3ff, 0x3, 0x0, 0x7, 0x8, 0x5, 0x3ff, 0x0, 0xfff, 0x4a, 0x0, 0x5, 0x6, 0x1, 0x9, 0xfffff03c, 0x8, 0x6, 0x7675, 0x428, 0xc, 0x7fff, 0x0, 0x200, 0x9, 0xfff, 0x1, 0x7, 0x4, 0x1, 0x1000, 0x6, 0x575, 0x4, 0x101, 0x9, 0x2, 0x9, 0x7, 0x7, 0x200, 0x3, 0x4, 0x3, 0xfffffffa, 0x9, 0x2, 0x1ff, 0xffff, 0xff, 0x75, 0xb, 0x7b7c9473, 0x40, 0x4, 0x8001, 0x6, 0x1613, 0x100, 0x6, 0x7fffffff, 0x0, 0x5, 0xffffff82, 0x3, 0x400, 0x4, 0xa, 0xfc, 0x7fffffff, 0x1, 0x0, 0x8, 0x472d, 0x3, 0x5, 0x8, 0x7fffffff, 0xa7d4, 0x434c, 0x1, 0x81, 0x1e9779ca, 0x2, 0x8, 0x1, 0x6, 0x9, 0x9, 0x511a, 0x4, 0x48f, 0x37bf, 0x7, 0x6e3, 0x8, 0x3, 0x80000000, 0x1, 0x2, 0xea, 0x5, 0x1, 0x4, 0xfffffc01, 0xffffffff, 0x2, 0x1ff, 0x8, 0xff, 0xe498e9d, 0x8, 0x7, 0xa, 0xfffffffa, 0xfffffffd, 0x7, 0x4, 0x9, 0x3861, 0x2, 0xc, 0x2, 0x8001, 0x6, 0x3, 0x9, 0x4, 0x8, 0x9, 0x1, 0x3, 0x7, 0x0, 0x6, 0x7, 0x20000000, 0x3, 0x3, 0x9, 0x0, 0xac, 0x6, 0x8, 0x7]}]]}, {0x4a, 0x6, "1f616bba306ca4288765621ac640c956b4bb239c2022ac473f7ef47490062d25809a2cbb214a919ec40f502f3640d13584b125c33b7f75e678acbf8c28198ca1c8cb8500e08f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x106c, 0x10, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1757, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xcabe, 0x1, 0x10000000, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x1ac, 0x10, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x9, 0x10000000, 0x400, 0x7}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x7, 0x4, 0x3}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x4, 0x3, 0x2, 0x1000}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3812, 0x5, 0x583, 0x9}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6752, 0x33e, 0xffffffffdffffff0, 0x7, 0x9}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x3, 0x7, 0x200, 0x8f}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfbf, 0x9, 0x4, 0x3a9, 0x2}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x7, 0x0, 0x101}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x7, 0x10000000, 0x9, 0xb320}, 0x77}}]}, {0x84, 0x6, "206e9b59103829d4b15e66fd4ebfa9eca90e9abad23b9c6560519514609f58352166d4a4c013d4bb709e6e608e55487d7341901765eec882ab808b459f11104404b9d7c8f4003eb8bc302dee898d955d9fb70fec4d97837ff2ecb27248511e42e59f9ccbaf0ca8d96f3e1d52940b227007f9d787af100032eaca83e06a97bf1f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0x8, 0x9, 0x6, 0x1}, {0xc000, 0xc, 0x8, 0x2b}, {0x101, 0x7f, 0x0, 0x8}, {0x9, 0x7, 0x4, 0x1}, {0x3, 0x1, 0x0, 0x5}, {0x9, 0x7, 0xe8, 0x9}, {0xbbc9, 0x4, 0x16, 0x80}, {0x100, 0x5, 0x2, 0xffff}, {0x689, 0xa6, 0x2, 0x1}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x1f84}}, 0x0)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28)
r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f00000000c0))
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r8, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a0000000000006111a000000000009500000000cd0000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
shutdown(r8, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)

15m14.524349223s ago: executing program 0 (id=1523):
mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x2208004, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
inotify_init()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000900)='\x10\x8b\xac\xdfFz\xb9\xa4\xc7\xf9=\xaa=U\xda\xec\rZ\x90t\'f\x05\x8f?%\xdcN*\xdaEp\xd6\xe7\x9er\xa7\xaeA\x86\xb8\xd0\x1c\x06,u\x10\xfb\x8fQO\xc3XU\xf6\xbb\xcc\xc3E\xe2bNU\x1f\xdd\x84\t\xf4\b\x15\x00\x96\xa1i\x85\x88\f:\x1c\"\xb4Y\xd07p\x03D\x03\x00\xaa\xa2U\xe2\x14\xb8\x11\n:\xe3J\xb3\xcaf\x81\x0ek-\x90\x8f\x81\x8c2\x04c\r\xa1\x8e\x15\x85\xde\x10\xf1n\x96\xc8\xa1\xec\x9e*\a\x0e\x7f\xb5.M\xbb\x9a\xf2\xe6\x18%\xc1\x80B\xda\xd5\x12\xae\xf2\x8e\xc4VO\xb6\x96\xa4j\xcb\xc3C\x83\x96\x85\x99\x97\xb4\x10\x85\x1e\'.}\x19Z[\x87\xb4\x97\x98\xa1oG\xa3\x9b\xcb\x18B\xba\'l\xb5a\x1a\xed\xc8n\xb4\x1c`\xca\xa6\xb3\x9b\xbfQ{\xe2o\xe8\'\xbaiu\xd5\\\x1dl\x95\x14`\x84\xb6\xc5\xb7\xa0Z\xd7\xf9E#\xaa\xc6g\x8d}n\xd7\xd4\\S\x18R\xae\xf6\xe4\xd5}\x8f\"+\xa8\xbb\xee,S=\'m\x8c`H\xcd\x18\bPpF\xbc\xae\x161\x92\xd9\xbe\xe1\xa4\x10cR', 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000)
write$dsp(r3, 0x0, 0xfffffe59)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4044000)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r5 = accept$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0)

15m14.301190391s ago: executing program 0 (id=1524):
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000340)={0x7, 0x1, 0x2, "effa5c95b46ba3f008e3fcb40e034512ae3029a817a0f6c1b83f51619a54dc11", 0x584e4f53})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$key(0xf, 0x3, 0x2)
socket$netlink(0x10, 0x3, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x40, 0x40}, 0xfffffffffffffec6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8d70418, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4003, 0x2}, 0x50)
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil})

15m13.493439897s ago: executing program 0 (id=1526):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/238], 0x119)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05604, &(0x7f0000000100)={0x8, @raw_data="729d2be8a81dbe044e4d3132923b8d7f4af476784874aacc0d873bae6a0813223ca4ca16900de311ef48fa4a4abbd801a17df1f3aaf7f2be36dfab20ed9865bb3cc1bc55c958d2fd09ed111d7d4bb94d2dc0c8564e1e4b9c2f1cc0be482a98d750ced0f31ce1b4538f966f2de957cf766280d4081cc5f9c937e2a7385264256009d9f5a15406154b01b523b6f49471f852500c5e813b5c8cf677183277465e9e776554b01eb4ccd3cecde58da08b564ea9c6d4fd86e0463bae754c0589045f733416c2481bbf919e"})
r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000006800010024bd7000feffffff0a0000000000000018000880140001000000000000000000870004001300a2f5060007000700000008000500", @ANYRES32=r7, @ANYBLOB="aca73e6361503f1c1422796b5030dd3a0d50f7e6623ffd3bf0beb212619bcb7d8562112d7233af8649a3f0453790237f0529e1fd910a9b92b2830b08ebfb4f683015a7d984f728d85198f45010f1203c0451545735b99b6fbe84c3e82c5a087dd44641d03aa11f8b0ffeb1b8cc13f37495c55206348934ecb80ea2074cdfa8e9de2bca5a1ff9f0b732cbd36f75b73cb97789acfd7001f73350fa084eca383449ca07b786931453c36e19a8d859a19ce0506c7501aea6d4915d90602946830e2387501f75dae31cd419a29ecde9d136a185556d7a2cbf7c175a2c00e27882bd5e4c6412b8c2c1a3c46b0a2da7db67c09fcf971cc0396c8d735a480b62dd7a798db1d45227c5648495ff9fdf6f483b99f927dfe3cdd7f1849066815bdbc04c98365905032930f052d0804a4e5801a12777af74a4c498049a6c75f9d53877fc4cc7073d37a835e980ff2bb0e84a85e6192c3823b2b410a64ad32ce929a6ff8cc25a07cc302fdb57126aea00b329b59521556132a7e54e9babb10ee46ab162308a369f75a4a0ea9f2b12bc282d8bd5"], 0x40}, 0x1, 0x0, 0x0, 0x200608a0}, 0x40040d0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xb, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010)

15m6.644201572s ago: executing program 0 (id=1547):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
unshare(0x22020400)
socket$inet6_sctp(0xa, 0x1, 0x84)
flock(0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50)

15m0.614913486s ago: executing program 0 (id=1559):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)

14m45.349583577s ago: executing program 32 (id=1559):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)

3m54.654195261s ago: executing program 1 (id=3292):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)

3m54.285729583s ago: executing program 1 (id=3294):
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x7fe)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdir(0x0, 0x191)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
lstat(&(0x7f000001de80)='./control\x00', 0x0)
write$dsp(r0, &(0x7f00000001c0), 0x0)

3m53.408001891s ago: executing program 1 (id=3296):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r3)
r4 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [<r7=>0x0, 0x0, 0x0, <r8=>0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000500)=[0x0, 0x0], 0x3, 0x8, 0x0, 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xfff, 0x0)
timer_create(0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x1, 0x0, &(0x7f0000000000))
r9 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x10, 0x0, &(0x7f00000003c0))

3m51.97532627s ago: executing program 1 (id=3300):
socket$inet(0x2, 0x2, 0x0)
mount$afs(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
io_setup(0x81, &(0x7f0000001440)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000008c0)=[0x0])
close_range(r1, 0xffffffffffffffff, 0x0)

3m50.342618293s ago: executing program 1 (id=3304):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0x4000, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)

3m49.357039824s ago: executing program 1 (id=3309):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)=0xa7, 0x1)
syz_open_dev$radio(0x0, 0x1, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf})
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24048084)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r5, &(0x7f0000000080)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240410500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
listen(r5, 0x80)

3m39.896200484s ago: executing program 2 (id=3327):
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000009}, 0x20000085)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r0 = inotify_init()
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
r2 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="63296f62bd5b16d7a496d62cd8bb810be9dcb97471decb814774da3acbc074f7fd14ac0b95ee52ab5b4080813a67b324e319588e5c96f7bb2f5261048f27a7bd4056d2fdf0878fa63ec2cc32fdb9efb974ec513da9c8ffa552cfb6451fffda7e36b1fb73bfbabfe6616710209326b6ff8549db3fe4b173a368e89727fa374045424b3dddbecbc07f8d660f83cfd622fab6bf312a460cfcd594d51a0ea993a9e582be46fc6689158f1a0cb42c57983a94415bd1bb28cafca5b4a35697ab869a401f3940ec7324e3576a3d", 0xca}, {&(0x7f00000003c0)="d839e796be2e73f65b4fd8d6bf9d", 0xe}], 0x2}}], 0x1, 0x480e0)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
tkill(r2, 0xb)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)
r5 = memfd_create(&(0x7f0000001b40)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\x05\x00\x00\x00\x00\x00\x00\x00\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x4)
execveat(r5, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000)
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x1)

3m38.565129026s ago: executing program 2 (id=3328):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b8c373be35c6e17aa31046a876c1d0000007ea60864160af26508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40)

3m38.465752582s ago: executing program 2 (id=3330):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0)

3m34.212966076s ago: executing program 33 (id=3309):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)=0xa7, 0x1)
syz_open_dev$radio(0x0, 0x1, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf})
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24048084)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r5, &(0x7f0000000080)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240410500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
listen(r5, 0x80)

3m34.1497477s ago: executing program 2 (id=3340):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200970}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c)
symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f00000002c0)='./file0/file0\x00')
open(&(0x7f0000000000)='./file1\x00', 0x105101, 0x95)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000000))

3m31.21853549s ago: executing program 2 (id=3344):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="baf909eb4380105430ae7fae24e25921d8d0c94d96470126054b98454b1aba64adb9536b37b6dc83015c787601023a05819996d428409fd83c762c111fda09bc1378e3a9d410617cc3d1b692428d3d65f9dd86c2e487f43231d723c747a64cb800f78f19f9667d4b9eace0367283f9bea5893c31dc771f1219d1ca0c630642fe71efa4ee0f91ba1d37f2ca60528243843e121f5092bf5a3a3f5418e542", 0x9d}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4008000)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000011c0)="e83a", 0x2}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="0b571145b1e0f1f75cf047903414f42cfd01", 0x12}], 0x1}, 0x8840)

3m29.716321955s ago: executing program 2 (id=3348):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x2, 0x0, 0x8, 0x7, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r5], 0xc4}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')

3m13.722809468s ago: executing program 34 (id=3348):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x2, 0x0, 0x8, 0x7, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
ioctl$SG_IO(r3, 0x2285, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r5], 0xc4}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')

37.897495199s ago: executing program 4 (id=3705):
socket(0x10, 0x3, 0x0)
inotify_init()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x80002, 0x0)
r3 = syz_open_dev$vbi(0x0, 0x2, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

33.013563145s ago: executing program 4 (id=3712):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f0000000280)={[{@dax_always}, {@block_validity}]}, 0x0, 0x4bc, &(0x7f0000000a40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x6c)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'ip6gre0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0)
getresgid(0x0, &(0x7f0000000300), 0x0)

30.491537875s ago: executing program 4 (id=3716):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket(0x15, 0x6, 0x40000000)
sendmsg$nl_generic(r0, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0x0)
fchdir(r6)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)

28.29387269s ago: executing program 4 (id=3723):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000090001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)

28.131839671s ago: executing program 4 (id=3724):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="baf909eb4380105430ae7fae24e25921d8d0c94d96470126054b98454b1aba64adb9536b37b6dc83015c787601023a05819996d428409fd83c762c111fda09bc1378e3a9d410617cc3d1b692428d3d65f9dd86c2e487f43231d723c747a64cb800f78f19f9667d4b9eace0367283f9bea5893c31dc771f1219d1ca0c630642fe71efa4ee0f91ba1d37f2ca60528243843e121f5092bf5a3a3f5418e542", 0x9d}, {&(0x7f0000001440)="cfa55f1e3a54a014dcaa73dcaf2878521419acdae39808736a94d24824b5030759db1805a982a286dd546d7ceca55dd0d0634079fe75b61f519c73e004f8e919920669175d4133de79c936dba86a9862f0b08db87fddf1553e8b15ecabb462c1ab6c37d25e17d0a0cea63b0d67cd1da7f3596e74b933c5381b6a0d7c54b2d583ac5b5757c4d702c21f684eafe63b075f5721c46c0a932bd17a98ec8bf1774b6546d885e9988f57c37c41660f5368a81920b1fdc667b6670347368221db234a31bf89db7e7f8bfeea1e726f781a653e6d8a9971095e09560e5435ec8bcbf99c0e6c48a73970c42c404bcd35997065ff71184eebf1678eed9689b1aa60e629cc785762bf7c345ee83bfa98029043dc57b2d4da7eadff0fb54e59bbc6d3ff3d8580bb76512530b2b2a3c19ad2bb1387791d574a666e5c68dced501d750ff0fcdd7cd064e341559f7ef93da28b4c1da9d50c4a7eb78dfbd168bfc6f015090bc6db78ff46d18968ed336f89cbb802bf9992c6bda5bc9f19666f4d62e16252d0b936cce0586ec1a8dd79cb38958fb168b8406a6a3af373019a5126fc05d0783337180a9b7a350e9fa7b60047d3f56fdbe70154ac3cc6051eda85a5a3221e150d19066213299d4147780b97b1c7e5a7043545220188d772c681b20335b7b7bb92d5caeb27dd05a8bf3b8d576bccaced8e05ff1ea7031dd07a109d68b677de5473792213eafbf7c001c90bb0674043edee238ec655de24a30428901a131d5f4936909457a963f377147c5b54fa39f23857f8fb2b09f7a72d9c50c5cb758ca635c15686ea0cfb3875ff178513e01b7ec79234801c8eefb57601b0d9bd4e5687cdbf815fa4b1aa9cf2e29be5446a3acdc4318418f091ab20b52170619d035b13dcb8c2a0eba1d6aa6521bcec4ca2cf5d4ef72e8a063020d26d375efdcb68ac7594aa52d1d270d35151b43479cbef33e178e3cb9908bb2932b4ec90fdf58b5cc0a1243ea9acc0e40f241cef7a544bdf2f86e32bc0f9bc829e56740cb12602bf433959dab9f17e59df9c49c943d16b83669df79a34210dec4a0f3bea0d07f057589d65d96a46f72dedb65fd1d41aaa1c8631bd1c9342c4e8c25f7669cc53e7ea621f1038554e4f315da42f0212ae8c83957aaf75fd1ff11b6d52816a8baf8ae6c5bd32f4076874b13118f2c9901099aa26169bc1c89e39f8eda004ecae0fc58a7b65f15facd87e4d6ce9d4eaebd35550e7caa91634337f2f589b0198e93f00300dcc02b704d466e2d05168d4142237d517276431e0f835084407cefea93d6a17df4e4bd5aa5a6b1362270cb6583b6df3f9933e7f5f1c5128614c221cf440bb053ced3ebe43984f8cb29ba11fff86c0435f7f3ab60467517c84298a8c3ddd35ae31003f1af7a1522a444633eed8eabc9171acf29944232b72cce1369aef40d73cfc9ad50fa4d09b42fae9b7f2ea54dbe6c73485662d1682bd320c90e577773cc832944bc47ea66c612909d782007e1acc916654565b57d627a32325e1064866443e2750796124fdf7c32c8d0fc2f67c36d453c23212ae6c9181ac289031478777ff9990bdd4b29a31b8ef69109d164f08786a887f2502b7a3f170116504fff1b59a1d5a3e6ede9772a76c185dede478f26965c4fde30ecb0e106da12da089afdd0bd87eea1cedf46e7d431f53118958e8df7282ccf1394a208a63d8e673a791f4c1b8149d2410c6ee1a44e808615e7a89ca6e7157aed5437042d30b02bc03e1d4201742dba2a63dfce2", 0x4e3}], 0x2, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4008000)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000011c0)="e83a", 0x2}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="0b571145b1e0f1f75cf047903414f42cfd01", 0x12}], 0x1}, 0x8840)

27.825669813s ago: executing program 4 (id=3725):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
accept$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x50)
connect$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, 0x0, 0x0}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1588046bbaf700007a0003000400080004000000000008000d0000000000b472bcfd6b2ec2d4a0bc4ce36fe30a7cd492bfb4addfc61e2cb860b45578ac5bdcf57b07efa8881b0d9d10864b4f011926dede9030c2cdd20219b0a53898b24bf1568f5232d3d8103c8655c638850b55993bc2847b079a797f210d6163a602eecb5397d204853be41a52ba2246c7d0002fb94ad99b10ba7f46cc379669f1938a4234"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000040), 0x0)

24.02880961s ago: executing program 5 (id=3730):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe88000000000000000000000000000100"/351], 0x254}}, 0x0)

20.203997563s ago: executing program 5 (id=3742):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x2, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "abb99279fd89da307583e654afb42af2dc91b30b60e83d50", "66eb64f2e8a3742962ae5b2fb03f495701288cf603c82fce6302900c99be5aab"}}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000000280)="$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")
tgkill(r0, r0, 0x2b)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006)

13.560311341s ago: executing program 5 (id=3749):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)="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", 0x4e4}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4008000)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000011c0)="e83a", 0x2}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="0b571145b1e0f1f75cf047903414f42cfd01", 0x12}], 0x1}, 0x8840)

11.445708689s ago: executing program 35 (id=3725):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
accept$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x50)
connect$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, 0x0, 0x0}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1588046bbaf700007a0003000400080004000000000008000d0000000000b472bcfd6b2ec2d4a0bc4ce36fe30a7cd492bfb4addfc61e2cb860b45578ac5bdcf57b07efa8881b0d9d10864b4f011926dede9030c2cdd20219b0a53898b24bf1568f5232d3d8103c8655c638850b55993bc2847b079a797f210d6163a602eecb5397d204853be41a52ba2246c7d0002fb94ad99b10ba7f46cc379669f1938a4234"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000040), 0x0)

11.261468649s ago: executing program 5 (id=3754):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0)

10.001747112s ago: executing program 5 (id=3757):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='btrfs_cow_block\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xfff3, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_mq={0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000800)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48)
syz_genetlink_get_family_id$fou(&(0x7f0000000380), r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000090001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

9.45260509s ago: executing program 6 (id=3758):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
sendmsg$key(0xffffffffffffffff, 0x0, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1ff)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3100009, 0x0, 0x1, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d)
r1 = socket(0x1e, 0x4, 0x0)
sendfile(r1, r0, 0x0, 0x8010002b)

9.304824393s ago: executing program 5 (id=3759):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x2, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "abb99279fd89da307583e654afb42af2dc91b30b60e83d50", "66eb64f2e8a3742962ae5b2fb03f495701288cf603c82fce6302900c99be5aab"}}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6b6f69382d722c756e695f786c6174653d302c696f636861727365743d757466382c757466383d302c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c636865636b3d72656c617864642c757466383d312c757466383d302c73686f72746e616d653d77696e393d2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303737372c000803093986d0c3f7a91a7937fe78bef2c2251f6e05436d6a14a99fa45e01e01a6eeddc9a84f8493093878cb871950387f481a7a5b358932d102b9f301e55f8dff7b4fcc5409451008581894c10c9a18c5104d9cf8844ecc4171357b46847f2733906bfce9f9d027769c400000000"], 0x1, 0x363, &(0x7f0000000280)="$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")
tgkill(r0, r0, 0x2b)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006)

8.186947476s ago: executing program 3 (id=3761):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r3)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [<r7=>0x0, 0x0, 0x0, <r8=>0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, &(0x7f0000000500)=[0x0, 0x0], 0x3, 0x0, 0x0, 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xfff, 0x0)
timer_create(0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x1, 0x0, &(0x7f0000000000))
r9 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x10, 0x0, &(0x7f00000003c0))

7.15435418s ago: executing program 6 (id=3762):
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
io_setup(0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0xfffffffe, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3e58c70416af785f}, @NHA_FDB={0x4}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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")

7.138301615s ago: executing program 3 (id=3763):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)="cfa55f1e3a54a014dcaa73dcaf2878521419acdae39808736a94d24824b5030759db1805a982a286dd546d7ceca55dd0d0634079fe75b61f519c73e004f8e919920669175d4133de79c936dba86a9862f0b08db87fddf1553e8b15ecabb462c1ab6c37d25e17d0a0cea63b0d67cd1da7f3596e74b933c5381b6a0d7c54b2d583ac5b5757c4d702c21f684eafe63b075f5721c46c0a932bd17a98ec8bf1774b6546d885e9988f57c37c41660f5368a81920b1fdc667b6670347368221db234a31bf89db7e7f8bfeea1e726f781a653e6d8a9971095e09560e5435ec8bcbf99c0e6c48a73970c42c404bcd35997065ff71184eebf1678eed9689b1aa60e629cc785762bf7c345ee83bfa98029043dc57b2d4da7eadff0fb54e59bbc6d3ff3d8580bb76512530b2b2a3c19ad2bb1387791d574a666e5c68dced501d750ff0fcdd7cd064e341559f7ef93da28b4c1da9d50c4a7eb78dfbd168bfc6f015090bc6db78ff46d18968ed336f89cbb802bf9992c6bda5bc9f19666f4d62e16252d0b936cce0586ec1a8dd79cb38958fb168b8406a6a3af373019a5126fc05d0783337180a9b7a350e9fa7b60047d3f56fdbe70154ac3cc6051eda85a5a3221e150d19066213299d4147780b97b1c7e5a7043545220188d772c681b20335b7b7bb92d5caeb27dd05a8bf3b8d576bccaced8e05ff1ea7031dd07a109d68b677de5473792213eafbf7c001c90bb0674043edee238ec655de24a30428901a131d5f4936909457a963f377147c5b54fa39f23857f8fb2b09f7a72d9c50c5cb758ca635c15686ea0cfb3875ff178513e01b7ec79234801c8eefb57601b0d9bd4e5687cdbf815fa4b1aa9cf2e29be5446a3acdc4318418f091ab20b52170619d035b13dcb8c2a0eba1d6aa6521bcec4ca2cf5d4ef72e8a063020d26d375efdcb68ac7594aa52d1d270d35151b43479cbef33e178e3cb9908bb2932b4ec90fdf58b5cc0a1243ea9acc0e40f241cef7a544bdf2f86e32bc0f9bc829e56740cb12602bf433959dab9f17e59df9c49c943d16b83669df79a34210dec4a0f3bea0d07f057589d65d96a46f72dedb65fd1d41aaa1c8631bd1c9342c4e8c25f7669cc53e7ea621f1038554e4f315da42f0212ae8c83957aaf75fd1ff11b6d52816a8baf8ae6c5bd32f4076874b13118f2c9901099aa26169bc1c89e39f8eda004ecae0fc58a7b65f15facd87e4d6ce9d4eaebd35550e7caa91634337f2f589b0198e93f00300dcc02b704d466e2d05168d4142237d517276431e0f835084407cefea93d6a17df4e4bd5aa5a6b1362270cb6583b6df3f9933e7f5f1c5128614c221cf440bb053ced3ebe43984f8cb29ba11fff86c0435f7f3ab60467517c84298a8c3ddd35ae31003f1af7a1522a444633eed8eabc9171acf29944232b72cce1369aef40d73cfc9ad50fa4d09b42fae9b7f2ea54dbe6c73485662d1682bd320c90e577773cc832944bc47ea66c612909d782007e1acc916654565b57d627a32325e1064866443e2750796124fdf7c32c8d0fc2f67c36d453c23212ae6c9181ac289031478777ff9990bdd4b29a31b8ef69109d164f08786a887f2502b7a3f170116504fff1b59a1d5a3e6ede9772a76c185dede478f26965c4fde30ecb0e106da12da089afdd0bd87eea1cedf46e7d431f53118958e8df7282ccf1394a208a63d8e673a791f4c1b8149d2410c6ee1a44e808615e7a89ca6e7157aed5437042d30b02bc03e1d4201742dba2a63dfce2a6", 0x4e4}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4008000)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000011c0)="e83a", 0x2}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="0b571145b1e0f1f75cf047903414f42cfd01", 0x12}], 0x1}, 0x8840)

6.976405953s ago: executing program 3 (id=3764):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200080, &(0x7f0000000040)={[], [{@flag='lazytime'}]}, 0x3, 0x573, &(0x7f00000005c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)

5.143299224s ago: executing program 3 (id=3768):
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioperm(0x588a, 0x6, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x2, 0x0, 0x3, 0x2, 0x6})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x2}], 0x99, 0x0, &(0x7f0000000380)="f244a3f071a9c7d454f3fab64b854808ed5c9e3f2853b7b2566afdc312e338dfd7fc717f3e4aaf35ccf38c62fcaf409006b3fb810d61172d66cbf163e160fa2f2d7e4457918498247211c2f78be7b8b6604282d0c98f18d7819afde9df26f95f4bdeaf23a3c603e35ea21f6fe2b6cece93365ada14fea0b9b52937e884b14eb8665e2459147ff4ebe1e660147f2e1158d43f47756e4378d81f"})

5.038528245s ago: executing program 6 (id=3769):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='btrfs_cow_block\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xfff3, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_mq={0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000800)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48)
syz_genetlink_get_family_id$fou(&(0x7f0000000380), r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000090001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

4.41768717s ago: executing program 7 (id=3770):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket(0x15, 0x6, 0x40000000)
sendmsg$nl_generic(r0, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0x0)
fchdir(r6)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)

3.453381888s ago: executing program 6 (id=3771):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x3, 0x0, 0x28, 0x0, @wg=@data={0x220, 0x4, 0x80000000000003ff, "204200000000000000fbffffff000000"}}}}}}, 0x0)
socket(0x1e, 0x80004, 0x0)

3.404797203s ago: executing program 7 (id=3772):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r3)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [<r7=>0x0, 0x0, 0x0, <r8=>0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, &(0x7f0000000500)=[0x0, 0x0], 0x3, 0x0, 0x0, 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xfff, 0x0)
timer_create(0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x1, 0x0, &(0x7f0000000000))
r9 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_int(r9, 0x29, 0x10, 0x0, &(0x7f00000003c0))

3.193665917s ago: executing program 6 (id=3773):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0800080005000200b6e71400020045b06800000306"], 0xfce)

2.324630237s ago: executing program 7 (id=3774):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001440)="cfa55f1e3a54a014dcaa73dcaf2878521419acdae39808736a94d24824b5030759db1805a982a286dd546d7ceca55dd0d0634079fe75b61f519c73e004f8e919920669175d4133de79c936dba86a9862f0b08db87fddf1553e8b15ecabb462c1ab6c37d25e17d0a0cea63b0d67cd1da7f3596e74b933c5381b6a0d7c54b2d583ac5b5757c4d702c21f684eafe63b075f5721c46c0a932bd17a98ec8bf1774b6546d885e9988f57c37c41660f5368a81920b1fdc667b6670347368221db234a31bf89db7e7f8bfeea1e726f781a653e6d8a9971095e09560e5435ec8bcbf99c0e6c48a73970c42c404bcd35997065ff71184eebf1678eed9689b1aa60e629cc785762bf7c345ee83bfa98029043dc57b2d4da7eadff0fb54e59bbc6d3ff3d8580bb76512530b2b2a3c19ad2bb1387791d574a666e5c68dced501d750ff0fcdd7cd064e341559f7ef93da28b4c1da9d50c4a7eb78dfbd168bfc6f015090bc6db78ff46d18968ed336f89cbb802bf9992c6bda5bc9f19666f4d62e16252d0b936cce0586ec1a8dd79cb38958fb168b8406a6a3af373019a5126fc05d0783337180a9b7a350e9fa7b60047d3f56fdbe70154ac3cc6051eda85a5a3221e150d19066213299d4147780b97b1c7e5a7043545220188d772c681b20335b7b7bb92d5caeb27dd05a8bf3b8d576bccaced8e05ff1ea7031dd07a109d68b677de5473792213eafbf7c001c90bb0674043edee238ec655de24a30428901a131d5f4936909457a963f377147c5b54fa39f23857f8fb2b09f7a72d9c50c5cb758ca635c15686ea0cfb3875ff178513e01b7ec79234801c8eefb57601b0d9bd4e5687cdbf815fa4b1aa9cf2e29be5446a3acdc4318418f091ab20b52170619d035b13dcb8c2a0eba1d6aa6521bcec4ca2cf5d4ef72e8a063020d26d375efdcb68ac7594aa52d1d270d35151b43479cbef33e178e3cb9908bb2932b4ec90fdf58b5cc0a1243ea9acc0e40f241cef7a544bdf2f86e32bc0f9bc829e56740cb12602bf433959dab9f17e59df9c49c943d16b83669df79a34210dec4a0f3bea0d07f057589d65d96a46f72dedb65fd1d41aaa1c8631bd1c9342c4e8c25f7669cc53e7ea621f1038554e4f315da42f0212ae8c83957aaf75fd1ff11b6d52816a8baf8ae6c5bd32f4076874b13118f2c9901099aa26169bc1c89e39f8eda004ecae0fc58a7b65f15facd87e4d6ce9d4eaebd35550e7caa91634337f2f589b0198e93f00300dcc02b704d466e2d05168d4142237d517276431e0f835084407cefea93d6a17df4e4bd5aa5a6b1362270cb6583b6df3f9933e7f5f1c5128614c221cf440bb053ced3ebe43984f8cb29ba11fff86c0435f7f3ab60467517c84298a8c3ddd35ae31003f1af7a1522a444633eed8eabc9171acf29944232b72cce1369aef40d73cfc9ad50fa4d09b42fae9b7f2ea54dbe6c73485662d1682bd320c90e577773cc832944bc47ea66c612909d782007e1acc916654565b57d627a32325e1064866443e2750796124fdf7c32c8d0fc2f67c36d453c23212ae6c9181ac289031478777ff9990bdd4b29a31b8ef69109d164f08786a887f2502b7a3f170116504fff1b59a1d5a3e6ede9772a76c185dede478f26965c4fde30ecb0e106da12da089afdd0bd87eea1cedf46e7d431f53118958e8df7282ccf1394a208a63d8e673a791f4c1b8149d2410c6ee1a44e808615e7a89ca6e7157aed5437042d30b02bc03e1d4201742dba2a63dfce2a6", 0x4e4}], 0x2, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4008000)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000011c0)="e83a", 0x2}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="0b571145b1e0f1f75cf047903414f42cfd01", 0x12}], 0x1}, 0x8840)

2.126569124s ago: executing program 6 (id=3775):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"/351], 0x254}}, 0x0)

2.118156284s ago: executing program 7 (id=3776):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

1.844042767s ago: executing program 3 (id=3777):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = syz_clone(0x7142600, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r1, r1, 0x0, 0xffffffffffffffff, r0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
fsync(r5)
connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x8004e60}, 0x6e)

1.098505945s ago: executing program 7 (id=3778):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
wait4(0x0, 0x0, 0x40000000, 0x0)
ptrace(0x10, 0x0)
wait4(0x0, 0x0, 0xa0000009, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000400)={{0x3a, @broadcast, 0x4e24, 0x1, 'lblc\x00', 0xb, 0x0, 0x1c}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x2, 0x8, 0x2, 0x53cc}}, 0x44)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f045})
poll(&(0x7f0000000100)=[{r5, 0x6086}, {r5, 0x1a0}], 0x2, 0x4)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000005a000002000000000000000000000000a40003809e000000f332384ee8fb2693a81c5dbdf50efda5ce2111027e360870a2cd9f84ff6004996b8b588c14d184c218aa6ee63efc5984083f169340c2f883ae94af75cb739a0b68c73b34bad3eecad5bbf3d89b90d23c6d2fdd22c6520f68a6a602a851e2bcef499c4b9ef819c3ef648aeefd32d0ce87a9b20b270fb34d9f11ec5185add8c8100ee0fd3baa156e40f7420bd03cb6b4c0a4b07492c9b6e4c4e1050000"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0)

600.789236ms ago: executing program 3 (id=3779):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', r0, 0x29, 0x2, 0x3, 0x2, 0x11, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x8, 0x8000, 0x3, 0x7}})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x300}, 0x0, &(0x7f0000000240)={0x3fc, 0x0, 0x0, 0x3553, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

0s ago: executing program 7 (id=3780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10)
kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r4 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
dup3(r4, r3, 0x0)
io_setup(0x2, &(0x7f0000000400)=<r5=>0x0)
io_submit(r5, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, &(0x7f0000000000), 0x200a00}])

kernel console output (not intermixed with test programs):

rly
[ 1066.739321][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2649'.
[ 1066.767865][T15766] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1066.767865][T15766]    program syz.5.2648 not setting count and/or reply_len properly
[ 1068.114056][T15780] siw: device registration error -23
[ 1069.847213][ T7030] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1069.956029][T15794] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2655'.
[ 1070.655315][ T5944] usb 2-1: USB disconnect, device number 28
[ 1070.657191][ T7030] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1070.699487][ T7030] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1070.739155][ T7030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.767815][ T7030] usb 3-1: Product: syz
[ 1070.782331][ T7030] usb 3-1: Manufacturer: syz
[ 1070.804280][ T7030] usb 3-1: SerialNumber: syz
[ 1070.827278][ T7030] usb 3-1: config 0 descriptor??
[ 1070.848404][ T7030] usb 3-1: ucan: probing device on interface #0
[ 1070.855621][ T7030] usb 3-1: ucan: invalid EP count (0)
[ 1070.861095][ T7030] usb 3-1: ucan: probe failed; try to update the device firmware
[ 1070.887502][T15802] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1070.887502][T15802]    program syz.1.2660 not setting count and/or reply_len properly
[ 1070.907272][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2660'.
[ 1073.453849][T15820] siw: device registration error -23
[ 1074.835425][ T5944] usb 3-1: USB disconnect, device number 23
[ 1075.445668][T15836] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2669'.
[ 1075.990943][T15831] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2668'.
[ 1076.015228][T15834] netlink: 'syz.4.2666': attribute type 2 has an invalid length.
[ 1076.800631][T15845] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1076.800631][T15845]    program syz.3.2672 not setting count and/or reply_len properly
[ 1077.171406][T15851] netlink: 'syz.3.2673': attribute type 3 has an invalid length.
[ 1077.180818][T15851] netlink: 'syz.3.2673': attribute type 3 has an invalid length.
[ 1078.471970][T15862] siw: device registration error -23
[ 1079.874896][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'.
[ 1080.237952][T15873] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2680'.
[ 1083.113650][T15896] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1083.113650][T15896]    program syz.3.2688 not setting count and/or reply_len properly
[ 1083.254030][T15896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2688'.
[ 1083.537495][T15908] siw: device registration error -23
[ 1085.027485][T15912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2691'.
[ 1085.068109][T15912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2691'.
[ 1085.196763][T15916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2691'.
[ 1085.312363][T15918] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2693'.
[ 1087.587726][T15941] netlink: 'syz.3.2700': attribute type 13 has an invalid length.
[ 1087.621052][T15942] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1087.621052][T15942]    program syz.1.2701 not setting count and/or reply_len properly
[ 1087.643945][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2701'.
[ 1087.678510][T15941] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2700'.
[ 1088.026642][T15955] netlink: 'syz.1.2705': attribute type 2 has an invalid length.
[ 1088.279884][T15954] lo speed is unknown, defaulting to 1000
[ 1091.375661][T15999] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1091.375661][T15999]    program syz.5.2715 not setting count and/or reply_len properly
[ 1091.567476][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2715'.
[ 1093.209725][T15998] lo speed is unknown, defaulting to 1000
[ 1093.477187][T16024] syz_tun: entered allmulticast mode
[ 1093.493876][T16022] syz_tun: left allmulticast mode
[ 1095.310490][T16051] netlink: 'syz.4.2732': attribute type 2 has an invalid length.
[ 1097.305773][T16067] syz_tun: entered allmulticast mode
[ 1097.311949][T16064] syz_tun: left allmulticast mode
[ 1097.689738][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2737'.
[ 1097.710245][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2737'.
[ 1099.006960][T16089] netlink: 'syz.2.2743': attribute type 21 has an invalid length.
[ 1099.014864][T16089] netlink: 'syz.2.2743': attribute type 6 has an invalid length.
[ 1099.027187][T16089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2743'.
[ 1099.121844][T16095] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1099.121844][T16095]    program syz.5.2744 not setting count and/or reply_len properly
[ 1100.043617][T16103] netlink: 'syz.2.2746': attribute type 3 has an invalid length.
[ 1100.052888][T16103] netlink: 'syz.2.2746': attribute type 3 has an invalid length.
[ 1100.127560][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2744'.
[ 1100.738934][T16111] netlink: 'syz.2.2749': attribute type 49 has an invalid length.
[ 1103.725946][T16143] netlink: 'syz.3.2758': attribute type 2 has an invalid length.
[ 1103.733852][T16143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2758'.
[ 1104.872941][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'.
[ 1105.150176][T16165] syz_tun: entered allmulticast mode
[ 1105.452027][T16163] syz_tun: left allmulticast mode
[ 1105.766594][ T6008] IPVS: starting estimator thread 0...
[ 1105.855279][T16182] IPVS: using max 41 ests per chain, 98400 per kthread
[ 1105.893834][T16186] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1105.893834][T16186]    program syz.1.2767 not setting count and/or reply_len properly
[ 1105.948657][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2767'.
[ 1106.129635][T16177] lo speed is unknown, defaulting to 1000
[ 1108.788412][T16210] syz_tun: entered allmulticast mode
[ 1108.793938][T16205] syz_tun: left allmulticast mode
[ 1108.980249][T16224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2780'.
[ 1109.173331][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'.
[ 1110.375429][T15154] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1110.541755][T16252] fuse: Bad value for 'fd'
[ 1110.556669][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'.
[ 1110.590033][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'.
[ 1111.008029][T15154] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1111.072612][T15154] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1111.094113][T15154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1111.111695][T15154] usb 3-1: Product: syz
[ 1111.124964][T15154] usb 3-1: Manufacturer: syz
[ 1111.145521][T15154] usb 3-1: SerialNumber: syz
[ 1111.575274][T15154] usb 3-1: config 0 descriptor??
[ 1111.981095][ T7737] Bluetooth: (null): Invalid header checksum
[ 1111.998578][T15154] usb 3-1: ucan: probing device on interface #0
[ 1112.006304][ T7737] Bluetooth: (null): Invalid header checksum
[ 1112.012428][ T7737] Bluetooth: (null): Invalid header checksum
[ 1112.020910][T15154] usb 3-1: ucan: invalid EP count (0)
[ 1112.026528][T15154] usb 3-1: ucan: probe failed; try to update the device firmware
[ 1112.035064][   T70] Bluetooth: (null): Invalid header checksum
[ 1114.151675][T16272] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1114.151675][T16272]    program syz.4.2793 not setting count and/or reply_len properly
[ 1114.195051][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2793'.
[ 1114.558059][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'.
[ 1115.126844][T16280] netlink: 'syz.5.2795': attribute type 29 has an invalid length.
[ 1115.163632][ T7030] usb 3-1: USB disconnect, device number 24
[ 1115.201463][T16280] netlink: 'syz.5.2795': attribute type 29 has an invalid length.
[ 1115.452001][T16287] netlink: 'syz.5.2799': attribute type 29 has an invalid length.
[ 1115.484515][T16287] netlink: 'syz.5.2799': attribute type 29 has an invalid length.
[ 1115.855551][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.862041][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.538848][ T7737] Bluetooth: (null): Invalid header checksum
[ 1116.579303][ T7737] Bluetooth: (null): Invalid header checksum
[ 1116.619178][ T7737] Bluetooth: (null): Invalid header checksum
[ 1116.688808][ T7740] Bluetooth: (null): Invalid header checksum
[ 1116.795860][ T6029] Bluetooth: (null): Invalid header checksum
[ 1118.295551][ T6008] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1118.382043][T16319] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1118.382043][T16319]    program syz.2.2806 not setting count and/or reply_len properly
[ 1118.577943][ T6008] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.608838][ T6008] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1118.622296][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.631208][ T6008] usb 2-1: Product: syz
[ 1120.059785][T16315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2806'.
[ 1120.072983][ T6008] usb 2-1: Manufacturer: syz
[ 1120.101661][ T6008] usb 2-1: SerialNumber: syz
[ 1120.147948][ T6008] usb 2-1: config 0 descriptor??
[ 1120.154521][ T6008] usb 2-1: ucan: probing device on interface #0
[ 1120.295297][ T6008] usb 2-1: ucan: invalid EP count (0)
[ 1120.300717][ T6008] usb 2-1: ucan: probe failed; try to update the device firmware
[ 1122.884865][T16355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2816'.
[ 1122.976831][T15154] usb 2-1: USB disconnect, device number 29
[ 1125.118865][T16375] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1125.118865][T16375]    program syz.5.2823 not setting count and/or reply_len properly
[ 1125.138877][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2823'.
[ 1125.458797][T16384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2825'.
[ 1129.193973][T16423] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1129.193973][T16423]    program syz.2.2837 not setting count and/or reply_len properly
[ 1129.494078][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2837'.
[ 1130.555560][T16445] netlink: 'syz.3.2844': attribute type 3 has an invalid length.
[ 1130.563508][T16445] netlink: 'syz.3.2844': attribute type 3 has an invalid length.
[ 1133.900686][T16493] netlink: 'syz.5.2857': attribute type 3 has an invalid length.
[ 1133.908779][T16493] netlink: 'syz.5.2857': attribute type 3 has an invalid length.
[ 1134.055677][T16498] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1134.055677][T16498]    program syz.4.2858 not setting count and/or reply_len properly
[ 1134.084199][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1134.100929][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1134.109636][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1134.182617][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1134.190968][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1134.226869][T16497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2859'.
[ 1134.260138][T16498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2858'.
[ 1134.267428][ T7028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1134.542803][ T7028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1134.703256][ T7028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.123887][ T7028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.240685][T16499] lo speed is unknown, defaulting to 1000
[ 1135.579214][ T7028] gretap0: left allmulticast mode
[ 1135.584659][ T7028] gretap0: left promiscuous mode
[ 1135.591289][ T7028] bridge0: port 3(gretap0) entered disabled state
[ 1135.659080][ T7028] bridge_slave_1: left allmulticast mode
[ 1135.668517][ T7028] bridge_slave_1: left promiscuous mode
[ 1135.674251][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1135.717781][ T7028] bridge_slave_0: left allmulticast mode
[ 1135.764182][ T7028] bridge_slave_0: left promiscuous mode
[ 1135.783275][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1136.296436][ T5837] Bluetooth: hci1: command tx timeout
[ 1137.242405][T16517] loop5: detected capacity change from 0 to 4096
[ 1137.252071][T16517] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1137.289938][T16517] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1137.299074][T16517] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1137.312825][T16517] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[ 1138.308942][ T7028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1138.325536][ T5837] Bluetooth: hci1: command tx timeout
[ 1138.332836][ T7028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1138.351393][ T7028] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1138.363735][ T7028] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1138.376961][ T7028] bond0 (unregistering): Released all slaves
[ 1139.005952][ T7028] tipc: Left network mode
[ 1139.619745][T16499] chnl_net:caif_netlink_parms(): no params data found
[ 1140.405680][ T5837] Bluetooth: hci1: command tx timeout
[ 1140.948427][ T6008] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1141.158304][ T6008] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1141.550020][ T6008] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1141.569660][ T6008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1141.584276][ T6008] usb 6-1: Product: syz
[ 1141.625281][ T6008] usb 6-1: Manufacturer: syz
[ 1141.629973][ T6008] usb 6-1: SerialNumber: syz
[ 1141.675095][ T6008] usb 6-1: config 0 descriptor??
[ 1141.704674][ T6008] usb 6-1: ucan: probing device on interface #0
[ 1141.730617][ T6008] usb 6-1: ucan: invalid EP count (0)
[ 1141.762549][ T6008] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1142.235753][ T7028] hsr_slave_0: left promiscuous mode
[ 1142.263488][ T7028] hsr_slave_1: left promiscuous mode
[ 1142.270842][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1142.284327][T16573] fuse: Unknown parameter 'grou00000000000000000000'
[ 1142.297462][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1142.319475][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1142.329805][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1142.391902][ T7028] veth1_macvtap: left promiscuous mode
[ 1142.405669][ T7028] veth0_macvtap: left promiscuous mode
[ 1142.413914][ T7028] veth1_vlan: left promiscuous mode
[ 1142.433496][T16575] net_ratelimit: 11 callbacks suppressed
[ 1142.433513][T16575] netlink: zone id is out of range
[ 1142.444476][T16575] netlink: zone id is out of range
[ 1142.449669][T16575] netlink: zone id is out of range
[ 1142.454772][T16575] netlink: zone id is out of range
[ 1142.459892][T16575] netlink: zone id is out of range
[ 1142.464983][T16575] netlink: zone id is out of range
[ 1142.470118][T16575] netlink: zone id is out of range
[ 1142.475242][T16575] netlink: zone id is out of range
[ 1142.480334][T16575] netlink: zone id is out of range
[ 1142.485504][T16575] netlink: zone id is out of range
[ 1142.490977][ T5837] Bluetooth: hci1: command tx timeout
[ 1142.495380][ T7028] veth0_vlan: left promiscuous mode
[ 1143.647605][ T6008] usb 6-1: USB disconnect, device number 13
[ 1143.873438][T16594] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1143.873438][T16594]    program syz.3.2883 not setting count and/or reply_len properly
[ 1144.507299][ T7028] team0 (unregistering): Port device team_slave_1 removed
[ 1144.566546][ T7028] team0 (unregistering): Port device team_slave_0 removed
[ 1145.705084][T16499] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.712995][T16499] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.721000][T16499] bridge_slave_0: entered allmulticast mode
[ 1145.736463][T16499] bridge_slave_0: entered promiscuous mode
[ 1145.812645][T16499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.840034][T16499] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.853097][T16499] bridge_slave_1: entered allmulticast mode
[ 1145.861735][T16499] bridge_slave_1: entered promiscuous mode
[ 1146.194712][T11585] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[ 1146.272688][T16499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1146.352990][ T7028] IPVS: stop unused estimator thread 0...
[ 1146.372595][T16499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1146.616325][T16499] team0: Port device team_slave_0 added
[ 1146.646411][T16499] team0: Port device team_slave_1 added
[ 1146.954036][T16620] fuse: Unknown parameter 'grou00000000000000000000'
[ 1146.970298][T16499] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1146.987090][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1147.013871][T16499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1147.719101][T16499] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1147.751354][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1147.972933][T16499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1149.002656][T16499] hsr_slave_0: entered promiscuous mode
[ 1149.010112][T16499] hsr_slave_1: entered promiscuous mode
[ 1149.017604][T16499] debugfs: 'hsr0' already exists in 'hsr'
[ 1149.023450][T16499] Cannot create hsr debugfs directory
[ 1151.690237][T16656] overlayfs: failed to resolve './file0': -2
[ 1152.343524][T16662] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1152.343524][T16662]    program syz.4.2900 not setting count and/or reply_len properly
[ 1152.428076][T16665] fuse: Unknown parameter 'grou00000000000000000000'
[ 1152.832657][T16669] loop3: detected capacity change from 0 to 4096
[ 1152.851168][T16669] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1152.880601][T16669] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1152.894331][T16669] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1152.902660][T16669] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[ 1153.550860][T16499] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1153.574176][T16499] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1153.613526][T16499] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1153.628385][T16499] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1154.471543][T16499] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1154.793286][T16499] 8021q: adding VLAN 0 to HW filter on device team0
[ 1154.821196][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1154.828358][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1154.859307][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1154.866479][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1155.495235][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2907'.
[ 1155.516624][T16702] sch_tbf: burst 6125 is lower than device lo mtu (65550) !
[ 1156.050276][T16705] loop2: detected capacity change from 0 to 512
[ 1156.122239][T16705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1156.250932][T16499] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1156.261871][T16705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1156.301835][T16705] ext4 filesystem being mounted at /580/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1156.343943][T16499] veth0_vlan: entered promiscuous mode
[ 1156.370327][T16499] veth1_vlan: entered promiscuous mode
[ 1156.453884][T16499] veth0_macvtap: entered promiscuous mode
[ 1156.471713][T16499] veth1_macvtap: entered promiscuous mode
[ 1156.679568][T16499] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1156.921400][T16499] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1156.934387][ T3448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.964633][ T3448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1156.988360][ T3448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.027209][ T7737] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.102545][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1157.152432][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1157.228590][ T7028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1157.265439][ T7028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1157.418772][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1157.463041][T16725] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1158.938100][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1158.949491][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1158.960861][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1158.970804][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1158.978957][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1159.412734][T16739] lo speed is unknown, defaulting to 1000
[ 1160.412918][ T3448] gretap0: left allmulticast mode
[ 1160.438850][ T3448] gretap0: left promiscuous mode
[ 1160.455483][ T3448] bridge0: port 3(gretap0) entered disabled state
[ 1160.497071][ T3448] bridge_slave_1: left allmulticast mode
[ 1160.502790][ T3448] bridge_slave_1: left promiscuous mode
[ 1160.525687][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1160.584494][ T3448] bridge_slave_0: left allmulticast mode
[ 1160.609979][ T3448] bridge_slave_0: left promiscuous mode
[ 1160.619146][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1161.136892][ T5841] Bluetooth: hci5: command tx timeout
[ 1163.205318][ T5841] Bluetooth: hci5: command tx timeout
[ 1164.209460][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1164.230261][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1164.246807][ T3448] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1164.259600][ T3448] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1164.279715][ T3448] bond0 (unregistering): Released all slaves
[ 1164.334532][ T3448] bond1 (unregistering): Released all slaves
[ 1164.487969][T16739] chnl_net:caif_netlink_parms(): no params data found
[ 1164.965820][T16807] net_ratelimit: 11 callbacks suppressed
[ 1164.965838][T16807] netlink: zone id is out of range
[ 1164.976717][T16807] netlink: zone id is out of range
[ 1164.981828][T16807] netlink: zone id is out of range
[ 1164.987005][T16807] netlink: zone id is out of range
[ 1164.992100][T16807] netlink: zone id is out of range
[ 1164.997251][T16807] netlink: zone id is out of range
[ 1165.002348][T16807] netlink: zone id is out of range
[ 1165.007491][T16807] netlink: zone id is out of range
[ 1165.012590][T16807] netlink: zone id is out of range
[ 1165.017721][T16807] netlink: zone id is out of range
[ 1165.303961][ T5841] Bluetooth: hci5: command tx timeout
[ 1165.346389][ T3448] tipc: Left network mode
[ 1165.666047][T16821] netlink: 'syz.5.2938': attribute type 2 has an invalid length.
[ 1166.499683][T16830] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2939'.
[ 1166.551326][T16739] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1166.613442][T16739] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1166.683587][T16739] bridge_slave_0: entered allmulticast mode
[ 1166.695737][ T5870] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1166.763222][T16739] bridge_slave_0: entered promiscuous mode
[ 1166.896419][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1166.928795][T16739] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1166.945631][ T5870] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1166.955887][T16739] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1166.963688][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.974509][T16739] bridge_slave_1: entered allmulticast mode
[ 1166.984387][ T5870] usb 6-1: Product: syz
[ 1166.992401][ T5870] usb 6-1: Manufacturer: syz
[ 1167.003331][T16739] bridge_slave_1: entered promiscuous mode
[ 1167.010985][ T5870] usb 6-1: SerialNumber: syz
[ 1167.028334][ T5870] usb 6-1: config 0 descriptor??
[ 1167.054495][ T5870] usb 6-1: ucan: probing device on interface #0
[ 1167.071803][ T5870] usb 6-1: ucan: invalid EP count (0)
[ 1167.150991][ T5870] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1167.168453][T16739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1167.237274][T16739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1167.334105][T16809] loop4: detected capacity change from 0 to 40427
[ 1167.365334][ T5841] Bluetooth: hci5: command tx timeout
[ 1167.376614][T16809] F2FS-fs (loop4): invalid crc value
[ 1167.568299][T16739] team0: Port device team_slave_0 added
[ 1167.590823][T16739] team0: Port device team_slave_1 added
[ 1167.628889][T16809] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1167.659347][T16809] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1167.715778][ T3448] hsr_slave_0: left promiscuous mode
[ 1167.738687][ T3448] hsr_slave_1: left promiscuous mode
[ 1167.753635][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1167.780917][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1167.808848][ T3448] batman_adv: batadv0: Interface deactivated: macvtap1
[ 1167.821081][ T3448] batman_adv: batadv0: Removing interface: macvtap1
[ 1169.426894][ T6008] usb 6-1: USB disconnect, device number 14
[ 1169.677430][T16858] netlink: 'syz.5.2949': attribute type 2 has an invalid length.
[ 1170.719735][T16864] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1170.719735][T16864]    program syz.5.2950 not setting count and/or reply_len properly
[ 1170.830692][ T3448] team0 (unregistering): Port device team_slave_1 removed
[ 1170.928696][ T3448] team0 (unregistering): Port device team_slave_0 removed
[ 1171.559535][T16739] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1171.575742][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1171.634559][T16739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1171.844805][T16739] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1171.852812][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1171.881451][T16739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1172.469927][T16739] hsr_slave_0: entered promiscuous mode
[ 1172.490737][T16739] hsr_slave_1: entered promiscuous mode
[ 1172.823410][ T3448] IPVS: stop unused estimator thread 0...
[ 1173.045508][   T39] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1173.221829][   T39] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1173.483127][   T39] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1173.492611][   T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1173.501604][   T39] usb 2-1: Product: syz
[ 1173.545680][   T39] usb 2-1: Manufacturer: syz
[ 1173.554403][   T39] usb 2-1: SerialNumber: syz
[ 1173.576988][   T39] usb 2-1: config 0 descriptor??
[ 1173.598680][   T39] usb 2-1: ucan: probing device on interface #0
[ 1173.625592][   T39] usb 2-1: ucan: invalid EP count (0)
[ 1173.631776][   T39] usb 2-1: ucan: probe failed; try to update the device firmware
[ 1173.654445][T16897] ªªªªªªytes: renamed from vlan0 (while UP)
[ 1173.700594][T16899] ptrace attach of "./syz-executor exec"[16901] was attempted by "./syz-executor exec"[16899]
[ 1174.025209][T16739] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1174.046577][T16739] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1174.061483][T16739] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1174.082255][T16739] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1175.520469][T16739] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1175.595033][T16739] 8021q: adding VLAN 0 to HW filter on device team0
[ 1175.643371][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1175.650814][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1175.709841][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1175.717081][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1176.510132][   T39] usb 2-1: USB disconnect, device number 30
[ 1177.665013][T16945] usb usb8: usbfs: process 16945 (syz.2.2971) did not claim interface 0 before use
[ 1177.777977][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.778042][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.080000][T16739] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1178.164068][T16739] veth0_vlan: entered promiscuous mode
[ 1178.198613][T16739] veth1_vlan: entered promiscuous mode
[ 1178.274943][T16739] veth0_macvtap: entered promiscuous mode
[ 1178.301003][T16739] veth1_macvtap: entered promiscuous mode
[ 1178.351869][T16739] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1178.399927][T16739] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1178.444589][   T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1178.472294][   T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1178.500101][   T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1178.542353][   T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1178.946450][T16963] overlayfs: failed to resolve './file0': -2
[ 1180.168567][ T7735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1180.178734][ T7735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1180.339996][ T7733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1180.356130][ T7733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1180.689482][ T5945] IPVS: starting estimator thread 0...
[ 1181.305331][T16983] IPVS: using max 35 ests per chain, 84000 per kthread
[ 1182.599240][T17001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1182.609133][T17001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1182.626543][T17001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1182.667124][T17001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1182.686705][T17001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1184.515284][T17015] overlayfs: missing 'workdir'
[ 1184.815317][ T5841] Bluetooth: hci0: command tx timeout
[ 1184.969302][T16999] chnl_net:caif_netlink_parms(): no params data found
[ 1186.057344][T16999] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1186.096894][T16999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1186.105303][T16999] bridge_slave_0: entered allmulticast mode
[ 1186.114099][T16999] bridge_slave_0: entered promiscuous mode
[ 1186.125527][T16999] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1186.132807][T16999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1186.140635][T16999] bridge_slave_1: entered allmulticast mode
[ 1186.149354][T16999] bridge_slave_1: entered promiscuous mode
[ 1186.891457][ T5841] Bluetooth: hci0: command tx timeout
[ 1187.062775][T16999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1187.764135][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1188.555117][T16999] team0: Port device team_slave_0 added
[ 1188.576484][T16999] team0: Port device team_slave_1 added
[ 1188.809798][T16999] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1188.858722][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1189.336863][ T5841] Bluetooth: hci0: command tx timeout
[ 1189.352322][T16999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1189.383122][T17059] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1189.551699][T16999] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1189.578831][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1189.620740][T16999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1189.691807][T17067] overlayfs: missing 'workdir'
[ 1190.353626][T16999] hsr_slave_0: entered promiscuous mode
[ 1190.381824][T16999] hsr_slave_1: entered promiscuous mode
[ 1190.401618][T16999] debugfs: 'hsr0' already exists in 'hsr'
[ 1190.662769][T16999] Cannot create hsr debugfs directory
[ 1191.164429][T17084] capability: warning: `syz.4.3003' uses deprecated v2 capabilities in a way that may be insecure
[ 1191.365563][ T5841] Bluetooth: hci0: command tx timeout
[ 1193.761733][T16999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1194.153368][T17109] netlink: 'syz.1.3009': attribute type 2 has an invalid length.
[ 1194.586783][T16999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1194.883863][T17113] siw: device registration error -23
[ 1195.774875][T16999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.307648][T16999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1197.272425][T16999] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1197.291363][T16999] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1197.320611][T16999] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1197.340154][T16999] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1198.148609][T16999] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1198.322465][T16999] 8021q: adding VLAN 0 to HW filter on device team0
[ 1198.907513][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1198.914666][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1199.420233][T17138] ªªªªªª: renamed from vlan0 (while UP)
[ 1199.433517][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1199.440713][ T7740] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1200.254088][T17153] netlink: 'syz.1.3019': attribute type 2 has an invalid length.
[ 1200.858599][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1201.100693][T16999] veth0_vlan: entered promiscuous mode
[ 1201.130357][T16999] veth1_vlan: entered promiscuous mode
[ 1201.183826][T16999] veth0_macvtap: entered promiscuous mode
[ 1201.214132][T16999] veth1_macvtap: entered promiscuous mode
[ 1201.233436][T16999] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1201.307874][T16999] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1201.342568][ T3448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1201.372107][ T3448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1201.420324][ T3448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1201.498689][ T3448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.946836][T17188] syz_tun: entered allmulticast mode
[ 1202.968907][T17187] syz_tun: left allmulticast mode
[ 1203.069544][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1203.080235][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1203.103122][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1203.118179][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1204.265348][T17201] fuse: Bad value for 'fd'
[ 1205.852011][T17001] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1205.865682][T17001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1205.877020][T17001] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1205.887247][T17001] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1205.894865][T17001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1206.989588][T17231] syz_tun: entered allmulticast mode
[ 1207.925560][ T5841] Bluetooth: hci2: command tx timeout
[ 1208.100392][T17216] chnl_net:caif_netlink_parms(): no params data found
[ 1208.310320][T17243] ªªªªªª: renamed from vlan0 (while UP)
[ 1208.353000][T17245] fuse: Bad value for 'fd'
[ 1209.114518][T17211] IPVS: starting estimator thread 0...
[ 1209.120506][T17247] net_ratelimit: 11 callbacks suppressed
[ 1209.120523][T17247] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1209.195943][T17216] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1209.216992][T17216] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1209.226455][T17264] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1209.239217][T17216] bridge_slave_0: entered allmulticast mode
[ 1209.250098][T17216] bridge_slave_0: entered promiscuous mode
[ 1209.289192][T17216] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1209.304906][T17216] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1209.319545][T17216] bridge_slave_1: entered allmulticast mode
[ 1209.351389][T17216] bridge_slave_1: entered promiscuous mode
[ 1209.490607][T17216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1209.521690][T17216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1210.135891][ T5841] Bluetooth: hci2: command tx timeout
[ 1210.362277][T17280] syz_tun: entered allmulticast mode
[ 1210.370613][T17269] siw: device registration error -23
[ 1210.478467][T17216] team0: Port device team_slave_0 added
[ 1210.487585][T17216] team0: Port device team_slave_1 added
[ 1210.683627][T17216] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1210.691291][T17216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1210.719506][T17216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1210.785950][T17216] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1211.058933][T17216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1211.182198][T17216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1211.393448][T17216] hsr_slave_0: entered promiscuous mode
[ 1211.406871][T17216] hsr_slave_1: entered promiscuous mode
[ 1211.414055][T17216] debugfs: 'hsr0' already exists in 'hsr'
[ 1211.420847][T17216] Cannot create hsr debugfs directory
[ 1212.165570][ T5841] Bluetooth: hci2: command tx timeout
[ 1212.251641][T17216] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1212.393518][T17216] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1213.695851][T17216] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.565712][ T5841] Bluetooth: hci2: command tx timeout
[ 1214.592065][T17329] overlayfs: failed lookup in lower (newroot/18, name='file0', err=-40): overlapping layers
[ 1215.055517][T17216] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1215.077637][T17331] loop2: detected capacity change from 0 to 512
[ 1215.084807][T17331] EXT4-fs: Ignoring removed i_version option
[ 1215.096016][T17331] EXT4-fs: Ignoring removed bh option
[ 1215.279088][T17331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1215.296740][T17331] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1215.519463][T17216] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1215.661992][T17216] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1216.314614][T17216] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1216.333443][T17216] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1216.380152][T16999] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1216.725445][T17216] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1216.771886][T17216] 8021q: adding VLAN 0 to HW filter on device team0
[ 1216.821820][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1216.829120][ T7737] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1216.893881][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1216.901135][ T7737] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1216.947140][T17367] ªªªªªª: renamed from vlan0 (while UP)
[ 1218.843467][T17216] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1219.909475][T17397] loop1: detected capacity change from 0 to 4096
[ 1219.931418][T17397] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1219.969980][T17397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1219.994867][T17397] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1220.012943][T17397] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[ 1220.543443][T17412] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1220.598670][T17216] veth0_vlan: entered promiscuous mode
[ 1220.640614][T17216] veth1_vlan: entered promiscuous mode
[ 1220.714117][T17216] veth0_macvtap: entered promiscuous mode
[ 1220.733950][T17216] veth1_macvtap: entered promiscuous mode
[ 1220.790593][T17216] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1220.883163][T17216] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1220.954831][ T3448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1221.044733][ T3448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1221.099844][ T3448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1221.230167][ T3448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1221.718871][ T7731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1221.733127][ T7731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1221.934696][ T6029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1221.953869][ T6029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1224.639368][T17461] fuse: Bad value for 'fd'
[ 1227.537545][T17503] syz_tun: entered allmulticast mode
[ 1227.574046][T17502] syz_tun: left allmulticast mode
[ 1231.406782][T17549] syz_tun: entered allmulticast mode
[ 1231.494293][T17547] syz_tun: left allmulticast mode
[ 1232.255648][T17558] fuse: Bad value for 'fd'
[ 1234.080908][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3123'.
[ 1236.599492][T17602] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3128'.
[ 1237.998112][T17609] syz_tun: entered allmulticast mode
[ 1238.012284][T17608] syz_tun: left allmulticast mode
[ 1238.330889][T17617] fuse: Invalid rootmode
[ 1238.731866][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.747026][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.768432][T17642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'.
[ 1239.844868][T17641] 9pnet_fd: Insufficient options for proto=fd
[ 1242.368311][T17670] siw: device registration error -23
[ 1242.780064][T17678] 9pnet_fd: Insufficient options for proto=fd
[ 1243.597008][T17212] IPVS: starting estimator thread 0...
[ 1243.705246][T17688] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1246.456977][T17716] siw: device registration error -23
[ 1248.247027][T17727] 9pnet_fd: Insufficient options for proto=fd
[ 1248.268087][T17740] fuse: Bad value for 'rootmode'
[ 1250.305506][ T1313] Bluetooth: (null): Invalid header checksum
[ 1250.448822][ T1313] Bluetooth: (null): Invalid header checksum
[ 1251.061882][ T1313] Bluetooth: (null): Invalid header checksum
[ 1251.069699][ T1313] Bluetooth: (null): Invalid header checksum
[ 1251.076015][ T1313] Bluetooth: (null): Invalid header checksum
[ 1251.083774][ T1313] Bluetooth: (null): Invalid header checksum
[ 1251.090116][ T1313] Bluetooth: (null): Invalid header checksum
[ 1251.096585][ T1313] Bluetooth: (null): Invalid header checksum
[ 1253.609622][T17791] 9pnet_fd: Insufficient options for proto=fd
[ 1255.198295][ T7737] Bluetooth: (null): Invalid header checksum
[ 1255.204414][ T7737] Bluetooth: (null): Invalid header checksum
[ 1255.245238][ T7737] Bluetooth: (null): Invalid header checksum
[ 1255.854795][T17814] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1255.854795][T17814]    program syz.3.3190 not setting count and/or reply_len properly
[ 1256.482468][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3190'.
[ 1258.191228][T17827] 9pnet_fd: Insufficient options for proto=fd
[ 1258.686253][T17837] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1259.768129][T17852] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3199'.
[ 1261.189870][T17856] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1261.189870][T17856]    program syz.2.3203 not setting count and/or reply_len properly
[ 1261.230580][   T60] Bluetooth: (null): Invalid header checksum
[ 1261.267995][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3203'.
[ 1261.286689][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[ 1261.293049][   T60] Bluetooth: (null): Invalid header checksum
[ 1261.345565][   T60] Bluetooth: (null): Invalid header checksum
[ 1263.500073][T17872] 9pnet_fd: Insufficient options for proto=fd
[ 1264.744723][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3213'.
[ 1266.225484][T17908] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1266.225484][T17908]    program syz.2.3215 not setting count and/or reply_len properly
[ 1266.463590][T17908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'.
[ 1269.235538][T17935] 9pnet_fd: Insufficient options for proto=fd
[ 1271.069222][T17955] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1271.069222][T17955]    program syz.3.3228 not setting count and/or reply_len properly
[ 1271.199725][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3228'.
[ 1274.000418][T17984] siw: device registration error -23
[ 1275.596103][T17993] 9pnet_fd: Insufficient options for proto=fd
[ 1279.571617][T18031] siw: device registration error -23
[ 1282.182549][ T5841] Bluetooth: hci5: command 0x0406 tx timeout
[ 1283.540029][T18068] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1283.540029][T18068]    program syz.4.3258 not setting count and/or reply_len properly
[ 1283.622908][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3258'.
[ 1290.150897][T18118] overlayfs: failed to get inode (-116)
[ 1290.160052][T18118] overlayfs: failed to get inode (-116)
[ 1290.187436][T18118] overlayfs: failed to get inode (-116)
[ 1290.199391][T18118] overlayfs: failed to get inode (-116)
[ 1292.760227][T18146] siw: device registration error -23
[ 1295.107069][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3284'.
[ 1296.953701][T18187] siw: device registration error -23
[ 1299.341637][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'.
[ 1300.062706][T18211] siw: device registration error -23
[ 1300.445848][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.453625][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1303.799200][T18247] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1307.428639][ T5841] Bluetooth: hci0: command 0x0406 tx timeout
[ 1310.141022][T18295] siw: device registration error -23
[ 1311.484617][T18301] overlayfs: failed to resolve './file0': -2
[ 1312.619491][T18315] fuse: Bad value for 'fd'
[ 1317.476327][T18351] siw: device registration error -23
[ 1319.007126][T18353] overlayfs: failed to get inode (-116)
[ 1319.016636][T18353] overlayfs: failed to get inode (-116)
[ 1319.041714][T18353] overlayfs: failed to get inode (-116)
[ 1319.052377][T18353] overlayfs: failed to get inode (-116)
[ 1319.568094][ T6029] Bluetooth: (null): Invalid header checksum
[ 1319.675405][ T6029] Bluetooth: (null): Invalid header checksum
[ 1319.681504][ T6029] Bluetooth: (null): Invalid header checksum
[ 1319.701123][T18358] fuse: Bad value for 'fd'
[ 1319.746288][T18241] Bluetooth: (null): Invalid header checksum
[ 1319.766641][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1319.798059][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1319.807464][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1319.855708][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1319.863368][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1322.537876][T17001] Bluetooth: hci3: command tx timeout
[ 1323.237981][T18385] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1323.237981][T18385]    program syz.2.3348 not setting count and/or reply_len properly
[ 1324.565461][T17001] Bluetooth: hci3: command tx timeout
[ 1324.788137][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3348'.
[ 1324.808002][T18395] siw: device registration error -23
[ 1325.143654][T18404] overlayfs: failed to get inode (-116)
[ 1325.152517][T18404] overlayfs: failed to get inode (-116)
[ 1325.173503][T18404] overlayfs: failed to get inode (-116)
[ 1325.183511][T18404] overlayfs: failed to get inode (-116)
[ 1325.430918][T18405] fuse: Bad value for 'fd'
[ 1325.444563][T18231] syz_tun (unregistering): left allmulticast mode
[ 1326.497115][T18409] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1326.645221][T17001] Bluetooth: hci3: command tx timeout
[ 1326.649252][T17027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1328.725256][T17001] Bluetooth: hci3: command tx timeout
[ 1328.776664][T17027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1328.977313][T18359] chnl_net:caif_netlink_parms(): no params data found
[ 1329.761823][T18436] siw: device registration error -23
[ 1330.455829][T18443] siw: device registration error -23
[ 1332.167190][T17027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1332.553191][T18449] overlayfs: failed to get inode (-116)
[ 1332.568293][T18449] overlayfs: failed to get inode (-116)
[ 1332.601616][T18449] overlayfs: failed to get inode (-116)
[ 1332.620009][T18449] overlayfs: failed to get inode (-116)
[ 1332.699878][T18359] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1332.716385][T18359] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1332.725542][T18359] bridge_slave_0: entered allmulticast mode
[ 1332.744104][T18359] bridge_slave_0: entered promiscuous mode
[ 1332.783225][T18359] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1332.815870][T18359] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1332.830793][T18359] bridge_slave_1: entered allmulticast mode
[ 1332.856447][T18359] bridge_slave_1: entered promiscuous mode
[ 1332.999389][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[ 1333.074137][T17027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1333.225843][T18458] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3367'.
[ 1333.816041][T18359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1333.838556][T18359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1334.403510][T18359] team0: Port device team_slave_0 added
[ 1334.426649][T18359] team0: Port device team_slave_1 added
[ 1334.710196][T18359] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1334.718545][T18359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1334.746370][T18359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1334.778440][T18359] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1334.785624][T18359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1335.017753][T18359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1335.608603][T17027] bridge_slave_1: left allmulticast mode
[ 1335.614319][T17027] bridge_slave_1: left promiscuous mode
[ 1335.621481][T17027] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1335.634367][T17027] bridge_slave_0: left allmulticast mode
[ 1335.682152][T17027] bridge_slave_0: left promiscuous mode
[ 1335.697605][T17027] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1335.810151][T18480] siw: device registration error -23
[ 1337.277477][T18481] siw: device registration error -23
[ 1339.856677][T18493] overlayfs: failed to get inode (-116)
[ 1339.867983][T18493] overlayfs: failed to get inode (-116)
[ 1339.925795][T18493] overlayfs: failed to get inode (-116)
[ 1339.937191][T18493] overlayfs: failed to get inode (-116)
[ 1340.369526][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1340.387721][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1340.401972][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1340.415634][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1340.436906][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1342.679302][T18510] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3382'.
[ 1343.135224][ T5841] Bluetooth: hci1: command tx timeout
[ 1344.036173][T18520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3384'.
[ 1345.932360][T18533] siw: device registration error -23
[ 1346.182465][T17001] Bluetooth: hci1: command tx timeout
[ 1347.141955][T18544] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3391'.
[ 1347.385454][T17027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1347.481253][T18552] siw: device registration error -23
[ 1347.491714][T17027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1347.532090][T17027] bond0 (unregistering): Released all slaves
[ 1347.613031][T18359] hsr_slave_0: entered promiscuous mode
[ 1347.620160][T18359] hsr_slave_1: entered promiscuous mode
[ 1347.628008][T18359] debugfs: 'hsr0' already exists in 'hsr'
[ 1347.633858][T18359] Cannot create hsr debugfs directory
[ 1348.245440][T17001] Bluetooth: hci1: command tx timeout
[ 1348.925900][T18559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3393'.
[ 1350.325249][T17001] Bluetooth: hci1: command tx timeout
[ 1351.002386][T17027] hsr_slave_0: left promiscuous mode
[ 1351.095253][T17027] hsr_slave_1: left promiscuous mode
[ 1351.101480][T17027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1351.110349][T17027] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1351.130003][T17027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1351.137593][T17027] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1351.305564][T17027] veth1_macvtap: left promiscuous mode
[ 1351.311838][T17027] veth0_macvtap: left promiscuous mode
[ 1351.328187][T17027] veth1_vlan: left promiscuous mode
[ 1351.334774][T17027] veth0_vlan: left promiscuous mode
[ 1351.431706][T18575] siw: device registration error -23
[ 1352.340422][T18578] overlayfs: failed to get inode (-116)
[ 1352.346734][T18578] overlayfs: failed to get inode (-116)
[ 1352.364489][T18578] overlayfs: failed to get inode (-116)
[ 1352.378629][T18578] overlayfs: failed to get inode (-116)
[ 1353.514181][T17027] team0 (unregistering): Port device team_slave_1 removed
[ 1353.570893][T17027] team0 (unregistering): Port device team_slave_0 removed
[ 1356.117871][T18359] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1356.294152][T18359] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1356.302782][T18609] siw: device registration error -23
[ 1356.550926][T18359] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1356.741276][T18359] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1357.669353][T17027] IPVS: stop unused estimator thread 0...
[ 1358.043217][T18633] siw: device registration error -23
[ 1358.636673][T18501] chnl_net:caif_netlink_parms(): no params data found
[ 1358.741763][T18359] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1358.782639][T18359] 8021q: adding VLAN 0 to HW filter on device team0
[ 1358.938349][T18241] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1358.945634][T18241] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1359.087597][T18241] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1359.094744][T18241] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1359.373095][T18501] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1359.380804][T18501] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1359.388442][T18501] bridge_slave_0: entered allmulticast mode
[ 1359.396755][T18501] bridge_slave_0: entered promiscuous mode
[ 1359.413553][T18501] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1359.425411][T18501] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1359.432784][T18501] bridge_slave_1: entered allmulticast mode
[ 1359.449751][T18501] bridge_slave_1: entered promiscuous mode
[ 1359.716743][T18501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1359.750494][T18501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1359.962814][T18501] team0: Port device team_slave_0 added
[ 1360.055033][T18501] team0: Port device team_slave_1 added
[ 1360.178269][T18359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1360.331882][T18501] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1360.347058][T18501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1360.514301][T18501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1360.542600][T18501] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1360.550902][T18501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1360.712374][T18501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1361.611157][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.618150][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.763209][T18359] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1361.830679][T18501] hsr_slave_0: entered promiscuous mode
[ 1361.846165][T18501] hsr_slave_1: entered promiscuous mode
[ 1361.868022][T18501] debugfs: 'hsr0' already exists in 'hsr'
[ 1361.873818][T18501] Cannot create hsr debugfs directory
[ 1364.196235][T18501] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1364.225113][T18501] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1364.245158][T18501] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1364.264105][T18501] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1364.359145][T18359] veth0_vlan: entered promiscuous mode
[ 1364.416773][T18359] veth1_vlan: entered promiscuous mode
[ 1364.548128][T18697] siw: device registration error -23
[ 1364.624288][T18359] veth0_macvtap: entered promiscuous mode
[ 1364.669059][T18359] veth1_macvtap: entered promiscuous mode
[ 1364.725859][T18501] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1364.790427][T18501] 8021q: adding VLAN 0 to HW filter on device team0
[ 1364.803694][T18359] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1364.845834][T18359] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1364.868026][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1364.875607][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1364.958726][   T30] audit: type=1326 audit(1764157112.029:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18700 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1364.995451][T18491] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1365.002656][T18491] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1365.028712][   T30] audit: type=1326 audit(1764157112.039:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18700 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1365.065280][   T30] audit: type=1326 audit(1764157112.039:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18700 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1365.097334][T18491] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1365.115226][T18491] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1365.133523][   T30] audit: type=1326 audit(1764157112.039:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18700 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1365.159193][T18491] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1365.172434][T18491] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1365.201741][   T30] audit: type=1326 audit(1764157112.039:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18700 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1365.283210][   T30] audit: type=1326 audit(1764157112.039:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18700 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1365.368321][   T30] audit: type=1326 audit(1764157112.039:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18700 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1366.170763][ T7733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1366.190850][ T7733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1366.201473][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1366.226033][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1366.259387][T18715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1366.457488][T18715] syzkaller0: entered promiscuous mode
[ 1366.463179][T18715] syzkaller0: entered allmulticast mode
[ 1366.470262][T18715] tipc: Resetting bearer <eth:syzkaller0>
[ 1366.515746][T18713] tipc: Resetting bearer <eth:syzkaller0>
[ 1371.823358][T18713] tipc: Disabling bearer <eth:syzkaller0>
[ 1371.843273][ T7482] tipc: Node number set to 34703365
[ 1371.988745][T18501] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1378.873816][T18501] veth0_vlan: entered promiscuous mode
[ 1378.941951][T18501] veth1_vlan: entered promiscuous mode
[ 1379.061998][T18501] veth0_macvtap: entered promiscuous mode
[ 1379.167379][T18501] veth1_macvtap: entered promiscuous mode
[ 1379.986716][T18501] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1380.252006][T18501] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1380.282595][ T6029] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1380.943795][ T6029] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.059270][ T6029] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.099725][ T6029] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.730112][T18853] loop6: detected capacity change from 0 to 512
[ 1382.737919][T18853] EXT4-fs: Ignoring removed oldalloc option
[ 1382.809466][T18853] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 1382.824626][T18853] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1382.970031][T18853] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2857: Unable to expand inode 11. Delete some EAs or run e2fsck.
[ 1382.987078][T18853] EXT4-fs (loop6): 1 truncate cleaned up
[ 1383.010573][T18853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1383.745238][ T5897] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1383.746570][T18491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1383.761681][T18491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1384.308734][T18491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1384.317502][T18491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1384.389505][T18359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1384.395166][ T5897] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[ 1384.407947][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1384.438476][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1385.149457][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1385.163069][ T5897] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1385.172209][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1385.206798][ T5897] usb 4-1: config 0 descriptor??
[ 1385.465955][ T5897] usbhid 4-1:0.0: can't add hid device: -71
[ 1386.059078][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1386.069825][ T5897] usb 4-1: USB disconnect, device number 40
[ 1386.579117][T18885] netlink: 'syz.6.3465': attribute type 2 has an invalid length.
[ 1387.369463][T18891] tracefs: Bad value for 'mode'
[ 1391.195441][T17766] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1391.365192][ T5870] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1391.375713][T17766] usb 6-1: Using ep0 maxpacket: 16
[ 1391.392244][T17766] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[ 1391.411536][T17766] usb 6-1: config 1 has no interface number 0
[ 1391.431955][T17766] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1391.442766][T17766] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1391.453487][T17766] usb 6-1: config 1 interface 105 has no altsetting 0
[ 1391.490974][T17766] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1391.505476][T17766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1391.523010][T17766] usb 6-1: Product: syz
[ 1391.531401][T17766] usb 6-1: Manufacturer: syz
[ 1391.555188][ T5870] usb 4-1: Using ep0 maxpacket: 16
[ 1391.570086][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1391.715466][T17766] usb 6-1: SerialNumber: syz
[ 1392.590209][ T5870] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1392.652048][T18944] loop6: detected capacity change from 0 to 256
[ 1392.664490][T18944] vfat: Bad value for 'check'
[ 1392.729730][T18925] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1392.729946][T18925] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1393.849387][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.849418][ T5870] usb 4-1: Product: syz
[ 1393.849434][ T5870] usb 4-1: Manufacturer: syz
[ 1393.849451][ T5870] usb 4-1: SerialNumber: syz
[ 1393.852232][ T5870] usb 4-1: config 0 descriptor??
[ 1393.855402][ T5870] asix 4-1:0.0: probe with driver asix failed with error -22
[ 1393.968869][T17766] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71
[ 1393.971986][T17766] usb 6-1: USB disconnect, device number 15
[ 1395.322079][T18387] usb 4-1: USB disconnect, device number 41
[ 1397.396833][T18984] loop5: detected capacity change from 0 to 512
[ 1397.419515][T18984] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1397.479141][T18984] EXT4-fs: inline encryption not supported
[ 1397.508080][T18984] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1397.537955][T18984] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1397.556008][T18984] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1397.633308][T18984] EXT4-fs (loop5): 1 truncate cleaned up
[ 1397.661760][T18984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1397.920167][T18994] loop3: detected capacity change from 0 to 512
[ 1398.800240][T11782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1399.698005][T18991] loop4: detected capacity change from 0 to 40427
[ 1399.756410][T18991] F2FS-fs (loop4): invalid crc value
[ 1399.956834][T18991] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1399.982010][T18991] F2FS-fs (loop4): Start checkpoint disabled!
[ 1400.008597][T18991] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[ 1400.023573][T18991] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 1400.161272][T17545] kworker/u8:7: attempt to access beyond end of device
[ 1400.161272][T17545] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[ 1400.459535][T17545] CPU: 1 UID: 0 PID: 17545 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[ 1400.459565][T17545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1400.459577][T17545] Workqueue: writeback wb_workfn (flush-7:4)
[ 1400.459619][T17545] Call Trace:
[ 1400.459627][T17545]  <TASK>
[ 1400.459636][T17545]  dump_stack_lvl+0x189/0x250
[ 1400.459666][T17545]  ? preempt_schedule_thunk+0x16/0x30
[ 1400.459692][T17545]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1400.459720][T17545]  ? __pfx_queue_work_on+0x10/0x10
[ 1400.459743][T17545]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1400.459766][T17545]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1400.459798][T17545]  f2fs_handle_critical_error+0x37c/0x540
[ 1400.459828][T17545]  f2fs_write_end_io+0x94b/0xc10
[ 1400.459873][T17545]  __submit_merged_bio+0x256/0x660
[ 1400.459906][T17545]  __submit_merged_write_cond+0x269/0x530
[ 1400.459937][T17545]  f2fs_write_data_pages+0x2756/0x3290
[ 1400.459999][T17545]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1400.460040][T17545]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1400.460113][T17545]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1400.460157][T17545]  ? __lock_acquire+0x6b6/0x2cf0
[ 1400.460189][T17545]  ? __lock_acquire+0x6b6/0x2cf0
[ 1400.460218][T17545]  ? lock_list_lru_of_memcg+0x2e/0x4c0
[ 1400.460249][T17545]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1400.460273][T17545]  do_writepages+0x32e/0x550
[ 1400.460299][T17545]  ? reacquire_held_locks+0x121/0x1c0
[ 1400.460326][T17545]  ? writeback_sb_inodes+0x3bd/0x1870
[ 1400.460362][T17545]  __writeback_single_inode+0x133/0x1240
[ 1400.460391][T17545]  ? do_raw_spin_unlock+0x122/0x240
[ 1400.460418][T17545]  writeback_sb_inodes+0x93a/0x1870
[ 1400.460476][T17545]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1400.460550][T17545]  ? rcu_is_watching+0x15/0xb0
[ 1400.460580][T17545]  wb_writeback+0x42b/0xaa0
[ 1400.460617][T17545]  ? queue_io+0x251/0x450
[ 1400.460648][T17545]  ? __pfx_wb_writeback+0x10/0x10
[ 1400.460681][T17545]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1400.460711][T17545]  wb_workfn+0x3f9/0xed0
[ 1400.460752][T17545]  ? __pfx_wb_workfn+0x10/0x10
[ 1400.460793][T17545]  ? process_one_work+0x868/0x15a0
[ 1400.460824][T17545]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1400.460851][T17545]  ? process_one_work+0x868/0x15a0
[ 1400.460874][T17545]  process_one_work+0x93a/0x15a0
[ 1400.460923][T17545]  ? __pfx_process_one_work+0x10/0x10
[ 1400.460959][T17545]  ? assign_work+0x3a1/0x410
[ 1400.460989][T17545]  worker_thread+0x9b0/0xee0
[ 1400.461043][T17545]  kthread+0x711/0x8a0
[ 1400.461073][T17545]  ? __pfx_worker_thread+0x10/0x10
[ 1400.461097][T17545]  ? __pfx_kthread+0x10/0x10
[ 1400.461116][T17545]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1400.461137][T17545]  ? lockdep_hardirqs_on+0x98/0x140
[ 1400.461159][T17545]  ? __pfx_kthread+0x10/0x10
[ 1400.461178][T17545]  ret_from_fork+0x599/0xb30
[ 1400.461204][T17545]  ? __pfx_ret_from_fork+0x10/0x10
[ 1400.461239][T17545]  ? __switch_to_asm+0x39/0x70
[ 1400.461257][T17545]  ? __switch_to_asm+0x33/0x70
[ 1400.461274][T17545]  ? __pfx_kthread+0x10/0x10
[ 1400.461294][T17545]  ret_from_fork_asm+0x1a/0x30
[ 1400.461332][T17545]  </TASK>
[ 1400.461404][T17545] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1400.797626][T17545] CPU: 1 UID: 0 PID: 17545 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[ 1400.797653][T17545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1400.797664][T17545] Workqueue: writeback wb_workfn (flush-7:4)
[ 1400.797695][T17545] Call Trace:
[ 1400.797701][T17545]  <TASK>
[ 1400.797709][T17545]  dump_stack_lvl+0x189/0x250
[ 1400.797743][T17545]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1400.797771][T17545]  ? __pfx_queue_work_on+0x10/0x10
[ 1400.797794][T17545]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1400.797819][T17545]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1400.797856][T17545]  f2fs_handle_critical_error+0x37c/0x540
[ 1400.797885][T17545]  f2fs_write_end_io+0x94b/0xc10
[ 1400.797934][T17545]  __submit_merged_bio+0x256/0x660
[ 1400.797965][T17545]  __submit_merged_write_cond+0x269/0x530
[ 1400.797991][T17545]  f2fs_write_data_pages+0x2756/0x3290
[ 1400.798052][T17545]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1400.798092][T17545]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1400.798161][T17545]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1400.798222][T17545]  ? __lock_acquire+0x6b6/0x2cf0
[ 1400.798254][T17545]  ? __lock_acquire+0x6b6/0x2cf0
[ 1400.798283][T17545]  ? lock_list_lru_of_memcg+0x2e/0x4c0
[ 1400.798318][T17545]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1400.798346][T17545]  do_writepages+0x32e/0x550
[ 1400.798401][T17545]  ? reacquire_held_locks+0x121/0x1c0
[ 1400.798429][T17545]  ? writeback_sb_inodes+0x3bd/0x1870
[ 1400.798466][T17545]  __writeback_single_inode+0x133/0x1240
[ 1400.798497][T17545]  ? do_raw_spin_unlock+0x122/0x240
[ 1400.798524][T17545]  writeback_sb_inodes+0x93a/0x1870
[ 1400.798586][T17545]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1400.798669][T17545]  ? rcu_is_watching+0x15/0xb0
[ 1400.798700][T17545]  wb_writeback+0x42b/0xaa0
[ 1400.798739][T17545]  ? queue_io+0x251/0x450
[ 1400.798770][T17545]  ? __pfx_wb_writeback+0x10/0x10
[ 1400.798808][T17545]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1400.798838][T17545]  wb_workfn+0x3f9/0xed0
[ 1400.798884][T17545]  ? __pfx_wb_workfn+0x10/0x10
[ 1400.798931][T17545]  ? process_one_work+0x868/0x15a0
[ 1400.798965][T17545]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1400.798992][T17545]  ? process_one_work+0x868/0x15a0
[ 1400.799015][T17545]  process_one_work+0x93a/0x15a0
[ 1400.799068][T17545]  ? __pfx_process_one_work+0x10/0x10
[ 1400.799106][T17545]  ? assign_work+0x3a1/0x410
[ 1400.799139][T17545]  worker_thread+0x9b0/0xee0
[ 1400.799199][T17545]  kthread+0x711/0x8a0
[ 1400.799230][T17545]  ? __pfx_worker_thread+0x10/0x10
[ 1400.799256][T17545]  ? __pfx_kthread+0x10/0x10
[ 1400.799279][T17545]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1400.799301][T17545]  ? lockdep_hardirqs_on+0x98/0x140
[ 1400.799322][T17545]  ? __pfx_kthread+0x10/0x10
[ 1400.799343][T17545]  ret_from_fork+0x599/0xb30
[ 1400.799372][T17545]  ? __pfx_ret_from_fork+0x10/0x10
[ 1400.799411][T17545]  ? __switch_to_asm+0x39/0x70
[ 1400.799428][T17545]  ? __switch_to_asm+0x33/0x70
[ 1400.799443][T17545]  ? __pfx_kthread+0x10/0x10
[ 1400.799464][T17545]  ret_from_fork_asm+0x1a/0x30
[ 1400.799506][T17545]  </TASK>
[ 1400.799515][T17545] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1401.327373][T19024] syzkaller0: entered promiscuous mode
[ 1401.333026][T19024] syzkaller0: entered allmulticast mode
[ 1404.437804][T19068] loop5: detected capacity change from 0 to 512
[ 1404.447375][T19068] EXT4-fs: Ignoring removed oldalloc option
[ 1404.468635][T19068] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1404.612360][T19063] overlayfs: failed to get inode (-116)
[ 1404.626297][T19063] overlayfs: failed to get inode (-116)
[ 1404.783416][T19063] overlayfs: failed to get inode (-116)
[ 1404.820446][T19068] EXT4-fs (loop5): 1 truncate cleaned up
[ 1404.830275][T19063] overlayfs: failed to get inode (-116)
[ 1404.851425][T19068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1404.982541][T11782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1405.695463][T19058] loop4: detected capacity change from 0 to 40427
[ 1405.721752][T19058] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 1405.744092][T19058] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1405.760317][T19058] F2FS-fs (loop4): invalid crc value
[ 1405.969053][T19058] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1406.051913][T19058] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1406.077175][T19058] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1409.449383][T19119] loop6: detected capacity change from 0 to 512
[ 1409.459474][T19119] EXT4-fs: Ignoring removed oldalloc option
[ 1409.470041][T19119] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1409.527752][T19119] EXT4-fs (loop6): 1 truncate cleaned up
[ 1409.536406][T19119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1409.593067][T18359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1409.645527][T16719] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1409.805284][T16719] usb 4-1: Using ep0 maxpacket: 32
[ 1409.821522][T16719] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[ 1409.860630][T16719] usb 4-1: config 0 has no interface number 0
[ 1409.868985][T16719] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1409.887638][T16719] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1409.901499][T16719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.916785][T16719] usb 4-1: Product: syz
[ 1409.922025][T16719] usb 4-1: Manufacturer: syz
[ 1409.928423][T16719] usb 4-1: SerialNumber: syz
[ 1409.937843][T19130] loop6: detected capacity change from 0 to 512
[ 1409.938942][T16719] usb 4-1: config 0 descriptor??
[ 1409.964594][T19130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1409.981225][T19117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1410.050183][T19130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1410.075837][T19130] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1410.209266][T19117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1410.439267][T16719] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1410.476850][T16719] asix 4-1:0.188: probe with driver asix failed with error -61
[ 1410.554394][T18359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1412.792410][T17211] usb 4-1: USB disconnect, device number 42
[ 1415.284666][T19160] siw: device registration error -23
[ 1415.947525][T19163] overlayfs: failed to get inode (-116)
[ 1415.972769][T19163] overlayfs: failed to get inode (-116)
[ 1415.999751][T19152] overlayfs: failed to get inode (-116)
[ 1416.007018][T19152] overlayfs: failed to get inode (-116)
[ 1417.646629][ T7840] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1417.954615][T19204] loop7: detected capacity change from 0 to 1024
[ 1418.065858][T19204] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1418.287727][ T7840] usb 7-1: Using ep0 maxpacket: 8
[ 1419.471182][ T7840] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01
[ 1419.522462][ T7840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1419.627667][ T7840] usb 7-1: config 0 descriptor??
[ 1419.639083][T18501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1420.183065][ T7840] usb 7-1: can't set config #0, error -71
[ 1420.201591][ T7840] usb 7-1: USB disconnect, device number 2
[ 1420.602763][T19238] siw: device registration error -23
[ 1421.219237][T19233] overlayfs: failed to get inode (-116)
[ 1421.225751][T19233] overlayfs: failed to get inode (-116)
[ 1421.300627][T19239] loop5: detected capacity change from 0 to 1024
[ 1421.310337][T19233] overlayfs: failed to get inode (-116)
[ 1421.316637][T19233] overlayfs: failed to get inode (-116)
[ 1421.451593][T19239] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 1421.465244][T19239] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[ 1422.572803][T19239] JBD2: no valid journal superblock found
[ 1422.820108][T19239] EXT4-fs (loop5): Could not load journal inode
[ 1422.938053][T19257] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1422.948519][T19257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1422.979373][T19257] bridge0: entered allmulticast mode
[ 1422.997876][T19261] bridge_slave_1: left allmulticast mode
[ 1423.033736][T19261] bridge_slave_1: left promiscuous mode
[ 1423.040859][T19261] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1423.057664][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.068222][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.294886][T19267] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3569'.
[ 1424.116973][T19261] bridge_slave_0: left allmulticast mode
[ 1424.167646][T19261] bridge_slave_0: left promiscuous mode
[ 1424.188339][T19261] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1426.020105][T19286] siw: device registration error -23
[ 1428.978157][T19302] siw: device registration error -23
[ 1429.530443][   T30] audit: type=1326 audit(1764157176.689:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.3.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1429.561005][   T30] audit: type=1326 audit(1764157176.719:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.3.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1429.639228][   T30] audit: type=1326 audit(1764157176.749:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.3.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1429.684929][   T30] audit: type=1326 audit(1764157176.749:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.3.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1429.755482][   T30] audit: type=1326 audit(1764157176.749:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.3.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1429.931848][   T30] audit: type=1326 audit(1764157177.059:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.3.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1430.195537][   T30] audit: type=1326 audit(1764157177.079:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.3.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1431.304817][T19335] siw: device registration error -23
[ 1435.862273][   T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1436.002046][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3599'.
[ 1436.057260][T19372] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3599'.
[ 1436.332834][T19379] loop6: detected capacity change from 0 to 2048
[ 1436.410325][   T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1436.437240][T19379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1436.850900][T19385] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1438.246746][T19387] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28
[ 1438.259719][T19387] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1438.259719][T19387] 
[ 1438.271027][T19387] EXT4-fs (loop6): Total free blocks count 0
[ 1438.278425][T19387] EXT4-fs (loop6): Free/Dirty block details
[ 1438.284471][T19387] EXT4-fs (loop6): free_blocks=2415919104
[ 1438.291253][T19387] EXT4-fs (loop6): dirty_blocks=32
[ 1438.297373][T19387] EXT4-fs (loop6): Block reservation details
[ 1438.304529][T19387] EXT4-fs (loop6): i_reserved_data_blocks=2
[ 1438.550723][   T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1438.900236][T18359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1439.366298][T19402] siw: device registration error -23
[ 1439.979131][   T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1441.395906][T19414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3609'.
[ 1442.064783][T19412] netlink: 'syz.4.3608': attribute type 3 has an invalid length.
[ 1442.222945][T19412] netlink: 'syz.4.3608': attribute type 3 has an invalid length.
[ 1442.914629][   T60] bridge_slave_1: left allmulticast mode
[ 1442.970723][   T60] bridge_slave_1: left promiscuous mode
[ 1442.995578][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1443.058167][   T60] bridge_slave_0: left allmulticast mode
[ 1443.083708][   T60] bridge_slave_0: left promiscuous mode
[ 1443.089032][T19427] loop3: detected capacity change from 0 to 512
[ 1443.091008][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1443.149390][T19427] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1443.163028][T19427] EXT4-fs: inline encryption not supported
[ 1443.175200][T19427] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1443.200803][T19427] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1443.209044][T19427] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1443.233594][T19427] EXT4-fs (loop3): 1 truncate cleaned up
[ 1443.253113][T19427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1444.487346][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3615'.
[ 1444.498083][T19445] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3615'.
[ 1444.762517][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1444.777818][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1444.791799][   T60] bond0 (unregistering): Released all slaves
[ 1444.977850][T16739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1446.224141][T17001] Bluetooth: hci3: command 0x0406 tx timeout
[ 1447.048029][T19474] siw: device registration error -23
[ 1448.301231][T19477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3623'.
[ 1448.414666][T19479] loop3: detected capacity change from 0 to 128
[ 1448.506203][T19479] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1448.545474][T19479] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1449.522104][T16739] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1450.065370][   T60] hsr_slave_0: left promiscuous mode
[ 1450.084580][   T60] hsr_slave_1: left promiscuous mode
[ 1450.270855][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1450.722035][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1450.887073][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1450.921994][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1451.219146][   T60] veth1_macvtap: left promiscuous mode
[ 1451.230549][   T60] veth0_macvtap: left promiscuous mode
[ 1451.239227][   T60] veth1_vlan: left promiscuous mode
[ 1451.248290][   T60] veth0_vlan: left promiscuous mode
[ 1451.456231][T19505] loop3: detected capacity change from 0 to 512
[ 1451.463883][T19505] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1451.477139][T17766] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1451.505301][T19505] EXT4-fs: inline encryption not supported
[ 1451.512186][T19505] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1451.544917][T19505] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1451.553324][T19505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1451.604369][T19505] EXT4-fs (loop3): 1 truncate cleaned up
[ 1451.612810][T19505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1451.793475][T19508] loop5: detected capacity change from 0 to 512
[ 1451.809581][T19508] EXT4-fs: Ignoring removed bh option
[ 1451.846983][T17766] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1451.860370][T17766] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1451.872456][T17766] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1451.887160][T17766] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1451.902119][T17766] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1451.913742][T17766] usb 7-1: config 0 descriptor??
[ 1452.446633][T19508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1452.478319][T19508] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1452.540709][   T30] audit: type=1800 audit(1764157199.699:32): pid=19508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3631" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1452.628597][T11782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1452.632233][T17766] hid_parser_main: 5 callbacks suppressed
[ 1452.632256][T17766] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1452.666625][T17766] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1452.688494][T17766] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1452.698625][T17766] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1452.729621][T17766] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1452.745338][T17766] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1452.769871][T17766] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1452.795176][T17766] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1452.824030][T17766] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1452.832433][T17766] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[ 1452.849512][T17766] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1452.878894][T17766] usb 7-1: USB disconnect, device number 3
[ 1453.131176][   T60] team0 (unregistering): Port device team_slave_1 removed
[ 1453.640113][   T60] team0 (unregistering): Port device team_slave_0 removed
[ 1454.831396][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3634'.
[ 1454.855606][T19531] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3634'.
[ 1455.217344][T16739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1455.223843][T19520] ip6gretap0: entered promiscuous mode
[ 1455.667658][T19542] siw: device registration error -23
[ 1456.975291][T19548] loop6: detected capacity change from 0 to 512
[ 1457.006442][T19548] EXT4-fs: Ignoring removed bh option
[ 1457.096529][   T60] IPVS: stop unused estimator thread 0...
[ 1457.098262][T19548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1457.119015][T19548] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1457.221106][T19548] capability: warning: `syz.6.3639' uses 32-bit capabilities (legacy support in use)
[ 1457.359744][   T30] audit: type=1800 audit(1764157204.509:33): pid=19560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3639" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1459.167770][T18359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1461.947470][T19592] loop3: detected capacity change from 0 to 4096
[ 1461.971375][T19592] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1462.896459][T19592] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1463.001052][T19592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1463.035962][T19608] loop4: detected capacity change from 0 to 512
[ 1463.117911][T19609] loop6: detected capacity change from 0 to 512
[ 1463.129679][T19609] EXT4-fs: Ignoring removed oldalloc option
[ 1463.163857][T19609] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1463.299284][T19609] EXT4-fs (loop6): 1 truncate cleaned up
[ 1463.321266][T19609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1463.542872][T19608] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1463.732705][T19608] EXT4-fs: inline encryption not supported
[ 1463.768525][T19608] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1463.818609][T19608] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1463.865645][T19608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1464.150332][T19608] EXT4-fs (loop4): 1 truncate cleaned up
[ 1464.160254][T19608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1465.010451][T16739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1465.359619][T18359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1465.563220][T19622] loop5: detected capacity change from 0 to 128
[ 1465.959253][T17216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1466.764682][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[ 1471.251252][T19656] loop7: detected capacity change from 0 to 256
[ 1471.259632][T19656] vfat: Bad value for 'check'
[ 1471.939165][T19660] loop7: detected capacity change from 0 to 128
[ 1472.019171][T19660] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1472.075625][T19660] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1472.294746][T19665] 9p: Bad value for 'rfdno'
[ 1473.025822][T17211] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1473.255123][T17211] usb 8-1: Using ep0 maxpacket: 32
[ 1473.295188][T17211] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1473.337826][T17211] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1473.389918][T17211] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1473.419392][T17211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1473.461493][T17211] usb 8-1: config 0 descriptor??
[ 1473.482726][T17211] hub 8-1:0.0: USB hub found
[ 1473.845647][T17211] hub 8-1:0.0: 1 port detected
[ 1474.019187][T19676] loop4: detected capacity change from 0 to 512
[ 1474.031112][T19676] EXT4-fs: Ignoring removed oldalloc option
[ 1474.061511][T19676] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1474.106469][T19676] EXT4-fs (loop4): 1 truncate cleaned up
[ 1474.127019][T19676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1474.847235][T17211] hub 8-1:0.0: hub_hub_status failed (err = -71)
[ 1474.854889][T17211] hub 8-1:0.0: config failed, can't get hub status (err -71)
[ 1475.203357][T17211] usbhid 8-1:0.0: can't add hid device: -71
[ 1475.210835][T17211] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1475.230389][T17216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1475.252896][T17211] usb 8-1: USB disconnect, device number 2
[ 1477.866494][T19708] loop5: detected capacity change from 0 to 128
[ 1478.372097][T19708] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1479.812958][T19728] loop6: detected capacity change from 0 to 512
[ 1479.827534][T19728] EXT4-fs: Ignoring removed oldalloc option
[ 1479.881917][T19728] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1479.934859][T19728] EXT4-fs (loop6): 1 truncate cleaned up
[ 1479.963798][T19728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1481.056531][T18359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1481.473093][ T7840] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1482.288800][ T7840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1482.320876][ T7840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1482.555252][ T7840] usb 8-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[ 1482.564703][ T7840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1483.542710][ T7840] usb 8-1: config 0 descriptor??
[ 1484.016029][T19755] loop4: detected capacity change from 0 to 128
[ 1484.025504][T19755] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1484.062406][T19755] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1484.085698][T19755] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1484.181130][ T7840] hid_parser_main: 5 callbacks suppressed
[ 1484.181145][ T7840] hid-led 0003:1D34:0004.000C: unknown main item tag 0x2
[ 1484.253311][T19755] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[ 1484.370787][T19737] fuse: Unknown parameter 'fd0xffffffffffffffff'
[ 1484.388552][ T7840] hid-led 0003:1D34:0004.000C: probe with driver hid-led failed with error -71
[ 1484.429179][ T7840] usb 8-1: USB disconnect, device number 3
[ 1484.495709][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.502629][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.633868][T17216] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1485.829094][T19781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'.
[ 1486.012121][T19783] loop3: detected capacity change from 0 to 512
[ 1486.639875][T19788] loop5: detected capacity change from 0 to 512
[ 1486.655275][T19788] EXT4-fs: Ignoring removed oldalloc option
[ 1486.697224][T19783] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3689: invalid block
[ 1486.789523][T19788] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1487.176928][T19788] EXT4-fs (loop5): 1 truncate cleaned up
[ 1487.198482][T19788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1487.220222][T19783] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3689: invalid indirect mapped block 4294967295 (level 1)
[ 1487.245661][T19783] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3689: invalid indirect mapped block 4294967295 (level 1)
[ 1487.480602][T19783] EXT4-fs (loop3): 2 truncates cleaned up
[ 1487.570575][T19783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1487.759585][T19783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1488.200337][T11782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1488.230765][T19793] loop6: detected capacity change from 0 to 512
[ 1488.281171][T19793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1488.305326][T19793] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1490.487291][T18359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1491.097711][T19812] loop4: detected capacity change from 0 to 512
[ 1491.153915][T19812] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1491.175199][T19812] EXT4-fs: inline encryption not supported
[ 1491.198226][T19812] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1491.229878][T19812] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1491.265222][T19812] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1491.373926][   T30] audit: type=1326 audit(1764157238.529:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.5.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1491.380105][T19812] EXT4-fs (loop4): 1 truncate cleaned up
[ 1491.410341][   T30] audit: type=1326 audit(1764157238.569:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.5.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1491.436068][   T30] audit: type=1326 audit(1764157238.569:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.5.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1491.461224][   T30] audit: type=1326 audit(1764157238.569:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.5.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1491.486576][   T30] audit: type=1326 audit(1764157238.569:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.5.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1491.492367][T19812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1491.514191][   T30] audit: type=1326 audit(1764157238.569:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.5.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1491.514244][   T30] audit: type=1326 audit(1764157238.569:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.5.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1491.514287][   T30] audit: type=1326 audit(1764157238.569:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.5.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1491.737462][   T30] audit: type=1326 audit(1764157238.689:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19804 comm="syz.5.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1491.840530][T19816] loop7: detected capacity change from 0 to 256
[ 1491.879544][T19816] exfat: Deprecated parameter 'namecase'
[ 1492.651340][T17216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1492.715375][T19816] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d)
[ 1492.898278][T19820] loop5: detected capacity change from 0 to 4096
[ 1493.021127][T19820] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1493.031545][T19820] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 1493.040565][T19820] System zones: 0-5
[ 1493.048124][T19820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1493.851033][T19820] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[ 1494.289383][T11782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1494.418170][T19841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1494.516764][   T30] audit: type=1326 audit(1764157241.679:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.6.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910b8f749 code=0x7ffc0000
[ 1494.765123][ T7840] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1494.956682][ T7840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1495.024496][ T7840] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1495.043975][ T7840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1495.085780][ T7840] usb 6-1: Product: syz
[ 1495.131683][ T7840] usb 6-1: Manufacturer: syz
[ 1495.157459][ T7840] usb 6-1: SerialNumber: syz
[ 1495.176293][ T7840] usb 6-1: config 0 descriptor??
[ 1495.198511][ T7840] usb 6-1: ucan: probing device on interface #0
[ 1495.227146][ T7840] usb 6-1: ucan: invalid EP count (0)
[ 1495.233316][ T7840] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1496.656722][   T30] kauditd_printk_skb: 20 callbacks suppressed
[ 1496.656743][   T30] audit: type=1326 audit(1764157243.759:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.6.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910b8f749 code=0x7ffc0000
[ 1496.838400][   T30] audit: type=1326 audit(1764157243.779:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19840 comm="syz.6.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7910b8f749 code=0x7ffc0000
[ 1497.211476][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3710'.
[ 1498.982952][ T5897] usb 6-1: USB disconnect, device number 16
[ 1499.034651][T19864] loop4: detected capacity change from 0 to 512
[ 1499.064084][T19864] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1499.075929][T19864] EXT4-fs: inline encryption not supported
[ 1499.081975][T19864] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1499.428908][T19864] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1499.456459][T19864] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1499.498664][T19864] EXT4-fs (loop4): 1 truncate cleaned up
[ 1499.508553][T19864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1500.488290][T17216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1501.746922][T19895] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3720'.
[ 1502.757202][T19905] loop7: detected capacity change from 0 to 512
[ 1502.805240][T19905] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1502.815268][T19905] EXT4-fs: inline encryption not supported
[ 1502.860216][T19905] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1502.890417][   T30] audit: type=1326 audit(1764157250.049:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.5.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1502.915922][T19905] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1502.924618][T19905] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1502.938978][T19908] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1502.977463][T19905] EXT4-fs (loop7): 1 truncate cleaned up
[ 1502.993079][   T30] audit: type=1326 audit(1764157250.079:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.5.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1503.000270][T19905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1503.112980][   T30] audit: type=1326 audit(1764157250.079:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.5.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1503.138091][   T30] audit: type=1326 audit(1764157250.079:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.5.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1503.162759][   T30] audit: type=1326 audit(1764157250.079:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.5.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1503.187918][   T30] audit: type=1326 audit(1764157250.079:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.5.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1503.447845][   T30] audit: type=1326 audit(1764157250.079:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.5.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1503.475738][   T30] audit: type=1326 audit(1764157250.079:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.5.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1503.505230][   T30] audit: type=1326 audit(1764157250.079:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.5.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1503.596372][   T30] audit: type=1326 audit(1764157250.079:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19901 comm="syz.5.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1504.332462][T18501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1504.454478][T19920] netlink: 'syz.6.3726': attribute type 3 has an invalid length.
[ 1504.464510][T19920] netlink: 'syz.6.3726': attribute type 3 has an invalid length.
[ 1505.477824][T19926] loop7: detected capacity change from 0 to 256
[ 1505.493371][T19926] vfat: Bad value for 'check'
[ 1506.169672][T19927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3725'.
[ 1507.560458][T19939] netlink: 300 bytes leftover after parsing attributes in process `syz.7.3731'.
[ 1508.394630][T19938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3730'.
[ 1510.136242][T19961] loop3: detected capacity change from 0 to 512
[ 1510.349920][T19961] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1510.435328][T19961] EXT4-fs: inline encryption not supported
[ 1510.442166][T19961] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1510.467688][T19961] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1510.474914][T19961] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1510.501665][T19961] EXT4-fs (loop3): 1 truncate cleaned up
[ 1510.543275][T19961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1510.574554][T19968] loop6: detected capacity change from 0 to 512
[ 1511.727298][T19980] loop5: detected capacity change from 0 to 256
[ 1511.735092][T19980] vfat: Bad value for 'check'
[ 1512.253276][T16739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1513.533891][T19989] netlink: 300 bytes leftover after parsing attributes in process `syz.6.3744'.
[ 1515.593694][T20002] loop7: detected capacity change from 0 to 512
[ 1515.642994][T20002] EXT4-fs: Ignoring removed oldalloc option
[ 1516.485941][T20002] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1517.482096][T20002] EXT4-fs: error -4 creating inode table initialization thread
[ 1517.491422][T20002] EXT4-fs (loop7): mount failed
[ 1517.795377][ T7840] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1517.900203][T20014] kvm: pic: single mode not supported
[ 1517.900398][T20014] kvm: pic: level sensitive irq not supported
[ 1517.917785][T20014] kvm: pic: level sensitive irq not supported
[ 1518.017026][ T7840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1518.058860][ T7840] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1518.070284][ T7840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.090470][ T7840] usb 4-1: Product: syz
[ 1518.100586][ T7840] usb 4-1: Manufacturer: syz
[ 1518.110729][ T7840] usb 4-1: SerialNumber: syz
[ 1518.126285][ T7840] usb 4-1: config 0 descriptor??
[ 1518.151252][ T7840] usb 4-1: ucan: probing device on interface #0
[ 1518.165973][ T7840] usb 4-1: ucan: invalid EP count (0)
[ 1518.172002][ T7840] usb 4-1: ucan: probe failed; try to update the device firmware
[ 1518.707286][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3752'.
[ 1520.569760][   T30] kauditd_printk_skb: 58 callbacks suppressed
[ 1520.569778][   T30] audit: type=1326 audit(1764157267.729:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.5.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1520.588783][T17211] usb 4-1: USB disconnect, device number 43
[ 1520.626238][   T30] audit: type=1326 audit(1764157267.789:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.5.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1520.652504][   T30] audit: type=1326 audit(1764157267.789:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.5.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1520.827058][   T30] audit: type=1326 audit(1764157267.969:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20023 comm="syz.5.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9f58f749 code=0x7ffc0000
[ 1521.006014][T20033] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3756'.
[ 1521.675509][T20038] loop6: detected capacity change from 0 to 1024
[ 1521.683244][T20038] EXT4-fs: Ignoring removed bh option
[ 1521.686488][T20037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1521.690544][T20038] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[ 1521.718880][T20037] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1521.728636][T20037] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1521.737268][T20037] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1521.745461][T20037] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1521.927525][T20038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1523.770189][T18359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1523.787141][T20037] Bluetooth: hci0: command tx timeout
[ 1523.878501][T20057] loop5: detected capacity change from 0 to 256
[ 1523.887479][T20057] vfat: Bad value for 'check'
[ 1524.172183][T20034] chnl_net:caif_netlink_parms(): no params data found
[ 1524.214554][T20068] loop3: detected capacity change from 0 to 512
[ 1524.302726][T20068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1524.335272][T20068] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1524.597816][T20075] loop6: detected capacity change from 0 to 512
[ 1524.611865][T20075] EXT4-fs: Ignoring removed oldalloc option
[ 1524.633751][T20075] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1524.740043][T20075] EXT4-fs (loop6): 1 truncate cleaned up
[ 1524.760990][T20075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1525.097378][T20068] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.3764: lblock 23 mapped to illegal pblock 18 (length 1)
[ 1525.846836][T17001] Bluetooth: hci0: command tx timeout
[ 1525.996339][T16739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1526.054697][T18359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1526.077655][T20034] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1526.104378][T20034] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1526.129179][T20034] bridge_slave_0: entered allmulticast mode
[ 1526.297199][T20034] bridge_slave_0: entered promiscuous mode
[ 1526.352508][T20034] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1526.520478][T20034] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1526.555906][T20034] bridge_slave_1: entered allmulticast mode
[ 1526.563407][T20034] bridge_slave_1: entered promiscuous mode
[ 1526.750276][T20034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1526.799719][T20034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1527.628139][T20034] team0: Port device team_slave_0 added
[ 1527.642143][T20034] team0: Port device team_slave_1 added
[ 1527.811543][T20034] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1527.849699][T20034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1527.915129][T20034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1528.030823][T17001] Bluetooth: hci0: command tx timeout
[ 1528.086473][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3773'.
[ 1528.210745][T20108] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3773'.
[ 1528.516345][T20034] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1528.524896][T20034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1528.619484][T20034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1528.802848][T20034] hsr_slave_0: entered promiscuous mode
[ 1528.826649][T20034] hsr_slave_1: entered promiscuous mode
[ 1528.836446][T20034] debugfs: 'hsr0' already exists in 'hsr'
[ 1528.843080][T20034] Cannot create hsr debugfs directory
[ 1529.995725][   T30] audit: type=1326 audit(1764157277.149:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1530.037726][   T25] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[ 1530.047606][   T30] audit: type=1326 audit(1764157277.179:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1530.070699][   T30] audit: type=1326 audit(1764157277.179:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1530.095860][T17001] Bluetooth: hci0: command tx timeout
[ 1530.101532][   T30] audit: type=1326 audit(1764157277.179:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1530.150728][   T30] audit: type=1326 audit(1764157277.189:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1530.216204][   T30] audit: type=1326 audit(1764157277.189:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1530.244082][   T30] audit: type=1326 audit(1764157277.189:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1530.279372][T20127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3775'.
[ 1530.591733][   T30] audit: type=1326 audit(1764157277.199:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1530.808659][T20034] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1530.816777][   T30] audit: type=1326 audit(1764157277.199:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1530.848461][   T30] audit: type=1326 audit(1764157277.199:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20119 comm="syz.3.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc044b8f749 code=0x7ffc0000
[ 1530.936241][T20034] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1530.976378][T20034] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1531.000088][T20034] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1531.069765][T20136] loop7: detected capacity change from 0 to 512
[ 1531.106766][T20136] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3780: bg 0: block 5: invalid block bitmap
[ 1531.165588][T20136] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem
[ 1531.174891][T20136] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3780: invalid indirect mapped block 3 (level 2)
[ 1531.222399][T20136] EXT4-fs (loop7): 2 truncates cleaned up
[ 1531.254669][T20136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1531.340847][    C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI
[ 1531.353477][    C0] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7]
[ 1531.361991][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1531.371486][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1531.382168][    C0] RIP: 0010:__queue_work+0xa2/0xf90
[ 1531.387475][    C0] Code: 10 31 ff 89 ee e8 ae 11 37 00 85 ed 0f 85 f0 0c 00 00 e8 61 0d 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 23 0d 00 00 4c 89 34 24 41 8b 2e 89 ee
[ 1531.407782][    C0] RSP: 0018:ffffc90000147870 EFLAGS: 00010002
[ 1531.413851][    C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: ffff88801ceb3d00
[ 1531.421841][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 1531.430021][    C0] RBP: 0000000000000000 R08: ffff88814d6e0147 R09: 1ffff11029adc028
[ 1531.438431][    C0] R10: dffffc0000000000 R11: ffffed1029adc029 R12: dffffc0000000000
[ 1531.446664][    C0] R13: ffff88814d6e0140 R14: 00000000000001c0 R15: 0000000000000000
[ 1531.454745][    C0] FS:  0000000000000000(0000) GS:ffff888125e88000(0000) knlGS:0000000000000000
[ 1531.463879][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1531.470821][    C0] CR2: 0000200000ed1030 CR3: 0000000064596000 CR4: 00000000003526f0
[ 1531.478969][    C0] Call Trace:
[ 1531.482420][    C0]  <TASK>
[ 1531.485515][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1531.490546][    C0]  queue_work_on+0x181/0x270
[ 1531.495286][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1531.501794][    C0]  ? __pfx_queue_work_on+0x10/0x10
[ 1531.507099][    C0]  ? __debug_object_init+0x102/0x4b0
[ 1531.512498][    C0]  ? iomap_dio_done+0x380/0x520
[ 1531.517449][    C0]  iomap_dio_bio_end_io+0xf4/0x1c0
[ 1531.522654][    C0]  blk_update_request+0x57e/0xe60
[ 1531.527697][    C0]  blk_mq_end_request+0x3e/0x70
[ 1531.532644][    C0]  blk_done_softirq+0x10a/0x160
[ 1531.537620][    C0]  handle_softirqs+0x27d/0x850
[ 1531.542486][    C0]  ? run_ksoftirqd+0x9b/0x100
[ 1531.547279][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1531.553092][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1531.558374][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1531.563502][    C0]  run_ksoftirqd+0x9b/0x100
[ 1531.568064][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[ 1531.573189][    C0]  smpboot_thread_fn+0x542/0xa60
[ 1531.578306][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1531.583347][    C0]  kthread+0x711/0x8a0
[ 1531.587442][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1531.592896][    C0]  ? __pfx_kthread+0x10/0x10
[ 1531.597512][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1531.602727][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[ 1531.607947][    C0]  ? __pfx_kthread+0x10/0x10
[ 1531.612638][    C0]  ret_from_fork+0x599/0xb30
[ 1531.617242][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1531.622456][    C0]  ? __switch_to_asm+0x39/0x70
[ 1531.627285][    C0]  ? __switch_to_asm+0x33/0x70
[ 1531.632164][    C0]  ? __pfx_kthread+0x10/0x10
[ 1531.636938][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1531.641986][    C0]  </TASK>
[ 1531.645149][    C0] Modules linked in:
[ 1531.649300][    C0] ---[ end trace 0000000000000000 ]---
[ 1531.654925][    C0] RIP: 0010:__queue_work+0xa2/0xf90
[ 1531.661006][    C0] Code: 10 31 ff 89 ee e8 ae 11 37 00 85 ed 0f 85 f0 0c 00 00 e8 61 0d 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 23 0d 00 00 4c 89 34 24 41 8b 2e 89 ee
[ 1531.681319][    C0] RSP: 0018:ffffc90000147870 EFLAGS: 00010002
[ 1531.687570][    C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: ffff88801ceb3d00
[ 1531.695636][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 1531.703683][    C0] RBP: 0000000000000000 R08: ffff88814d6e0147 R09: 1ffff11029adc028
[ 1531.711830][    C0] R10: dffffc0000000000 R11: ffffed1029adc029 R12: dffffc0000000000
[ 1531.720000][    C0] R13: ffff88814d6e0140 R14: 00000000000001c0 R15: 0000000000000000
[ 1531.728499][    C0] FS:  0000000000000000(0000) GS:ffff888125e88000(0000) knlGS:0000000000000000
[ 1531.737706][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1531.744476][    C0] CR2: 0000200000ed1030 CR3: 0000000064596000 CR4: 00000000003526f0
[ 1531.753447][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 1531.761418][    C0] Kernel Offset: disabled
[ 1531.765829][    C0] Rebooting in 86400 seconds..