last executing test programs:

21m40.661175449s ago: executing program 32 (id=13):
fsopen(&(0x7f0000000140)='9p\x00', 0x0)

21m6.560315897s ago: executing program 33 (id=57):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000004000000a000000060001001800000008000a"], 0x24}}, 0x0)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000440)='FROZEN\x00', 0x7)

20m37.746626904s ago: executing program 34 (id=114):
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000004c0)={0x0, 0x0, <r0=>0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)})
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
read(r1, &(0x7f0000000440)=""/27, 0x1b)
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000005c0)=0xd085)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000300)={0x0, r0, 0x0, 0x80000000, 0x6dfe})
syz_emit_ethernet(0x76, &(0x7f0000000400)=ANY=[], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4040010)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x0, 0x4, 0x600}}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0xd000, 0x400, 0x4, 0x6, 0x0, [{0xff, 0xfd, 0xd, '\x00', 0x7}, {0xd, 0x29, 0x0, '\x00', 0x3}, {0x8, 0x2, 0x32, '\x00', 0x1}, {0xf, 0x5, 0x1, '\x00', 0x5}, {0xd, 0x81, 0x6, '\x00', 0x5}, {0x40, 0x3, 0x80, '\x00', 0x6}, {0x7, 0xeb, 0x2, '\x00', 0xc}, {0x40, 0x0, 0x1, '\x00', 0x3d}, {0xfe, 0x4, 0x7, '\x00', 0x10}, {0xbe, 0xe, 0x5, '\x00', 0x4}, {0x1, 0x0, 0xf4, '\x00', 0x1}, {0x7f, 0x9c, 0x7, '\x00', 0x5}, {0x7f, 0x10, 0x6, '\x00', 0x6}, {0xa, 0x3, 0x6, '\x00', 0x4}, {0x8, 0x44, 0x7, '\x00', 0xef}, {0x1c, 0xf, 0x42, '\x00', 0x6}, {0x2, 0x2, 0x7}, {0x1, 0x5, 0x1, '\x00', 0x56}, {0x8, 0x2, 0x13, '\x00', 0x6}, {0x18, 0x7, 0x32, '\x00', 0x5}, {0xa8, 0xe, 0x6, '\x00', 0x3}, {0x10, 0x7, 0x9, '\x00', 0x4}, {0xb, 0x6, 0xff, '\x00', 0xfb}, {0x9, 0x8, 0x9, '\x00', 0x7}]}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a11020000000000000000010020000c00024000000000000000010900010073797a310000000014000480080002"], 0xdc}}, 0x9850)

20m30.551480858s ago: executing program 35 (id=122):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

20m19.538637988s ago: executing program 36 (id=161):
r0 = inotify_init()
syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd010203010902"], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28)
syz_usb_connect$cdc_ecm(0x3, 0x4e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0xf8, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x6, 0x24, 0x6, 0x0, 0x0, "87"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x10, 0x7d, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x915d8de72a0f7f1f, 0x6, 0x7, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x4, 0x6}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xee, 0x3, 0x8, 0x40, 0x5}, 0x5, &(0x7f0000000a80)=ANY=[@ANYRESHEX], 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1409}}, {0xae, &(0x7f00000002c0)=@string={0xae, 0x3, "bbba5a8a6375273e00c2773213600ecc3260762b006ee5ed4ca7707b7221cf37543c47594b7558c16a0120548af9fb8a7df2ac38e15f5ea7b2024f3dbd7a695b48df6d27d4fa7095f4b5f0027196c37d9c3a7debc20a11aa5a1d4e911048ee5ea56e1048ab3e960b5818ef17de3ebcddee140ee79d75ff27bbe70722fdcb89037941df601630a547ffe383d9bca78eca52f1e43b3216e02364684355a7e5b88a05ccc2d0b222f0b079707c27"}}, {0x36, &(0x7f0000000240)=@string={0x36, 0x3, "0415d2d600452be1e2d8f910be420e2390ea278788c4b332dde5ca6eb898e6fee581f91894b085b920c6f6850be20d41a794e203"}}, {0x48, &(0x7f0000000380)=@string={0x48, 0x3, "bcb5654785ca0a8e9f68ee38af30cc3a71ad14274930da0a424ece509c95f665528185529a59751001e67288320d2cf2309e3481766387edd7725d3609d480d8dac78945eafb"}}, {0x10, &(0x7f0000000a40)=@string={0x10, 0x3, "0bdaefab43ee0f9ab61532dcfa38"}}, {0xb3, &(0x7f0000000440)=@string={0xb3, 0x3, "2bc6562fc5c71d1e01629608fc41e0d2708f57620d0dc349af6725db6e204d3bd04d89c73ca4a9369571f81faddd84522dc9f852ce580e7fef61db1e1df5ccfc72ac1b1baa39a84ace46d5c738cd124dc7a71a45eb8e1392bf1b7bac4bce6c32d5c4385bedf1bc49e3f54c763ffa2d7605d1cc8460eb2388ca9175fba714cbe13215fced0d27a58460f337ab875be65116b9302821f14217b23365034f411710e673da45d61b35dfd88107b48b267e9767"}}]})
close_range(r0, 0xffffffffffffffff, 0x0)

20m18.484814694s ago: executing program 37 (id=144):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa0d, 0xfffffffb}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
socket(0x28, 0x1, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x8001, 0x2, 0x4, 0x0, 0xd, 0xcc7, 0x10001, 0x800004, 0xa, 0xff, 0x2, 0x1, 0x8, 0x1100004, 0x6, 0xa, 0x8, 0x1a449, 0x43, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]})
syz_open_dev$dri(0x0, 0x1, 0x0)
syz_io_uring_setup(0x512, 0x0, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x100}}, './file0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20000002)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x25)

20m14.110564965s ago: executing program 38 (id=169):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
syz_open_procfs$pagemap(r0, &(0x7f0000000000))
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1e2}], 0x1}}], 0x1, 0x400c0)
sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

19m25.926054397s ago: executing program 39 (id=258):
io_setup(0x6, &(0x7f0000001000)=<r0=>0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x4)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = fanotify_init(0x200, 0x400)
fanotify_mark(r4, 0x80, 0x8, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x6, 0x36, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@local, @private0={0xfc, 0x0, '\x00', 0xfd}, @loopback, 0x200008, 0x5, 0x6, 0x680, 0x8000000000000001, 0x20c200a3})
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32])
io_getevents(r0, 0x3, 0xb3d, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x989680})

19m25.669883158s ago: executing program 7 (id=261):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20044884)
wait4(r1, 0x0, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18)

19m22.818272402s ago: executing program 7 (id=264):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000001000000000000000c410000001400"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="2a004f800c00d700"], 0x218}}, 0xc000)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]})
sendfile(r0, r0, 0x0, 0x8)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000015)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x20, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00'})

19m21.148557055s ago: executing program 7 (id=267):
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x8ce, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x1, 0x4000019f}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_setup(0x3, &(0x7f00000002c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000680)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r5, 0x0}])
fchownat(r4, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

19m20.045549454s ago: executing program 7 (id=269):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

19m19.949927648s ago: executing program 7 (id=270):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0", 0x8e, 0x0, 0x0, 0x0)

19m18.29158426s ago: executing program 7 (id=274):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000001000000000000000c410000001400"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="2a004f800c00d700"], 0x218}}, 0xc000)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]})
sendfile(r0, r0, 0x0, 0x8)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000015)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x20, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00'})

19m17.633132558s ago: executing program 40 (id=274):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000000000000001000000000000000c410000001400"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(0x0, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="2a004f800c00d700"], 0x218}}, 0xc000)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]})
sendfile(r0, r0, 0x0, 0x8)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000015)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x20, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00'})

15m47.247534928s ago: executing program 8 (id=675):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=""/212, &(0x7f0000000140)=0xd4)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="ad56b6c582", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

15m47.056990687s ago: executing program 8 (id=676):
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_io_uring_setup(0x8ce, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x1, 0x4000019f}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_setup(0x3, &(0x7f00000002c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000680)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r6, 0x0}])
fchownat(r5, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

15m43.745578021s ago: executing program 8 (id=680):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000200)={'tunl0\x00', 0x401})
ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f)

15m38.290839088s ago: executing program 8 (id=686):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x62040400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc0}, 0x40055)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

15m34.315701341s ago: executing program 8 (id=693):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)

15m32.089633628s ago: executing program 8 (id=698):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
fchmod(0xffffffffffffffff, 0x101)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r2, r2, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0)
r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000004)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x64, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x5, 0x9, 0x2f, 0x7}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x60}]}, 0x64}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

15m22.202934808s ago: executing program 1 (id=717):
openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x0, 0x2, 0x0, 0x9, 0xc, 0xfffd}, 0x20)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r4, 0x0, 0x0, 0x4782, 0x7)

15m21.143719534s ago: executing program 1 (id=720):
r0 = socket(0x23, 0x3, 0x1)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket(0x3, 0x3, 0x0)
sendto$rose(r0, &(0x7f0000000140)="31e28563ed7750496a3bca436ccfc18588b104d985f01c22f5022b4ccf984ccd9c134482f5556288ed29a52cecfab92fa4e499d1e1149cc5a13958bef1372c1a1d6ce7ca620eec28a88a5d269d684ec07e63101e90f5e008ae307bab821778f4510c68702ecc8b", 0x67, 0x4000000, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c)
write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d000000000000", 0x1b)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$mouse(&(0x7f00000001c0), 0x9, 0x100)
syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, 0x0, &(0x7f00000000c0))
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0xd)
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3)
getsockopt$inet_opts(r4, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200))

15m18.064789787s ago: executing program 1 (id=722):
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r4, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce)

15m16.079435244s ago: executing program 41 (id=698):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
fchmod(0xffffffffffffffff, 0x101)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r2, r2, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0)
r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000004)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x64, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x5, 0x9, 0x2f, 0x7}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x60}]}, 0x64}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

15m16.069767404s ago: executing program 1 (id=726):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1}, 0x6)
getpgrp(0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8)
getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f00000000c0))

15m12.207642072s ago: executing program 1 (id=732):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

15m12.057637129s ago: executing program 1 (id=733):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000380), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)

15m10.828837582s ago: executing program 0 (id=737):
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0xff}, {&(0x7f0000001480)="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", 0x801}], 0x3)

15m10.627411151s ago: executing program 0 (id=738):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8bf, 0x10008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x11, 0x11, &(0x7f0000000380)={{{@in6=@local, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@multicast1}}, 0x0)
writev(r0, 0x0, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x138, &(0x7f0000000480)})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r8, 0x0, 0x20000023892)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x9, '\x00', r5, r8, 0x1, 0x1}, 0x50)

15m9.088374508s ago: executing program 0 (id=740):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a00"/36], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xd0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000000000040000000000600000000000000010000400000000007"])
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d0300"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})

15m7.686840459s ago: executing program 0 (id=743):
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r4, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce)

15m6.479782881s ago: executing program 0 (id=744):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

15m6.05234335s ago: executing program 0 (id=745):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000090601080000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21050005000700ff0000000c000180080001400a"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

15m0.452319363s ago: executing program 4 (id=749):
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x80000}, &(0x7f0000000340), 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640), &(0x7f0000000340), 0x0, 0xffffffffffffffff})

15m0.277711701s ago: executing program 4 (id=750):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=""/212, &(0x7f0000000140)=0xd4)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="ad56b6c582", 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

15m0.134237417s ago: executing program 4 (id=751):
r0 = socket(0x23, 0x3, 0x1)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket(0x3, 0x3, 0x0)
sendto$rose(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0)
write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d000000000000", 0x1b)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x9, 0x100)
ioctl$TIOCL_SETVESABLANK(r3, 0x541c, 0x0)
r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff0, 0x0, 0x4)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, 0x0)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}})
io_uring_enter(r4, 0x68be, 0x5002, 0x4, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080), 0x0)

14m59.015366556s ago: executing program 4 (id=752):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

14m58.891809661s ago: executing program 4 (id=753):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})

14m58.821792394s ago: executing program 4 (id=754):
openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x0, 0x2, 0x0, 0x9, 0xc, 0xfffd}, 0x20)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r4, &(0x7f0000000700), 0x0, 0x4782, 0x7)

14m56.889030418s ago: executing program 42 (id=733):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000380), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)

14m52.588930905s ago: executing program 3 (id=764):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xd0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000000000040000000000600000000000000010000400000000007"])
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d0300"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc})

14m51.616002058s ago: executing program 3 (id=765):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1, 0x0, 0x9}, 0x18)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0xb3409000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000200))
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = fcntl$dupfd(r2, 0x406, r2)
sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890)
ioctl$sock_proto_private(r2, 0x89ef, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r6 = dup(r0)
ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140))
ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040))
r7 = syz_open_procfs(0x0, &(0x7f0000000300)='projid_map\x00')
lseek(r7, 0x8020100001, 0x0)

14m50.567826443s ago: executing program 43 (id=745):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000090601080000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21050005000700ff0000000c000180080001400a"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

14m50.543308004s ago: executing program 3 (id=767):
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_io_uring_setup(0x8ce, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x1, 0x4000019f}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_setup(0x3, &(0x7f00000002c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000680)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r6, 0x0}])
fchownat(r5, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

14m49.582350776s ago: executing program 3 (id=768):
r0 = socket(0x23, 0x3, 0x1)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket(0x3, 0x3, 0x0)
sendto$rose(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0)
write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d000000000000", 0x1b)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x9, 0x100)
ioctl$TIOCL_SETVESABLANK(r3, 0x541c, 0x0)
r4 = syz_io_uring_setup(0x5c2, 0x0, &(0x7f0000000240)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff0, 0x0, 0x4)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, 0x0)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}})
io_uring_enter(r4, 0x68be, 0x5002, 0x4, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080), 0x0)

14m48.658584366s ago: executing program 3 (id=769):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})

14m48.56762402s ago: executing program 3 (id=770):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=""/212, &(0x7f0000000140)=0xd4)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="ad56b6c582", 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

14m43.52579305s ago: executing program 44 (id=754):
openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x0, 0x2, 0x0, 0x9, 0xc, 0xfffd}, 0x20)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r4, &(0x7f0000000700), 0x0, 0x4782, 0x7)

14m33.373341861s ago: executing program 45 (id=770):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=""/212, &(0x7f0000000140)=0xd4)
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="ad56b6c582", 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

5.887793881s ago: executing program 2 (id=3439):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r5 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r1, 0x409, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r5, 0x0)
epoll_create1(0x0)
r6 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000002940), 0x0, 0x0)

5.509277687s ago: executing program 5 (id=3441):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0)

5.099571004s ago: executing program 5 (id=3443):
syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000004c0)=ANY=[], 0x4, 0x691, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000c1f, &(0x7f0000000200)={[{@mblk_io_submit}, {@norecovery}, {@orlov}, {@test_dummy_encryption}, {@sysvgroups}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_ordered}, {@barrier_val={'barrier', 0x3d, 0x80000001}}]}, 0x4, 0x5cd, &(0x7f0000001400)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x110, r0, 0x2b195000)

4.188382393s ago: executing program 9 (id=3444):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
r0 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2a00cda2, 0x40, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
mmap(&(0x7f00001ee000/0x1000)=nil, 0x1000, 0x200000d, 0x13, r4, 0xed475000)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r5, 0xffffffffffffffff, 0x0)

3.577181008s ago: executing program 5 (id=3445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000104050000000000000073050a000000060006"], 0x24}, 0x1, 0x0, 0x0, 0xc090}, 0x2000004)

3.356823128s ago: executing program 9 (id=3446):
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000340), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x3, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="08001c1fdbea8ca17b018bde00002800"/30, 0x1e}], 0x1}}], 0x1, 0x4800)

3.231775063s ago: executing program 5 (id=3447):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x42, &(0x7f0000000100)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000000)="b1d7", 0x2, 0x0, 0x0, 0x2}])
sendmmsg$alg(r4, &(0x7f00000043c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)='-', 0x1}], 0x1, 0x0, 0x0, 0x20040090}], 0x1, 0x0)

2.640657008s ago: executing program 2 (id=3449):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x5609, 0x0)

2.531826013s ago: executing program 2 (id=3450):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[])
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r2, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)

2.260300354s ago: executing program 9 (id=3451):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000100)='\"', 0x1)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x20)

2.168827818s ago: executing program 6 (id=3452):
r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x2d)

2.053111933s ago: executing program 9 (id=3453):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0)

2.052773733s ago: executing program 5 (id=3454):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
r0 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2a00cda2, 0x40, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
mmap(&(0x7f00001ee000/0x1000)=nil, 0x1000, 0x200000d, 0x13, r4, 0xed475000)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r5, 0xffffffffffffffff, 0x0)

1.827781933s ago: executing program 6 (id=3455):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="757466382c6e6f636f6d7072657373006d61703d6f66662c646d6f64653d3078303030303030303030303030303030352c6d61703d6f66662c646d6f64653d3078303030303030303030303030303030324173686f776173736f632c756e686964652c7362736563746f723d3078303030303030303030303030304530312c73686f77617373d60342d0beca271d86306f632c6e6f726f636b2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',norock,\x00'], 0x1, 0x699, &(0x7f0000000140)="$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")

1.827590243s ago: executing program 9 (id=3456):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
unshare(0x20060400)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)

1.692090318s ago: executing program 9 (id=3457):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r5 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r1, 0x409, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r5, 0x0)
epoll_create1(0x0)
r6 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000002940), 0x0, 0x0)

1.541146105s ago: executing program 6 (id=3458):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

1.524693766s ago: executing program 2 (id=3459):
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000340), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x3, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="08001c1fdbea8ca17b018bde00002800"/30, 0x1e}], 0x1}}], 0x1, 0x4800)

1.098574664s ago: executing program 5 (id=3460):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(0x0)
socket(0x2d, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001480)=[{0x0}], 0x1}, 0x2)
connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14)
shutdown(r1, 0x1)
r2 = syz_io_uring_setup(0xb7f, 0x0, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000600))
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}}}}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000"], 0x0)

871.403294ms ago: executing program 2 (id=3461):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000440)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@shortname_mixed}, {@shortname_win95}, {@fat=@tz_utc}, {@utf8}, {}, {@fat=@flush}]}, 0x0, 0x291, &(0x7f0000000580)="$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")
readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000002340)=""/4096, 0x1000)

599.785695ms ago: executing program 6 (id=3462):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

452.545121ms ago: executing program 6 (id=3463):
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
r0 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2})
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)

325.921216ms ago: executing program 2 (id=3464):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
pipe(&(0x7f0000000200))

0s ago: executing program 6 (id=3465):
ioperm(0x1, 0x9, 0xfffffffffffffff8)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000)

kernel console output (not intermixed with test programs):

49 code=0x7ffc0000
[ 1026.240454][   T28] audit: type=1326 audit(1764030843.545:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17269 comm="syz.6.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1026.805818][   T28] audit: type=1326 audit(1764030843.545:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17269 comm="syz.6.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1027.176234][   T28] audit: type=1326 audit(1764030845.675:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17292 comm="syz.2.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c78f749 code=0x7ffc0000
[ 1027.199194][   T28] audit: type=1326 audit(1764030845.675:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17292 comm="syz.2.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c78f749 code=0x7ffc0000
[ 1027.268610][   T28] audit: type=1326 audit(1764030845.685:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17292 comm="syz.2.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f011c78f749 code=0x7ffc0000
[ 1027.348378][   T28] audit: type=1326 audit(1764030845.685:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17292 comm="syz.2.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f011c78f749 code=0x7ffc0000
[ 1027.813347][ T8510] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1027.952944][ T8504] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1028.119566][ T8510] usb 3-1: Using ep0 maxpacket: 16
[ 1028.152477][ T8510] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1028.168664][ T8510] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1028.179245][ T8510] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1028.936398][ T8510] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1028.962751][ T8504] usb 10-1: config 0 has no interfaces?
[ 1029.007808][ T8504] usb 10-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[ 1029.035879][ T8504] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.052775][ T8504] usb 10-1: Product: syz
[ 1029.057195][ T8504] usb 10-1: Manufacturer: syz
[ 1029.062003][ T8504] usb 10-1: SerialNumber: syz
[ 1029.089662][ T8504] usb 10-1: config 0 descriptor??
[ 1029.093761][ T8510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.238639][ T8510] usb 3-1: Product: syz
[ 1029.300346][ T8510] usb 3-1: Manufacturer: syz
[ 1029.342661][ T8510] usb 3-1: SerialNumber: syz
[ 1029.351511][ T8510] usb 3-1: config 0 descriptor??
[ 1029.525688][T17320] netlink: 'syz.9.2324': attribute type 16 has an invalid length.
[ 1029.541282][T17320] netlink: 'syz.9.2324': attribute type 17 has an invalid length.
[ 1029.578320][T17320] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1029.669927][ T8504] usb 10-1: USB disconnect, device number 12
[ 1029.820806][ T8510] usb 3-1: USB disconnect, device number 17
[ 1031.838316][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2343'.
[ 1033.953039][   T28] kauditd_printk_skb: 30 callbacks suppressed
[ 1033.953054][   T28] audit: type=1326 audit(1764030852.415:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.5.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1034.114724][ T5787] Bluetooth: hci4: command 0x0406 tx timeout
[ 1034.121109][   T28] audit: type=1326 audit(1764030852.575:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.5.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1034.121298][   T28] audit: type=1326 audit(1764030852.695:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.5.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1034.121479][   T28] audit: type=1326 audit(1764030852.695:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17435 comm="syz.5.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1035.059368][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2357'.
[ 1041.433847][T17497] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1052.268221][T17498] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1052.275609][T17498] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1052.375511][T17498] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1052.389401][T17498] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1052.466710][T17498] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.478554][T17498] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.487534][T17498] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.496457][T17498] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.838860][T17530] loop5: detected capacity change from 0 to 512
[ 1053.001280][T17530] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2377: inode has both inline data and extents flags
[ 1053.091157][T17530] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2377: couldn't read orphan inode 15 (err -117)
[ 1053.206030][T17530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1053.397742][T10079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1053.881976][T17550] loop2: detected capacity change from 0 to 512
[ 1054.043033][T17550] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 1054.086031][T17550] EXT4-fs (loop2): group descriptors corrupted!
[ 1054.162868][T17558] loop6: detected capacity change from 0 to 8
[ 1054.216474][T17558] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1054.260800][T17558] SQUASHFS error: Failed to read block 0x144: -5
[ 1054.312595][T17558] SQUASHFS error: Unable to read metadata cache entry [142]
[ 1054.319948][T17558] SQUASHFS error: Unable to read inode 0x11f
[ 1054.387974][T17565] loop9: detected capacity change from 0 to 1024
[ 1054.428131][T17558] binder: Binderfs stats mode cannot be changed during a remount
[ 1054.620352][T17565] hfsplus: found bad thread record in catalog
[ 1054.680179][T17565] hfsplus: catalog searching failed
[ 1054.912856][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.920016][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.983922][ T1128] hfsplus: found bad thread record in catalog
[ 1055.003670][ T1128] hfsplus: found bad thread record in catalog
[ 1055.859179][T17589] loop6: detected capacity change from 0 to 164
[ 1055.941809][T17535] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1056.960766][T17611] loop6: detected capacity change from 0 to 1024
[ 1057.074395][T17611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1057.412346][T17611] GUP no longer grows the stack in syz.6.2401 (17611): 200000004000-200000005000 (200000001000)
[ 1057.449854][T17611] CPU: 0 PID: 17611 Comm: syz.6.2401 Not tainted syzkaller #0
[ 1057.457382][T17611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1057.467462][T17611] Call Trace:
[ 1057.470769][T17611]  <TASK>
[ 1057.473729][T17611]  dump_stack_lvl+0x16c/0x230
[ 1057.478470][T17611]  ? show_regs_print_info+0x20/0x20
[ 1057.483707][T17611]  ? load_image+0x3b0/0x3b0
[ 1057.488240][T17611]  ? find_vma+0x12e/0x1b0
[ 1057.492628][T17611]  __get_user_pages+0xfb9/0x1470
[ 1057.497620][T17611]  ? populate_vma_page_range+0x370/0x370
[ 1057.503284][T17611]  ? __gup_longterm_locked+0x20e8/0x2b80
[ 1057.508964][T17611]  ? down_read_killable+0x1d0/0x340
[ 1057.514193][T17611]  __gup_longterm_locked+0x2247/0x2b80
[ 1057.519705][T17611]  ? pin_user_pages_remote+0x210/0x210
[ 1057.525197][T17611]  ? mark_lock+0x94/0x320
[ 1057.529553][T17611]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1057.535569][T17611]  ? sanity_check_pinned_pages+0x136d/0x1500
[ 1057.541594][T17611]  internal_get_user_pages_fast+0x217f/0x2730
[ 1057.547743][T17611]  ? get_user_pages_fast_only+0xa0/0xa0
[ 1057.553317][T17611]  ? do_syscall_64+0x55/0xb0
[ 1057.557940][T17611]  ? verify_lock_unused+0x140/0x140
[ 1057.563175][T17611]  ? pin_user_pages_fast+0x89/0xe0
[ 1057.568320][T17611]  iov_iter_extract_pages+0x393/0x790
[ 1057.573765][T17611]  bio_iov_iter_get_pages+0x597/0x15f0
[ 1057.579276][T17611]  ? __lock_acquire+0x7c80/0x7c80
[ 1057.584329][T17611]  ? bio_associate_blkg_from_css+0xb3/0xd10
[ 1057.590257][T17611]  ? bio_associate_blkg+0x20/0x1d0
[ 1057.595394][T17611]  ? bio_iov_bvec_set+0x320/0x320
[ 1057.600448][T17611]  ? bio_alloc_bioset+0x79a/0x1350
[ 1057.605583][T17611]  iomap_dio_bio_iter+0xb27/0x1680
[ 1057.610703][T17611]  ? iomap_iter+0x969/0xec0
[ 1057.615209][T17611]  __iomap_dio_rw+0xe06/0x1c40
[ 1057.619985][T17611]  ? iomap_dio_deferred_complete+0x20/0x20
[ 1057.625802][T17611]  ? file_modified_flags+0x26c/0x2b0
[ 1057.631090][T17611]  ? do_raw_spin_unlock+0x121/0x230
[ 1057.636293][T17611]  iomap_dio_rw+0x45/0xa0
[ 1057.640626][T17611]  ext4_file_write_iter+0x13ff/0x1870
[ 1057.646037][T17611]  ? ext4_file_read_iter+0x670/0x670
[ 1057.651331][T17611]  ? common_file_perm+0x198/0x1f0
[ 1057.656354][T17611]  do_iter_write+0x79a/0xc70
[ 1057.660948][T17611]  ? vfs_iter_write+0xa0/0xa0
[ 1057.665618][T17611]  ? rcu_read_lock_any_held+0xb4/0x120
[ 1057.671081][T17611]  do_pwritev+0x205/0x340
[ 1057.675425][T17611]  ? do_preadv+0x330/0x330
[ 1057.679864][T17611]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1057.685852][T17611]  ? lock_chain_count+0x20/0x20
[ 1057.690711][T17611]  ? lockdep_hardirqs_on+0x98/0x150
[ 1057.695909][T17611]  ? __x64_sys_pwritev2+0xbe/0x100
[ 1057.701034][T17611]  do_syscall_64+0x55/0xb0
[ 1057.705455][T17611]  ? clear_bhb_loop+0x40/0x90
[ 1057.710139][T17611]  ? clear_bhb_loop+0x40/0x90
[ 1057.714842][T17611]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1057.720750][T17611] RIP: 0033:0x7f232e18f749
[ 1057.725174][T17611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1057.744792][T17611] RSP: 002b:00007f232ef45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 1057.753218][T17611] RAX: ffffffffffffffda RBX: 00007f232e3e5fa0 RCX: 00007f232e18f749
[ 1057.761192][T17611] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000005
[ 1057.769165][T17611] RBP: 00007f232e213f91 R08: 0000000000000000 R09: 0000000000000003
[ 1057.777143][T17611] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000000
[ 1057.785145][T17611] R13: 00007f232e3e6038 R14: 00007f232e3e5fa0 R15: 00007ffe8aed7cf8
[ 1057.793152][T17611]  </TASK>
[ 1058.967796][T10251] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1059.633061][T17641] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2408'.
[ 1061.420858][T17692] loop9: detected capacity change from 0 to 512
[ 1061.474657][T17692] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.2419: inode has both inline data and extents flags
[ 1061.601112][T17692] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2419: couldn't read orphan inode 15 (err -117)
[ 1061.679369][T17692] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1061.721260][T17699] Driver unsupported XDP return value 0 on prog  (id 408) dev N/A, expect packet loss!
[ 1061.834322][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1062.454160][T17707] loop9: detected capacity change from 0 to 16
[ 1062.505652][T17707] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1063.292938][T17718] team_slave_0: entered allmulticast mode
[ 1063.299247][T17718] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1064.412681][   T28] audit: type=1400 audit(1764030882.955:173): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17722 comm="syz.9.2431"
[ 1065.852697][T17528] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1066.096972][T17528] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1066.142361][T17528] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1066.356415][T17528] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.365210][T17528] usb 6-1: Product: syz
[ 1066.369399][T17528] usb 6-1: Manufacturer: syz
[ 1066.374732][T17528] usb 6-1: SerialNumber: syz
[ 1067.917219][T17528] cdc_ncm 6-1:1.0: bind() failure
[ 1067.942948][T17528] cdc_ncm: probe of 6-1:1.1 failed with error -71
[ 1067.955782][T17528] cdc_mbim: probe of 6-1:1.1 failed with error -71
[ 1067.973602][T17528] usbtest: probe of 6-1:1.1 failed with error -71
[ 1067.990804][T17528] usb 6-1: USB disconnect, device number 11
[ 1069.734303][T17800] loop9: detected capacity change from 0 to 512
[ 1069.762362][T17800] EXT4-fs: Ignoring removed i_version option
[ 1069.802686][T17800] EXT4-fs: Ignoring removed bh option
[ 1069.873109][T17800] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1069.886677][T17800] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1070.248446][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1071.985215][T17819] netlink: 'syz.9.2461': attribute type 12 has an invalid length.
[ 1075.000036][T17855] loop6: detected capacity change from 0 to 512
[ 1075.081457][T17855] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1075.102718][T17855] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1075.338458][T10251] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1075.735138][T17870] loop9: detected capacity change from 0 to 128
[ 1075.743119][T17870] FAT-fs (loop9): Unrecognized mount option "uni_xl%PB^��cwiet" or missing value
[ 1076.067167][T17876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1076.074929][T17876] IPv6: NLM_F_CREATE should be set when creating new route
[ 1076.082161][T17876] IPv6: NLM_F_CREATE should be set when creating new route
[ 1085.012732][ T5836] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1085.227887][ T5836] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[ 1085.244078][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1085.260159][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1085.282607][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1085.299919][ T5836] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1085.322814][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.370805][ T5836] usb 3-1: config 0 descriptor??
[ 1085.390313][T17963] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1086.726875][ T5836] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[ 1086.783933][ T5836] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[ 1086.791428][ T5836] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[ 1086.803419][ T5836] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[ 1086.820829][ T5836] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[ 1086.839971][ T5836] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[ 1086.861665][ T5836] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[ 1086.901885][ T5836] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1087.055394][ T8504] usb 3-1: USB disconnect, device number 18
[ 1088.039139][T18020] loop2: detected capacity change from 0 to 512
[ 1088.069023][T18020] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1088.109914][T18020] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1088.217513][T18020] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2528: bad orphan inode 131083
[ 1088.239230][T18018] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2527'.
[ 1088.327568][T18020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1088.959699][T18037] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.2528: iget: bad extra_isize 1312 (inode size 256)
[ 1089.382222][T10153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1089.575784][T18042] netlink: 'syz.6.2539': attribute type 27 has an invalid length.
[ 1090.164143][T18055] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2542'.
[ 1090.347116][ T6818] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1090.363706][T18060] loop9: detected capacity change from 0 to 512
[ 1090.389541][T18060] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1090.422822][T18060] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1090.476787][T18060] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.2544: bad orphan inode 131083
[ 1090.524253][T18060] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1090.662689][ T6818] usb 7-1: Using ep0 maxpacket: 16
[ 1090.681630][ T6818] usb 7-1: config 0 has no interfaces?
[ 1090.727289][ T6818] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1090.765856][ T6818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.796204][ T6818] usb 7-1: Product: syz
[ 1090.810706][ T6818] usb 7-1: Manufacturer: syz
[ 1090.820820][ T6818] usb 7-1: SerialNumber: syz
[ 1090.858845][ T6818] usb 7-1: config 0 descriptor??
[ 1090.924168][T18068] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1090.924168][T18068]    program syz.2.2546 not setting count and/or reply_len properly
[ 1091.695184][T18070] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz.9.2544: iget: bad extra_isize 1312 (inode size 256)
[ 1091.913881][T18042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.921813][T18042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1091.955057][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1092.491400][   T28] audit: type=1326 audit(1764030911.075:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18076 comm="syz.9.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1092.612206][   T28] audit: type=1326 audit(1764030911.105:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18076 comm="syz.9.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1092.734331][   T28] audit: type=1326 audit(1764030911.115:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18076 comm="syz.9.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1092.809526][   T28] audit: type=1326 audit(1764030911.295:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18076 comm="syz.9.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1092.898276][   T28] audit: type=1326 audit(1764030911.295:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18076 comm="syz.9.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1092.944639][T18079] loop9: detected capacity change from 0 to 512
[ 1093.313038][T18081] capability: warning: `syz.9.2550' uses 32-bit capabilities (legacy support in use)
[ 1093.723317][T18042] team_slave_0: left allmulticast mode
[ 1093.958757][T18042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1094.169780][T18042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1094.920615][T18092] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2553'.
[ 1095.818747][T18097] loop5: detected capacity change from 0 to 16
[ 1095.841793][T18097] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1095.855613][T18097] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1095.898281][T18097] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1096.885075][T18042] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.900300][T18099] loop5: detected capacity change from 0 to 512
[ 1096.910287][T18042] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.929851][T18042] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.938867][T18099] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1096.952669][T18042] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.968493][T18099] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1097.015684][T18099] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.2555: bad orphan inode 131083
[ 1097.047641][T18099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1097.554485][T18103] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.2555: iget: bad extra_isize 1312 (inode size 256)
[ 1097.811809][T18042] vlan2: left promiscuous mode
[ 1097.862581][T18042] bond0: left promiscuous mode
[ 1097.867406][T18042] bond_slave_0: left promiscuous mode
[ 1097.913121][T18042] bond_slave_1: left promiscuous mode
[ 1097.946989][T10079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1098.096838][T18049] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1098.127302][T18049] 8021q: adding VLAN 0 to HW filter on device team0
[ 1098.157690][T18049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1098.186818][T18071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2546'.
[ 1098.258313][ T8499] usb 7-1: USB disconnect, device number 13
[ 1098.877997][T18120] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2562'.
[ 1099.424850][T18124] loop6: detected capacity change from 0 to 512
[ 1099.437788][T18124] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1099.458795][T18124] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1099.521568][T18124] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2564: bad orphan inode 131083
[ 1099.548712][T18129] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1099.548712][T18129]    program syz.2.2565 not setting count and/or reply_len properly
[ 1099.580433][T18124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1100.638632][T18134] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.2564: iget: bad extra_isize 1312 (inode size 256)
[ 1100.884146][T10251] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1100.930425][T18137] loop5: detected capacity change from 0 to 2048
[ 1102.669428][T18151] batadv_slave_1: entered promiscuous mode
[ 1102.705775][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2572'.
[ 1102.769941][T18154] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2573'.
[ 1102.794343][T18151] batadv_slave_1 (unregistering): left promiscuous mode
[ 1102.811963][T18151] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1106.427413][T18196] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1106.427413][T18196]    program syz.6.2588 not setting count and/or reply_len properly
[ 1106.567319][T18197] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2588'.
[ 1107.743027][T18207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1109.104892][T18219] loop2: detected capacity change from 0 to 8192
[ 1109.535049][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'.
[ 1110.441165][T18239] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1110.441165][T18239]    program syz.2.2604 not setting count and/or reply_len properly
[ 1110.765866][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2606'.
[ 1114.686663][T18260] loop5: detected capacity change from 0 to 1024
[ 1114.726074][T18260] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1114.807206][T18260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1115.154482][T18267] loop6: detected capacity change from 0 to 512
[ 1115.266389][T18267] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2613: bad orphan inode 13
[ 1115.380688][T18267] ext4_test_bit(bit=12, block=4) = 1
[ 1115.535101][T18267] is_bad_inode(inode)=0
[ 1115.605674][T18267] NEXT_ORPHAN(inode)=0
[ 1115.679401][T18267] max_ino=32
[ 1115.725666][T18267] i_nlink=1
[ 1115.821788][T18267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1116.075554][T18267] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.2613: Unrecognised inode hash code 20
[ 1116.110904][T18267] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2613: Corrupt directory, running e2fsck is recommended
[ 1116.148943][T18267] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.2613: Unrecognised inode hash code 20
[ 1116.152422][T10079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1116.172192][T18267] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2613: Corrupt directory, running e2fsck is recommended
[ 1116.198820][T18267] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 13: comm syz.6.2613: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 1116.265319][T18263] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[ 1116.292106][T18267] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.2613: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[ 1116.353451][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.359789][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.595002][T10251] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1125.804971][T18307] loop9: detected capacity change from 0 to 8
[ 1126.773182][T18323] netlink: 'syz.5.2627': attribute type 4 has an invalid length.
[ 1126.781034][T18323] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2627'.
[ 1128.270902][T18338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2633'.
[ 1128.316515][T18338] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2633'.
[ 1128.347004][T18338] netlink: 'syz.2.2633': attribute type 6 has an invalid length.
[ 1128.383989][T18338] netlink: 'syz.2.2633': attribute type 5 has an invalid length.
[ 1128.400150][T18338] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2633'.
[ 1128.621735][T18344] loop6: detected capacity change from 0 to 4096
[ 1128.699416][T18344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1129.414315][T10251] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1129.978024][T18364] netlink: 'syz.6.2640': attribute type 4 has an invalid length.
[ 1129.985981][T18364] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2640'.
[ 1132.592726][T10081] Bluetooth: hci4: command 0x0406 tx timeout
[ 1139.668007][T18473] loop2: detected capacity change from 0 to 512
[ 1139.700043][T18473] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1139.725878][T18473] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1139.843275][T18473] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2679: bad orphan inode 131083
[ 1140.074231][T18473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1140.950790][T18486] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.2679: iget: bad extra_isize 1312 (inode size 256)
[ 1141.164207][T10153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1141.754819][T18499] loop9: detected capacity change from 0 to 512
[ 1141.759844][T18502] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2687'.
[ 1141.870943][T18499] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1141.916607][T18499] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1142.154454][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1142.428855][T18513] loop9: detected capacity change from 0 to 512
[ 1142.446045][T18513] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1142.497975][T18513] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1142.656252][T18513] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.2691: bad orphan inode 131083
[ 1142.678618][T18513] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1143.499859][T18524] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz.9.2691: iget: bad extra_isize 1312 (inode size 256)
[ 1143.629632][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1148.208929][   T28] audit: type=1326 audit(1764030966.715:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1148.280264][   T28] audit: type=1326 audit(1764030966.725:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1148.392551][   T28] audit: type=1326 audit(1764030966.895:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1148.488531][   T28] audit: type=1326 audit(1764030966.905:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1148.701721][   T28] audit: type=1326 audit(1764030966.905:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1148.925936][   T28] audit: type=1326 audit(1764030966.905:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1149.223833][   T28] audit: type=1326 audit(1764030966.925:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1149.297058][   T28] audit: type=1326 audit(1764030966.925:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1149.612143][   T28] audit: type=1326 audit(1764030966.925:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.5.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1150.500774][T18589] loop5: detected capacity change from 0 to 1024
[ 1150.543539][T18589] EXT4-fs: Ignoring removed nobh option
[ 1150.612727][T18589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1150.653045][T18589] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1150.746349][T18589] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.2712: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[ 1150.758660][T18597] loop2: detected capacity change from 0 to 1024
[ 1150.878169][T18589] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2712: couldn't read orphan inode 11 (err -117)
[ 1150.961395][T18589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1151.382159][T18602] xt_limit: Overflow, try lower: 687865856/40
[ 1151.609246][T18589] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.2712: Invalid block bitmap block 0 in block_group 0
[ 1151.755963][T18589] Quota error (device loop5): write_blk: dquota write failed
[ 1151.807313][T18589] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2712: Failed to acquire dquot type 0
[ 1152.139598][T10079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1155.422726][T18637] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[ 1158.270519][T18657] 9pnet: Could not find request transport: u
[ 1158.579754][T18663] loop9: detected capacity change from 0 to 512
[ 1158.718211][T18663] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.2738: inode has both inline data and extents flags
[ 1158.801069][T18663] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2738: couldn't read orphan inode 15 (err -117)
[ 1158.857658][T18663] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1159.119737][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1159.396771][T18673] loop9: detected capacity change from 0 to 2048
[ 1159.470498][T18673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1161.959511][T18691] loop5: detected capacity change from 0 to 1024
[ 1162.013667][T18691] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1162.105003][T18691] EXT4-fs (loop5): revision level too high, forcing read-only mode
[ 1162.198076][T18691] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1162.266230][T18691] EXT4-fs error (device loop5): ext4_free_blocks:6676: comm syz.5.2747: Freeing blocks not in datazone - block = 0, count = 4096
[ 1162.325398][T18701] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2750'.
[ 1162.347587][T18691] EXT4-fs (loop5): 1 orphan inode deleted
[ 1162.357612][T18701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2750'.
[ 1162.372359][T18691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1162.385755][T18701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2750'.
[ 1162.508544][T10079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1164.546347][T18725] loop5: detected capacity change from 0 to 1764
[ 1164.941503][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 1164.941517][   T28] audit: type=1326 audit(1764030983.525:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18731 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1165.016525][   T28] audit: type=1326 audit(1764030983.525:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18731 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1165.039098][   T28] audit: type=1326 audit(1764030983.535:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18731 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6057f91667 code=0x7ffc0000
[ 1165.092617][   T28] audit: type=1326 audit(1764030983.535:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18731 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6057f915dc code=0x7ffc0000
[ 1165.172199][   T28] audit: type=1326 audit(1764030983.535:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18731 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6057f91514 code=0x7ffc0000
[ 1165.235374][   T28] audit: type=1326 audit(1764030983.535:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18731 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6057f91514 code=0x7ffc0000
[ 1165.282214][   T28] audit: type=1326 audit(1764030983.535:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18731 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6057f8e3aa code=0x7ffc0000
[ 1165.311908][   T28] audit: type=1326 audit(1764030983.535:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18731 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1165.340830][T18741] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1165.340830][T18741]    program syz.5.2763 not setting count and/or reply_len properly
[ 1165.897606][T18743] vlan2: entered promiscuous mode
[ 1165.929638][T18743] bond0: entered promiscuous mode
[ 1165.950494][T18753] loop2: detected capacity change from 0 to 512
[ 1165.970687][T18743] bond_slave_0: entered promiscuous mode
[ 1165.988818][T18753] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1166.013085][T18743] bond_slave_1: entered promiscuous mode
[ 1166.376254][T18760] loop9: detected capacity change from 0 to 164
[ 1171.070820][T18799] loop5: detected capacity change from 0 to 512
[ 1171.156369][T18799] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[ 1171.175694][T18799] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1171.182151][T18799] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #4: comm syz.5.2781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1171.219633][T18799] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.2781: Bad quota inode: 4, type: 1
[ 1171.263729][T18799] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1171.293194][T18799] EXT4-fs (loop5): Cannot turn on quotas: error -117
[ 1171.308255][T18799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1171.642052][T10079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1172.548970][T18811] kthread_run failed with err -4
[ 1173.011795][T18821] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1173.011795][T18821]    program syz.6.2787 not setting count and/or reply_len properly
[ 1173.184065][T18824] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2787'.
[ 1173.194830][T18825] loop9: detected capacity change from 0 to 512
[ 1173.362753][T18825] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1173.388872][T18825] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1174.262945][T18825] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.2789: bad orphan inode 131083
[ 1174.289381][T18825] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1175.179865][T18837] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz.9.2789: iget: bad extra_isize 1312 (inode size 256)
[ 1175.427366][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1177.061307][T18854] loop5: detected capacity change from 0 to 128
[ 1177.107375][T18854] UDF-fs: bad mount option "partitioO=00000000000000000005" or missing value
[ 1177.853475][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.894490][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.490011][   T28] audit: type=1326 audit(1764030997.065:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.6.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1178.574446][   T28] audit: type=1326 audit(1764030997.065:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.6.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1178.667704][   T28] audit: type=1326 audit(1764030997.065:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.6.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1178.690781][   T28] audit: type=1326 audit(1764030997.105:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.6.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1178.752547][   T28] audit: type=1326 audit(1764030997.105:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.6.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1179.402180][   T28] audit: type=1326 audit(1764030997.105:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.6.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1179.430916][T18868] loop5: detected capacity change from 0 to 512
[ 1179.510655][T18868] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1179.526865][   T28] audit: type=1326 audit(1764030997.115:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.6.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1179.606538][T18868] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1179.608234][   T28] audit: type=1326 audit(1764030997.115:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.6.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1179.737524][   T28] audit: type=1326 audit(1764030997.115:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.6.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1179.794579][T18868] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.2802: bad orphan inode 131083
[ 1179.961613][   T28] audit: type=1326 audit(1764030997.115:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.6.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f232e18f749 code=0x7ffc0000
[ 1180.326596][T18868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1180.740839][T18866] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.2802: iget: bad extra_isize 1312 (inode size 256)
[ 1181.278766][T10079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1181.487433][T18893] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1181.487433][T18893]    program syz.9.2810 not setting count and/or reply_len properly
[ 1186.736985][T18917] loop6: detected capacity change from 0 to 512
[ 1186.802808][T18917] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1186.809615][T18917] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1187.439806][T18917] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2819: bad orphan inode 131083
[ 1187.618900][T18917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1188.068166][T18922] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.2819: iget: bad extra_isize 1312 (inode size 256)
[ 1188.514356][T10251] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1189.513966][T17531] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[ 1190.287831][T18946] loop2: detected capacity change from 0 to 128
[ 1190.335746][T18946] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1190.393843][T17531] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[ 1190.404683][T17531] usb 6-1: config 0 has no interface number 0
[ 1190.410817][T17531] usb 6-1: config 0 interface 133 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1190.437512][T17531] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1190.457514][T17531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.467751][T17531] usb 6-1: Product: syz
[ 1190.472034][T17531] usb 6-1: Manufacturer: syz
[ 1190.477016][T17531] usb 6-1: SerialNumber: syz
[ 1190.487376][T18946] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1190.499198][T17531] usb 6-1: config 0 descriptor??
[ 1190.569741][T18951] loop9: detected capacity change from 0 to 512
[ 1190.615593][T10153] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1190.656074][T18951] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1190.676258][T18951] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1190.729842][T17531] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[ 1190.778731][T18951] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.2829: bad orphan inode 131083
[ 1190.791733][T17531] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82
[ 1190.954721][T18951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1190.959501][T17531] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[ 1191.332598][T17531] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[ 1191.345733][T17531] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[ 1191.994524][T18959] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2830'.
[ 1192.318977][T18960] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz.9.2829: iget: bad extra_isize 1312 (inode size 256)
[ 1192.533319][T17531] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1192.695309][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1192.750324][T17531] usb 6-1: USB disconnect, device number 12
[ 1192.816726][   T28] kauditd_printk_skb: 8 callbacks suppressed
[ 1192.816739][   T28] audit: type=1326 audit(1764031011.405:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.2.2832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f011c78f749 code=0x0
[ 1192.817553][T17531] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1193.000958][T17531] keyspan 6-1:0.133: device disconnected
[ 1193.550389][   T28] audit: type=1400 audit(1764031011.935:215): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=18967 comm="syz.5.2834"
[ 1194.822121][T18987] loop2: detected capacity change from 0 to 512
[ 1194.930964][T18987] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1194.954009][T18987] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1195.088632][T18987] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2841: bad orphan inode 131083
[ 1195.181801][T18996] loop9: detected capacity change from 0 to 8
[ 1195.734626][T18987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1196.834338][T19005] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.2841: iget: bad extra_isize 1312 (inode size 256)
[ 1197.094954][T10153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1200.074477][T19037] loop9: detected capacity change from 0 to 512
[ 1200.106764][T19037] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1200.144089][T19037] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1200.215338][T19037] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.2854: bad orphan inode 131083
[ 1200.303725][T19037] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1201.768692][T19055] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz.9.2854: iget: bad extra_isize 1312 (inode size 256)
[ 1202.111668][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1205.823139][T19111] loop5: detected capacity change from 0 to 1024
[ 1205.925197][T19111] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1206.196464][T19111] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1206.280414][T19111] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[ 1206.292734][T19111] System zones: 0-1, 3-36
[ 1206.325985][T19111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1206.456215][T10079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1207.120056][T19132] loop9: detected capacity change from 0 to 256
[ 1207.192849][T19132] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1207.215111][T19132] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[ 1207.268884][T19132] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1209.257332][T19143] loop9: detected capacity change from 0 to 1024
[ 1209.609133][   T12] hfsplus: b-tree write err: -5, ino 8
[ 1209.679406][T19149] syz.5.2897: attempt to access beyond end of device
[ 1209.679406][T19149] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0
[ 1209.722719][T19149] EXT4-fs (loop5): unable to read superblock
[ 1212.134065][T19183] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2902'.
[ 1215.425503][T10081] Bluetooth: hci3: command 0x0406 tx timeout
[ 1216.380202][T19215] loop9: detected capacity change from 0 to 1764
[ 1216.479173][T19217] loop5: detected capacity change from 0 to 256
[ 1216.729362][T19217] FAT-fs (loop5): Directory bread(block 64) failed
[ 1216.753516][T19217] FAT-fs (loop5): Directory bread(block 65) failed
[ 1216.784666][T19217] FAT-fs (loop5): Directory bread(block 66) failed
[ 1216.943995][T19215] ISOFS: Unable to identify CD-ROM format.
[ 1217.191366][T19217] FAT-fs (loop5): Directory bread(block 67) failed
[ 1217.355637][T19217] FAT-fs (loop5): Directory bread(block 68) failed
[ 1217.461413][T19217] FAT-fs (loop5): Directory bread(block 69) failed
[ 1217.522707][T19217] FAT-fs (loop5): Directory bread(block 70) failed
[ 1217.582549][T19217] FAT-fs (loop5): Directory bread(block 71) failed
[ 1217.621830][T19217] FAT-fs (loop5): Directory bread(block 72) failed
[ 1217.712003][T19217] FAT-fs (loop5): Directory bread(block 73) failed
[ 1218.361656][   T28] audit: type=1800 audit(1764031036.935:216): pid=19217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2921" name="bus" dev="loop5" ino=1048652 res=0 errno=0
[ 1218.934240][ T8504] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1220.142770][ T8504] usb 6-1: Using ep0 maxpacket: 8
[ 1220.174740][ T8504] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 1220.183461][ T8504] usb 6-1: config 179 has no interface number 0
[ 1220.190452][ T8504] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1220.240009][ T8504] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1220.285459][ T8504] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1220.325147][ T8504] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1220.376518][ T8504] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1220.411402][ T8504] usb 6-1: config 179 interface 65 has no altsetting 0
[ 1220.418824][ T8504] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1220.432598][ T8504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1220.606525][ T8504] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input14
[ 1221.379171][ T8504] usb 6-1: USB disconnect, device number 13
[ 1221.467844][T19254] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2929'.
[ 1221.681066][ T8504] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1222.092733][T19262] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2937'.
[ 1223.473929][T19289] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1223.473929][T19289]    program syz.5.2945 not setting count and/or reply_len properly
[ 1223.811623][T19289] vlan2: entered promiscuous mode
[ 1224.343037][ T8504] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1224.532552][ T8504] usb 7-1: device descriptor read/64, error -71
[ 1224.822529][ T8504] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1224.993044][ T8504] usb 7-1: device descriptor read/64, error -71
[ 1225.061098][   T28] audit: type=1326 audit(1764031299.646:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19306 comm="syz.5.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1225.116799][ T8504] usb usb7-port1: attempt power cycle
[ 1225.125918][   T28] audit: type=1326 audit(1764031299.646:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19306 comm="syz.5.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1225.155762][   T28] audit: type=1326 audit(1764031299.696:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19306 comm="syz.5.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1225.188423][   T28] audit: type=1326 audit(1764031299.696:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19306 comm="syz.5.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1225.277347][T19308] blktrace: Concurrent blktraces are not allowed on nbd2
[ 1225.286988][   T28] audit: type=1326 audit(1764031299.696:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19306 comm="syz.5.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1225.318711][   T28] audit: type=1326 audit(1764031299.706:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19306 comm="syz.5.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1225.346239][   T28] audit: type=1326 audit(1764031299.706:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19306 comm="syz.5.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1225.380283][   T28] audit: type=1326 audit(1764031299.706:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19306 comm="syz.5.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1225.439657][   T28] audit: type=1326 audit(1764031299.706:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19306 comm="syz.5.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1225.570699][   T28] audit: type=1326 audit(1764031299.706:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19306 comm="syz.5.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6057f8f749 code=0x7ffc0000
[ 1225.602701][ T8504] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1225.643296][ T8504] usb 7-1: device descriptor read/8, error -71
[ 1225.935561][ T8504] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1226.006769][ T8504] usb 7-1: device descriptor read/8, error -71
[ 1226.181041][ T8504] usb usb7-port1: unable to enumerate USB device
[ 1232.321031][   T28] audit: type=1400 audit(1764031306.706:227): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=19392 comm="syz.9.2987"
[ 1233.276013][T19407] loop2: detected capacity change from 0 to 512
[ 1233.341537][T19407] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000]
[ 1233.366920][T19407] System zones: 0-2, 18-18, 34-34
[ 1233.419986][T19407] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #3: comm syz.2.2992: corrupted inode contents
[ 1233.477808][T19407] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #3: comm syz.2.2992: mark_inode_dirty error
[ 1233.521002][T19407] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #3: comm syz.2.2992: corrupted inode contents
[ 1233.555618][T19407] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.2992: mark_inode_dirty error
[ 1233.604765][T19407] Quota error (device loop2): write_blk: dquota write failed
[ 1233.616756][T19407] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1233.629718][T19407] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2992: Failed to acquire dquot type 0
[ 1233.660798][T19407] EXT4-fs (loop2): 1 orphan inode deleted
[ 1233.672339][   T59] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1233.695722][T19407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1233.710356][   T59] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u4:4: Failed to release dquot type 1
[ 1233.725234][T19407] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1233.879192][T10153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1236.750958][T19441] loop2: detected capacity change from 0 to 512
[ 1236.800845][T19443] loop9: detected capacity change from 0 to 512
[ 1236.837980][T19441] EXT4-fs: Ignoring removed i_version option
[ 1237.245684][T19443] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1237.292725][T19441] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1237.326123][T19443] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1237.382352][T19443] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.3005: bad orphan inode 131083
[ 1237.408721][T19441] EXT4-fs (loop2): 1 truncate cleaned up
[ 1237.465183][T19441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1237.478892][T19443] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1237.525241][T19441] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.3006: corrupted in-inode xattr: overlapping e_value 
[ 1237.702202][T19441] EXT4-fs (loop2): Remounting filesystem read-only
[ 1237.740353][T19441] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1786: inode #15: comm syz.2.3006: unable to update i_inline_off
[ 1237.774935][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3008'.
[ 1237.804106][T10153] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1237.901514][T19454] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz.9.3005: iget: bad extra_isize 1312 (inode size 256)
[ 1238.334791][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1238.842535][T14247] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1239.062780][T14247] usb 10-1: Using ep0 maxpacket: 8
[ 1239.228997][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.235692][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.278919][T14247] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1239.303719][T14247] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[ 1239.318104][T14247] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[ 1239.344646][T14247] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1239.362635][T14247] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.372697][T14247] usb 10-1: Product: syz
[ 1239.385529][T14247] usb 10-1: Manufacturer: syz
[ 1239.408211][T14247] usb 10-1: SerialNumber: syz
[ 1239.651401][T14247] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found
[ 1239.680476][T14247] cdc_ncm 10-1:1.0: bind() failure
[ 1239.708619][T14247] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[ 1239.748108][T14247] cdc_ncm 10-1:1.1: bind() failure
[ 1239.784928][T14247] usb 10-1: USB disconnect, device number 13
[ 1240.089157][T19481] loop5: detected capacity change from 0 to 512
[ 1240.334236][T19481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1240.407232][T19481] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1241.033165][   T28] audit: type=1800 audit(1764031315.606:228): pid=19481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3018" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1241.178712][T10079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1242.824097][T19507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3026'.
[ 1243.307494][T19514] bridge0: entered allmulticast mode
[ 1243.333483][T19514] bridge_slave_1: left allmulticast mode
[ 1243.380013][T19514] bridge_slave_1: left promiscuous mode
[ 1243.392522][T19514] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1243.451489][T19514] bridge_slave_0: left allmulticast mode
[ 1243.470878][T19514] bridge_slave_0: left promiscuous mode
[ 1243.502802][T19514] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1244.132310][T19521] loop6: detected capacity change from 0 to 512
[ 1244.161539][T19525] syz.9.3033[19525] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1244.167544][T19521] EXT4-fs: Invalid want_extra_isize 9
[ 1244.435157][T19521] loop6: detected capacity change from 0 to 8192
[ 1244.447248][T19529] loop5: detected capacity change from 0 to 1024
[ 1244.472620][T19529] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1244.479313][T19521] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1244.619586][T19529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1244.727341][T19529] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1245.616465][T10079] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1245.716229][T19546] loop6: detected capacity change from 0 to 128
[ 1249.740044][T10081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1249.872944][T10081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1249.902707][T10081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1249.921430][T10081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1249.931170][T10081] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1249.953306][T10081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1250.765392][T19590] loop2: detected capacity change from 0 to 128
[ 1250.830177][T19574] chnl_net:caif_netlink_parms(): no params data found
[ 1250.855100][T19590] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1250.936517][T19590] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1251.004753][T19590] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1251.795756][T19590] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1252.029411][T19194] Bluetooth: hci0: command tx timeout
[ 1252.039978][T10153] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1252.093737][T19574] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1252.138231][T19574] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1252.145564][T19574] bridge_slave_0: entered allmulticast mode
[ 1252.153158][T19574] bridge_slave_0: entered promiscuous mode
[ 1252.161375][T19574] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1252.172562][T19574] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1252.182961][T19574] bridge_slave_1: entered allmulticast mode
[ 1252.379741][T19574] bridge_slave_1: entered promiscuous mode
[ 1252.414130][T19574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1252.426386][T19574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1252.558927][T19574] team0: Port device team_slave_0 added
[ 1252.658823][T19574] team0: Port device team_slave_1 added
[ 1252.805035][T19624] debugfs: Directory 'netdev:nicvf0' with parent 'phy33' already present!
[ 1252.818261][T19574] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1252.839159][T19574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1252.930640][T19574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1252.997481][T19574] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1253.005235][T19574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1253.092579][T19574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1253.301410][T19574] hsr_slave_0: entered promiscuous mode
[ 1253.323436][T19574] hsr_slave_1: entered promiscuous mode
[ 1253.861629][T19631] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3070'.
[ 1254.102589][T19194] Bluetooth: hci0: command tx timeout
[ 1254.854962][T19574] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1255.673025][T19574] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1255.755592][T19574] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1255.839268][T19574] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1255.920203][T19649] Bluetooth: MGMT ver 1.22
[ 1256.182717][T19194] Bluetooth: hci0: command tx timeout
[ 1256.201639][T19574] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1256.316466][T19574] 8021q: adding VLAN 0 to HW filter on device team0
[ 1256.434793][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1256.441966][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1256.559131][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1256.566334][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1257.272113][T19673] loop6: detected capacity change from 0 to 1024
[ 1257.304485][T19673] EXT4-fs: Ignoring removed oldalloc option
[ 1257.363760][T19673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1257.398228][T19673] ext4 filesystem being mounted at /605/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1257.398411][T19574] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1257.529395][T19673] EXT4-fs (loop6): re-mounted 00000000-0000-0006-0000-000000000000 ro.
[ 1258.275465][T19194] Bluetooth: hci0: command tx timeout
[ 1258.526416][T10251] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1260.279920][T19574] veth0_vlan: entered promiscuous mode
[ 1260.719573][T19574] veth1_vlan: entered promiscuous mode
[ 1260.805751][T19574] veth0_macvtap: entered promiscuous mode
[ 1260.938608][T19574] veth1_macvtap: entered promiscuous mode
[ 1261.055422][T19574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1261.097454][T19574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1261.128492][T19574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1261.159768][T19574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1261.184278][T19574] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1261.214349][T19574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1261.230503][T19574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1261.269781][T19574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1261.317296][T19574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1261.343572][T19574] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1261.376358][T19574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.402530][T19574] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.411280][T19574] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.440048][T19574] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.650137][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1261.700567][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1261.832270][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1261.869528][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1264.815565][T19726] loop6: detected capacity change from 0 to 2048
[ 1264.876217][T19733] loop5: detected capacity change from 0 to 512
[ 1264.930375][T19733] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1264.953338][T19733] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1265.063666][T19733] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3050: bad orphan inode 131083
[ 1265.172129][T19733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1265.751469][T19749] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.3050: iget: bad extra_isize 1312 (inode size 256)
[ 1266.025130][T19574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1267.157819][T10081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1267.170730][T10081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1267.180385][T10081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1267.195800][T19771] loop9: detected capacity change from 0 to 512
[ 1267.207255][T19771] EXT4-fs: Ignoring removed orlov option
[ 1267.213275][T10081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1267.234589][T10081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1267.247910][T10081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1267.247960][T19771] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[ 1267.433723][T19771] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2249: inode #15: comm syz.9.3110: corrupted in-inode xattr: e_value size too large
[ 1267.519954][T19771] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3110: couldn't read orphan inode 15 (err -117)
[ 1267.575260][T19771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1267.738888][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1269.382747][T19194] Bluetooth: hci1: command tx timeout
[ 1269.627154][T19768] chnl_net:caif_netlink_parms(): no params data found
[ 1271.465263][T19194] Bluetooth: hci1: command tx timeout
[ 1272.435552][T19768] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1272.467879][T19768] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1272.492804][T19768] bridge_slave_0: entered allmulticast mode
[ 1272.530672][T19768] bridge_slave_0: entered promiscuous mode
[ 1272.682685][T19768] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1272.722541][T19768] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1272.741107][T19768] bridge_slave_1: entered allmulticast mode
[ 1272.757706][T19831] loop5: detected capacity change from 0 to 2048
[ 1272.771956][T19768] bridge_slave_1: entered promiscuous mode
[ 1272.829791][T19831]  loop5: p1 < > p4 < >
[ 1272.922107][   T28] audit: type=1326 audit(1764031347.476:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19833 comm="syz.9.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1273.015251][   T28] audit: type=1326 audit(1764031347.476:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19833 comm="syz.9.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1273.126434][   T28] audit: type=1326 audit(1764031347.486:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19833 comm="syz.9.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1273.212349][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3129'.
[ 1273.222649][   T28] audit: type=1326 audit(1764031347.486:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19833 comm="syz.9.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1273.269969][T19843] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3130'.
[ 1273.338310][   T28] audit: type=1326 audit(1764031347.486:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19833 comm="syz.9.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1273.383615][T19768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1273.408198][   T28] audit: type=1326 audit(1764031347.486:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19833 comm="syz.9.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1273.440722][T19768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1273.498329][   T28] audit: type=1326 audit(1764031347.486:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19833 comm="syz.9.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1273.552712][T19194] Bluetooth: hci1: command tx timeout
[ 1273.576020][   T28] audit: type=1326 audit(1764031347.486:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19833 comm="syz.9.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1273.615143][   T28] audit: type=1326 audit(1764031347.496:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19833 comm="syz.9.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1273.639244][   T28] audit: type=1326 audit(1764031347.496:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19833 comm="syz.9.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe04298f749 code=0x7ffc0000
[ 1273.955349][T19768] team0: Port device team_slave_0 added
[ 1274.051233][T19768] team0: Port device team_slave_1 added
[ 1274.112833][ T8504] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[ 1274.190778][   T59] hsr_slave_0: left promiscuous mode
[ 1274.215163][   T59] hsr_slave_1: left promiscuous mode
[ 1274.240361][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1274.274394][   T59] bridge_slave_1: left allmulticast mode
[ 1274.296218][   T59] bridge_slave_1: left promiscuous mode
[ 1274.318512][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1274.331121][ T8504] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1274.349169][ T8504] usb 6-1: not running at top speed; connect to a high speed hub
[ 1274.362107][   T59] bridge_slave_0: left allmulticast mode
[ 1274.371018][   T59] bridge_slave_0: left promiscuous mode
[ 1274.376921][ T8504] usb 6-1: config 2 has an invalid interface number: 28 but max is 1
[ 1274.385259][ T8504] usb 6-1: config 2 has an invalid interface number: 250 but max is 1
[ 1274.395825][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1274.403767][ T8504] usb 6-1: config 2 has no interface number 0
[ 1274.429837][ T8504] usb 6-1: config 2 has no interface number 1
[ 1274.441491][ T8504] usb 6-1: config 2 interface 28 has no altsetting 0
[ 1274.488287][ T8504] usb 6-1: config 2 interface 250 has no altsetting 0
[ 1274.512487][ T8504] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=2d.2e
[ 1274.521795][ T8504] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.533292][   T59] bond3 (unregistering): Released all slaves
[ 1274.540458][ T8504] usb 6-1: Product: syz
[ 1274.548104][ T8504] usb 6-1: Manufacturer: syz
[ 1274.574711][ T8504] usb 6-1: SerialNumber: syz
[ 1274.641508][   T59] bond2 (unregistering): Released all slaves
[ 1274.717577][   T59] bond1 (unregistering): Released all slaves
[ 1274.845336][ T8504] usb-storage 6-1:2.28: USB Mass Storage device detected
[ 1275.015188][ T8504] usb 6-1: USB disconnect, device number 14
[ 1275.632772][T19194] Bluetooth: hci1: command tx timeout
[ 1276.131371][T19868] loop5: detected capacity change from 0 to 2048
[ 1276.241198][T19868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1276.330496][T19574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1277.030188][T19878] loop5: detected capacity change from 0 to 16
[ 1277.257639][T19878] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1277.329781][T19878] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1277.362158][T19878] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1277.609987][   T59] team0 (unregistering): Port device team_slave_1 removed
[ 1277.801523][   T59] team0 (unregistering): Port device team_slave_0 removed
[ 1277.975741][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1278.143363][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1279.015045][T19897] xt_bpf: check failed: parse error
[ 1279.817151][T19907] loop5: detected capacity change from 0 to 512
[ 1279.873536][T19907] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1279.880760][T19907] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1279.989750][T19907] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3154: bad orphan inode 131083
[ 1280.009394][T19907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1280.200957][   T59] bond0 (unregistering): Released all slaves
[ 1280.380704][T19911] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.3154: iget: bad extra_isize 1312 (inode size 256)
[ 1280.613381][T19768] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1280.651248][T19768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1280.728824][T19768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1280.761710][T19768] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1280.769766][T19768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1280.822473][T19768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1280.842294][T19574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1281.137044][T19768] hsr_slave_0: entered promiscuous mode
[ 1281.151406][T19914] loop2: detected capacity change from 0 to 2048
[ 1281.176721][T19768] hsr_slave_1: entered promiscuous mode
[ 1281.196742][T19768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1281.227153][T19914]  loop2: p1 < > p4 < >
[ 1281.231492][T19768] Cannot create hsr debugfs directory
[ 1281.537768][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3155'.
[ 1281.708159][T19926] loop9: detected capacity change from 0 to 512
[ 1281.733525][T19926] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1281.793818][T19926] EXT4-fs: Ignoring removed bh option
[ 1281.847453][T19926] EXT4-fs error (device loop9): mb_free_blocks:1938: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1281.866341][T19926] EXT4-fs error (device loop9): ext4_do_update_inode:5244: inode #11: comm syz.9.3159: corrupted inode contents
[ 1281.888922][   T59] IPVS: stop unused estimator thread 0...
[ 1281.966389][T19926] EXT4-fs error (device loop9): ext4_dirty_inode:6120: inode #11: comm syz.9.3159: mark_inode_dirty error
[ 1282.002753][T19926] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3159: invalid indirect mapped block 1 (level 1)
[ 1282.094554][T19926] EXT4-fs error (device loop9): ext4_do_update_inode:5244: inode #11: comm syz.9.3159: corrupted inode contents
[ 1282.185349][T19926] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem
[ 1282.196991][T19926] EXT4-fs error (device loop9): ext4_do_update_inode:5244: inode #11: comm syz.9.3159: corrupted inode contents
[ 1282.222618][T19926] EXT4-fs error (device loop9): ext4_truncate:4294: inode #11: comm syz.9.3159: mark_inode_dirty error
[ 1282.280316][T19926] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem
[ 1282.320152][T19926] EXT4-fs (loop9): 1 truncate cleaned up
[ 1282.369899][T19926] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1282.461716][T19926] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #2: block 13: comm syz.9.3159: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1282.702104][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1282.707354][T19932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3161'.
[ 1283.221481][T19768] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1283.391149][T19768] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1283.488162][T19768] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1283.532910][T19768] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1285.527084][T19768] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1285.567791][T19768] 8021q: adding VLAN 0 to HW filter on device team0
[ 1285.705958][   T59] hsr_slave_0: left promiscuous mode
[ 1285.712210][   T59] hsr_slave_1: left promiscuous mode
[ 1285.798558][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1285.823097][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1285.840668][   T59] bond4 (unregistering): Released all slaves
[ 1285.865080][   T59] bond3 (unregistering): Released all slaves
[ 1285.876943][   T28] kauditd_printk_skb: 9 callbacks suppressed
[ 1285.876957][   T28] audit: type=1326 audit(1764031360.466:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19972 comm="syz.2.3173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f011c78f749 code=0x0
[ 1285.895729][   T59] bond2 (unregistering): Released all slaves
[ 1286.000629][   T59] bond1 (unregistering): Released all slaves
[ 1287.345822][T19989] loop9: detected capacity change from 0 to 512
[ 1287.367496][T19989] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1287.402160][T19989] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1287.453810][T19989] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.3180: bad orphan inode 131083
[ 1287.479242][T19989] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1287.735397][T19989] EXT4-fs error (device loop9): ext4_lookup:1858: inode #15: comm syz.9.3180: iget: bad extra_isize 1312 (inode size 256)
[ 1287.894540][T10383] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1287.951250][   T59] team0 (unregistering): Port device team_slave_1 removed
[ 1288.040654][T19994] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3181'.
[ 1288.123012][   T59] team0 (unregistering): Port device team_slave_0 removed
[ 1288.253875][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1288.282959][   T59] bond_slave_1 (unregistering): left promiscuous mode
[ 1288.457320][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1288.513979][   T59] bond_slave_0 (unregistering): left promiscuous mode
[ 1288.735526][T20003] loop9: detected capacity change from 0 to 128
[ 1288.793068][T20003] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1288.807551][T20003] FAT-fs (loop9): FAT read failed (blocknr 4128)
[ 1291.072019][   T59] bond0 (unregistering): Released all slaves
[ 1291.305992][T19983] debugfs: Directory 'netdev:nicvf0' with parent 'phy33' already present!
[ 1291.344742][ T6993] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1291.351863][ T6993] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1291.513548][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1291.520738][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1292.230176][T20035] loop9: detected capacity change from 0 to 128
[ 1292.261201][T20035] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 1292.340107][T20035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1292.367577][   T59] IPVS: stop unused estimator thread 0...
[ 1292.574667][T19768] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1292.714434][ T8504] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[ 1293.044492][ T8504] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[ 1293.086205][ T8504] usb 3-1: config 0 has no interface number 0
[ 1293.107001][ T8504] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[ 1293.161966][ T8504] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1293.217676][ T8504] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[ 1293.266273][ T8504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.326886][ T8504] usb 3-1: config 0 descriptor??
[ 1293.377904][ T8504] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input15
[ 1293.568463][T14246] usb 3-1: USB disconnect, device number 19
[ 1293.595317][T19768] veth0_vlan: entered promiscuous mode
[ 1293.667099][T19768] veth1_vlan: entered promiscuous mode
[ 1293.965217][T19768] veth0_macvtap: entered promiscuous mode
[ 1293.986187][T19768] veth1_macvtap: entered promiscuous mode
[ 1294.066486][T19768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1294.084216][T19768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.098064][T19768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1294.139363][T19768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.188195][T19768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1294.242960][T19768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.277361][T19768] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1294.322542][T19768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1294.357731][T19768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.397961][T19768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1294.462541][T19768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.487831][T19768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1294.525653][T19768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.565460][T19768] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1294.609159][T19768] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1294.656942][T19768] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1294.670284][T19768] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1294.699490][T19768] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1294.892873][ T6993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1294.914463][ T6993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1295.020872][T11708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1295.039708][T11708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1296.293205][T20076] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1296.293205][T20076]    program syz.6.3103 not setting count and/or reply_len properly
[ 1296.330054][T20076] vlan2: entered promiscuous mode
[ 1296.330074][T20076] bond0: entered promiscuous mode
[ 1296.330101][T20076] bond_slave_0: entered promiscuous mode
[ 1296.330290][T20076] bond_slave_1: entered promiscuous mode
[ 1298.543488][T20084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3210'.
[ 1299.045709][T10081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1299.055300][T10081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1299.065404][T10081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1299.112846][T10081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1299.127500][T10081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1299.135528][T10081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1299.492015][   T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.695142][   T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.825230][   T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1300.052062][   T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1300.669665][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.676207][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.446685][T10081] Bluetooth: hci3: command tx timeout
[ 1302.176167][T20120] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[ 1302.300541][T20087] chnl_net:caif_netlink_parms(): no params data found
[ 1303.466538][T10081] Bluetooth: hci3: command tx timeout
[ 1303.603780][T20087] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1303.603877][T20087] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1303.604055][T20087] bridge_slave_0: entered allmulticast mode
[ 1303.605432][T20087] bridge_slave_0: entered promiscuous mode
[ 1303.607899][T20087] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1303.607988][T20087] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1303.608119][T20087] bridge_slave_1: entered allmulticast mode
[ 1303.609328][T20087] bridge_slave_1: entered promiscuous mode
[ 1303.651168][T20138] loop5: detected capacity change from 0 to 2048
[ 1303.789257][T20138] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1303.838180][T20087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1303.854897][T20087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1304.806738][T20087] team0: Port device team_slave_0 added
[ 1304.829375][T20087] team0: Port device team_slave_1 added
[ 1305.518584][T20087] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1305.542753][T10081] Bluetooth: hci3: command tx timeout
[ 1305.549784][T20087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1305.662602][T20087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1305.833238][T20087] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1305.843806][T20087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1305.912452][T20087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1306.261753][T20087] hsr_slave_0: entered promiscuous mode
[ 1306.912295][T17531] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1307.035484][T20087] hsr_slave_1: entered promiscuous mode
[ 1307.048300][T20087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1307.062135][T20087] Cannot create hsr debugfs directory
[ 1307.212533][T17531] usb 3-1: Using ep0 maxpacket: 32
[ 1307.237858][T17531] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 168, changing to 11
[ 1307.262491][T17531] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1307.282467][T17531] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 1307.342574][T17531] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1307.392610][T17531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1307.432891][T17531] usb 3-1: Product: syz
[ 1307.437108][T17531] usb 3-1: Manufacturer: syz
[ 1307.441720][T17531] usb 3-1: SerialNumber: syz
[ 1307.604743][T20179] loop6: detected capacity change from 0 to 16
[ 1307.665878][T20181] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1307.703942][T10081] Bluetooth: hci3: command tx timeout
[ 1307.978437][T20179] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1308.815534][   T12] hsr_slave_0: left promiscuous mode
[ 1308.931668][   T12] hsr_slave_1: left promiscuous mode
[ 1309.016526][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1309.064965][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1309.126408][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1309.180063][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1309.282793][T17531] cdc_ncm 3-1:1.0: bind() failure
[ 1309.291521][T17531] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 1309.299609][T17531] cdc_ncm 3-1:1.1: bind() failure
[ 1309.785468][T17531] usb 3-1: USB disconnect, device number 20
[ 1309.888315][   T12] bridge_slave_1: left allmulticast mode
[ 1309.912451][   T12] bridge_slave_1: left promiscuous mode
[ 1309.923064][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1309.973731][T20196] loop6: detected capacity change from 0 to 16
[ 1309.988497][   T12] bridge_slave_0: left allmulticast mode
[ 1309.992979][T20195] loop5: detected capacity change from 0 to 512
[ 1310.019920][   T12] bridge_slave_0: left promiscuous mode
[ 1310.042976][T20196] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1310.064898][T20195] EXT4-fs (loop5): revision level too high, forcing read-only mode
[ 1310.083220][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1310.101429][T20195] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1310.163172][T20195] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[ 1310.179684][T20195] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[ 1310.232466][T20195] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3239: Failed to acquire dquot type 1
[ 1310.258473][   T12] veth1_macvtap: left promiscuous mode
[ 1310.279335][   T12] veth0_macvtap: left promiscuous mode
[ 1310.285906][T20195] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.3239: bg 0: block 40: padding at end of block bitmap is not set
[ 1310.297905][   T12] veth1_vlan: left promiscuous mode
[ 1310.320805][   T12] veth0_vlan: left promiscuous mode
[ 1310.327494][T20195] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6637: Corrupt filesystem
[ 1310.363926][T20195] EXT4-fs (loop5): 1 truncate cleaned up
[ 1310.370903][T20195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1310.477493][T19574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1313.241967][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1313.331055][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1313.428444][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1313.438422][   T12] bond_slave_1 (unregistering): left promiscuous mode
[ 1313.545770][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1313.560226][   T12] bond_slave_0 (unregistering): left promiscuous mode
[ 1314.818239][   T12] bond0 (unregistering): Released all slaves
[ 1315.744281][T20223] loop5: detected capacity change from 0 to 164
[ 1317.292466][ T8504] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1317.588934][ T8504] usb 3-1: Using ep0 maxpacket: 32
[ 1317.627078][ T8504] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1317.655737][T17531] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1317.657573][ T8504] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1317.717179][T20245] loop5: detected capacity change from 0 to 1024
[ 1317.725250][T17531] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1317.796492][T20087] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1317.882463][ T8504] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1317.891622][ T8504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1317.914824][ T8504] usb 3-1: config 0 descriptor??
[ 1317.991102][T20087] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1318.625682][T20087] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1318.702799][T17995] hfsplus: b-tree write err: -5, ino 4
[ 1318.715522][T20248] fido_id[20248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1318.738205][T20087] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1318.805787][T14246] usb 3-1: USB disconnect, device number 21
[ 1318.922926][T20259] fuse: Invalid rootmode
[ 1319.027706][T20087] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1319.115599][T20087] 8021q: adding VLAN 0 to HW filter on device team0
[ 1319.132009][ T6993] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1319.139190][ T6993] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1319.202618][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1319.209791][ T6993] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1319.377778][T20087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1319.735486][T20274] loop2: detected capacity change from 0 to 8
[ 1320.315910][T20087] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1321.126658][   T28] audit: type=1400 audit(1764031395.686:249): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=20288 comm="syz.6.3267"
[ 1322.038857][T20087] veth0_vlan: entered promiscuous mode
[ 1322.140200][T20087] veth1_vlan: entered promiscuous mode
[ 1322.403097][T20087] veth0_macvtap: entered promiscuous mode
[ 1322.537773][T20087] veth1_macvtap: entered promiscuous mode
[ 1322.559140][T20317] loop2: detected capacity change from 0 to 2048
[ 1322.658638][T20087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1322.710798][T20087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1322.742209][T20317] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=385, location=385
[ 1322.752468][T20087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1322.789817][T20317] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[ 1322.798506][T20087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1322.827401][T20087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1322.851651][T20087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1322.894300][T20087] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1322.925431][T20087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1322.959167][T20087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1322.987850][T20087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1323.016141][T20087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1323.070017][T20087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1323.100619][T20087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1323.130465][T20087] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1323.200093][T20087] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.245343][T20087] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.279647][T20087] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.304063][T20087] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.561027][   T28] audit: type=1400 audit(1764031398.126:250): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=20322 comm="syz.2.3276"
[ 1323.721874][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1323.789731][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1324.290769][T20328] loop6: detected capacity change from 0 to 16
[ 1324.336769][T20328] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1324.349014][T20328] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1324.372279][T20328] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1324.484079][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1324.512543][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1324.588793][T20331] loop2: detected capacity change from 0 to 512
[ 1324.699776][T20331] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1324.878415][T20334] xt_TCPMSS: Only works on TCP SYN packets
[ 1324.893902][T20331] EXT4-fs (loop2): 1 truncate cleaned up
[ 1324.900784][T20331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1325.138079][   T28] audit: type=1326 audit(1764031399.726:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.5.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3575b8f749 code=0x7ffc0000
[ 1325.179946][T10153] EXT4-fs error (device loop2): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[ 1325.244899][   T28] audit: type=1326 audit(1764031399.726:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.5.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3575b8f749 code=0x7ffc0000
[ 1325.382543][   T28] audit: type=1326 audit(1764031399.746:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.5.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3575b8f749 code=0x7ffc0000
[ 1325.424157][T17767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1325.562959][   T28] audit: type=1326 audit(1764031399.746:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.5.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3575b8f749 code=0x7ffc0000
[ 1325.754072][   T28] audit: type=1326 audit(1764031399.746:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20340 comm="syz.5.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3575b8f749 code=0x7ffc0000
[ 1326.176423][   T28] audit: type=1400 audit(1764031400.746:256): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=20349 comm="syz.9.3285"
[ 1326.791261][T19194] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1326.805705][T19194] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1326.824169][T19194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1326.832970][T19194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1326.843197][T19194] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1326.866815][T19194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1327.037430][T20362] loop5: detected capacity change from 0 to 16
[ 1327.068704][T20362] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1327.089195][T20362] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1327.101485][T20362] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1328.630794][T20368] loop5: detected capacity change from 0 to 8
[ 1328.728908][T20368] SQUASHFS error: Failed to read block 0x4e8: -5
[ 1328.791054][T20368] SQUASHFS error: Failed to read block 0x4de: -5
[ 1328.823887][T20368] SQUASHFS error: Failed to read block 0x4de: -5
[ 1328.873040][T20368] SQUASHFS error: Failed to read block 0x4de: -5
[ 1328.884829][   T28] audit: type=1800 audit(1764031403.476:257): pid=20368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3288" name="file1" dev="loop5" ino=5 res=0 errno=0
[ 1328.909571][T19194] Bluetooth: hci2: command tx timeout
[ 1328.940710][ T1075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1329.376448][ T1075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1329.596485][T20381] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000008
[ 1329.716812][ T1075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1330.031456][ T1075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1330.090380][T20357] chnl_net:caif_netlink_parms(): no params data found
[ 1330.447323][   T28] audit: type=1400 audit(1764031405.016:258): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=20388 comm="syz.6.3294"
[ 1331.068912][T19194] Bluetooth: hci2: command tx timeout
[ 1331.953521][T20357] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1332.053241][T20357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1332.060517][T20357] bridge_slave_0: entered allmulticast mode
[ 1332.128093][T20357] bridge_slave_0: entered promiscuous mode
[ 1332.274102][T20357] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1332.281279][T20357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1332.376541][T20357] bridge_slave_1: entered allmulticast mode
[ 1332.878197][T20408] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[ 1333.075649][T20357] bridge_slave_1: entered promiscuous mode
[ 1333.142627][T19194] Bluetooth: hci2: command tx timeout
[ 1333.416340][T20357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1333.467325][T20357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1334.967486][T20421] loop9: detected capacity change from 0 to 512
[ 1335.222884][T19194] Bluetooth: hci2: command tx timeout
[ 1335.250915][T20421] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1335.386837][T20357] team0: Port device team_slave_0 added
[ 1335.573558][T20087] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1335.716075][T20357] team0: Port device team_slave_1 added
[ 1335.972476][T13271] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1336.081585][T20357] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1336.153542][T20357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1336.224900][T20357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1336.280431][T13271] usb 7-1: Using ep0 maxpacket: 16
[ 1336.295439][T13271] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1336.326582][T13271] usb 7-1: config 1 has no interface number 1
[ 1336.341817][T20357] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1336.358347][T20357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1336.392819][T13271] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1336.419527][T20357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1336.422700][T13271] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1336.502458][T13271] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1336.601975][T13271] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1336.652448][T13271] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1336.663966][T13271] usb 7-1: Product: syz
[ 1336.668189][T13271] usb 7-1: Manufacturer: syz
[ 1336.673676][T13271] usb 7-1: SerialNumber: syz
[ 1336.922800][T13271] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1338.442705][T13271] usb 7-1: USB disconnect, device number 18
[ 1338.531816][T20357] hsr_slave_0: entered promiscuous mode
[ 1338.559255][T20219] udevd[20219]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1338.611989][T20357] hsr_slave_1: entered promiscuous mode
[ 1338.663029][T20357] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1338.701116][T20357] Cannot create hsr debugfs directory
[ 1340.672726][T10081] Bluetooth: hci2: command tx timeout
[ 1341.699455][T20482] vlan2: entered promiscuous mode
[ 1341.711044][T20482] bond0: entered promiscuous mode
[ 1341.741855][T20482] bond_slave_0: entered promiscuous mode
[ 1341.761030][T20482] bond_slave_1: entered promiscuous mode
[ 1341.885536][ T1075] hsr_slave_0: left promiscuous mode
[ 1341.923588][ T1075] hsr_slave_1: left promiscuous mode
[ 1341.955134][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1341.981783][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1342.082973][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1342.120989][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1342.152023][ T1075] bridge_slave_1: left allmulticast mode
[ 1342.204068][ T1075] bridge_slave_1: left promiscuous mode
[ 1342.209809][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.259790][ T1075] bridge_slave_0: left allmulticast mode
[ 1342.281454][ T1075] bridge_slave_0: left promiscuous mode
[ 1342.309083][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1343.666318][ T1075] veth1_macvtap: left promiscuous mode
[ 1343.686490][ T1075] veth0_macvtap: left promiscuous mode
[ 1343.716986][ T1075] veth1_vlan: left promiscuous mode
[ 1343.733852][ T1075] veth0_vlan: left promiscuous mode
[ 1344.476087][ T1075] bond1 (unregistering): Released all slaves
[ 1347.004019][ T1075] team0 (unregistering): Port device team_slave_1 removed
[ 1347.214799][ T1075] team0 (unregistering): Port device team_slave_0 removed
[ 1347.396706][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1347.414918][ T1075] bond_slave_0 (unregistering): left promiscuous mode
[ 1348.788008][ T1075] bond0 (unregistering): Released all slaves
[ 1349.885335][T20357] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1349.910899][T20357] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1349.973400][T20357] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1350.003038][T20357] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1350.499756][T20357] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1350.526903][T20357] 8021q: adding VLAN 0 to HW filter on device team0
[ 1350.561145][ T6993] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1350.561246][ T6993] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1350.589957][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.590056][ T6993] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1350.762014][T20357] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1350.762039][T20357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1350.946823][T20554] loop5: detected capacity change from 0 to 512
[ 1350.952647][T20554] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1350.952670][T20554] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1351.017078][T20554] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3329: bad orphan inode 131083
[ 1351.023535][T20554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1351.544995][T20562] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.3329: iget: bad extra_isize 1312 (inode size 256)
[ 1351.744721][T20357] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1351.887008][T20357] veth0_vlan: entered promiscuous mode
[ 1351.915074][T20357] veth1_vlan: entered promiscuous mode
[ 1352.512341][T20357] veth0_macvtap: entered promiscuous mode
[ 1352.795118][T20357] veth1_macvtap: entered promiscuous mode
[ 1352.974500][T20357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1353.047187][T20357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.119118][T20357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1353.193778][T20357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.255854][T20357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1353.323287][T20357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.392178][T20357] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1353.503281][T20357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1353.559246][T20357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.630504][T20357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1353.728609][T20357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.791617][T20357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1353.857325][T20357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1353.912752][T20357] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1354.028293][T20357] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.037501][T20357] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.046400][T20357] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.055579][T20357] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1354.603162][T11708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1354.691423][T11708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1354.724975][T19574] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1354.958345][ T6993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1355.054844][ T6993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1355.429130][T20585] syz.2.3283[20585] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1355.429265][T20585] syz.2.3283[20585] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1356.691938][T20601] loop5: detected capacity change from 0 to 2048
[ 1356.726421][T20601] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1357.325001][T20601] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1358.413325][T20601] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4
[ 1358.498956][T20601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1358.687108][T20609] loop6: detected capacity change from 0 to 512
[ 1358.784235][T20609] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1358.791055][T20609] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1358.876887][T20609] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.3343: bad orphan inode 131083
[ 1358.925831][T20609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1359.349351][T20620] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.3343: iget: bad extra_isize 1312 (inode size 256)
[ 1359.439204][T20612] vlan2: entered promiscuous mode
[ 1359.445468][T20612] bond0: entered promiscuous mode
[ 1359.464324][T20612] bond_slave_0: entered promiscuous mode
[ 1359.471157][T20612] bond_slave_1: entered promiscuous mode
[ 1360.950914][T19768] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1362.173047][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.179464][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1363.241066][T20657] loop2: detected capacity change from 0 to 512
[ 1363.531138][T20657] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1363.558795][T20657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1363.644113][T20657] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3360: bad orphan inode 131083
[ 1363.704298][T20657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1364.166602][T20671] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.3360: iget: bad extra_isize 1312 (inode size 256)
[ 1366.822533][T20684] vlan2: entered promiscuous mode
[ 1366.856124][T20684] bond0: entered promiscuous mode
[ 1366.868377][T20684] bond_slave_0: entered promiscuous mode
[ 1366.905730][T20684] bond_slave_1: entered promiscuous mode
[ 1367.094322][T20357] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1368.065807][ T8504] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1368.204719][ T8504] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1368.639209][T20719] loop6: detected capacity change from 0 to 512
[ 1368.876082][T20719] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1369.182756][T20719] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1369.359657][T20719] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.3381: bad orphan inode 131083
[ 1369.486916][T20719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1371.681303][T20741] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.3381: iget: bad extra_isize 1312 (inode size 256)
[ 1373.724182][T19768] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1374.732603][T19194] Bluetooth: hci0: command 0x0406 tx timeout
[ 1376.889726][T20777] loop2: detected capacity change from 0 to 512
[ 1376.915130][T20777] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1376.932212][T20777] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1376.975543][T20777] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3398: bad orphan inode 131083
[ 1377.233405][T20777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1377.430921][T20785] raw_sendmsg: syz.9.3400 forgot to set AF_INET. Fix it!
[ 1378.096899][ T8504] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[ 1378.177487][ T8504] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1379.218619][T20794] blktrace: Concurrent blktraces are not allowed on nbd5
[ 1379.694641][T20800] No such timeout policy "syz1"
[ 1380.948276][T20796] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.3398: iget: bad extra_isize 1312 (inode size 256)
[ 1382.145167][T20809] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3406'.
[ 1382.280843][T20357] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1382.988369][T20823] loop9: detected capacity change from 0 to 8
[ 1383.599445][T20823] unable to read inode lookup table
[ 1385.257068][T20843] loop2: detected capacity change from 0 to 512
[ 1385.440633][T20843] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1385.480688][T20843] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1385.850123][T19194] Bluetooth: hci2: command tx timeout
[ 1386.076319][T20843] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3417: bad orphan inode 131083
[ 1386.100745][T20843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1386.709908][ T8503] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[ 1386.802693][ T8503] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1387.327984][T20862] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.3417: iget: bad extra_isize 1312 (inode size 256)
[ 1387.441391][T20864] blktrace: Concurrent blktraces are not allowed on nbd5
[ 1390.093579][T10081] Bluetooth: hci1: command 0x0406 tx timeout
[ 1390.595427][T20357] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1390.754905][T20895] loop9: detected capacity change from 0 to 16
[ 1390.779679][T20895] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1390.789772][T20895] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1390.820577][T20895] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1392.569022][   T28] audit: type=1400 audit(1764031467.146:259): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=20913 comm="syz.2.3439"
[ 1393.356413][T20927] loop5: detected capacity change from 0 to 1024
[ 1394.750837][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3445'.
[ 1396.407716][T20966] loop6: detected capacity change from 0 to 164
[ 1397.003643][   T28] audit: type=1400 audit(1764031471.596:260): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=20968 comm="syz.9.3457"
[ 1397.465664][T20980] loop2: detected capacity change from 0 to 128
[ 1423.556951][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1503.142331][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1503.149352][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6993/1:b..l
[ 1503.158011][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=141389, q=422 ncpus=2)
[ 1503.165855][    C0] task:kworker/u4:11   state:R  running task     stack:22920 pid:6993  ppid:2      flags:0x00004000
[ 1503.178034][    C0] Workqueue: bat_events batadv_nc_worker
[ 1503.183721][    C0] Call Trace:
[ 1503.187031][    C0]  <TASK>
[ 1503.189992][    C0]  __schedule+0x14d2/0x44d0
[ 1503.194554][    C0]  ? __bfs+0x5b0/0x5c0
[ 1503.198665][    C0]  ? asan.module_dtor+0x20/0x20
[ 1503.203559][    C0]  ? mark_lock+0x94/0x320
[ 1503.207941][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1503.213961][    C0]  ? preempt_schedule_irq+0xaa/0x140
[ 1503.219290][    C0]  preempt_schedule_irq+0xb5/0x140
[ 1503.224450][    C0]  ? preempt_schedule_notrace+0x110/0x110
[ 1503.230240][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1503.236085][    C0]  irqentry_exit+0x67/0x70
[ 1503.240526][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1503.246540][    C0] RIP: 0010:lock_acquire+0x1f2/0x410
[ 1503.251854][    C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00
[ 1503.271496][    C0] RSP: 0018:ffffc90003877a40 EFLAGS: 00000206
[ 1503.277594][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 6d00ba87849b9100
[ 1503.285589][    C0] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff8afc6f40
[ 1503.293600][    C0] RBP: ffffc90003877b48 R08: dffffc0000000000 R09: 1ffffffff21b52a0
[ 1503.301600][    C0] R10: dffffc0000000000 R11: fffffbfff21b52a1 R12: 1ffff9200070ef54
[ 1503.309596][    C0] R13: ffffffff8cd2fee0 R14: 0000000000000246 R15: dffffc0000000000
[ 1503.317616][    C0]  ? batadv_nc_worker+0xd2/0x610
[ 1503.322593][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1503.327994][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1503.334007][    C0]  ? batadv_nc_worker+0xd2/0x610
[ 1503.338977][    C0]  batadv_nc_worker+0xef/0x610
[ 1503.343779][    C0]  ? batadv_nc_worker+0xd2/0x610
[ 1503.348761][    C0]  ? process_scheduled_works+0x957/0x15b0
[ 1503.354535][    C0]  process_scheduled_works+0xa45/0x15b0
[ 1503.360143][    C0]  ? assign_work+0x400/0x400
[ 1503.364787][    C0]  ? assign_work+0x39e/0x400
[ 1503.369415][    C0]  worker_thread+0xa55/0xfc0
[ 1503.374066][    C0]  kthread+0x2fa/0x390
[ 1503.378162][    C0]  ? pr_cont_work+0x560/0x560
[ 1503.382870][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1503.387482][    C0]  ret_from_fork+0x48/0x80
[ 1503.391932][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1503.396549][    C0]  ret_from_fork_asm+0x11/0x20
[ 1503.401375][    C0]  </TASK>
[ 1503.404435][    C0] rcu: rcu_preempt kthread starved for 10290 jiffies! g141389 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1503.415742][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1503.425736][    C0] rcu: RCU grace-period kthread stack dump:
[ 1503.431645][    C0] task:rcu_preempt     state:R  running task     stack:26728 pid:17    ppid:2      flags:0x00004000
[ 1503.442587][    C0] Call Trace:
[ 1503.445889][    C0]  <TASK>
[ 1503.448849][    C0]  __schedule+0x14d2/0x44d0
[ 1503.453402][    C0]  ? _raw_spin_lock_bh+0x31/0x50
[ 1503.458377][    C0]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 1503.464303][    C0]  ? asan.module_dtor+0x20/0x20
[ 1503.469198][    C0]  ? enqueue_timer+0x225/0x530
[ 1503.473999][    C0]  ? __mod_timer+0x984/0xdb0
[ 1503.478636][    C0]  schedule+0xbd/0x170
[ 1503.482738][    C0]  schedule_timeout+0x160/0x280
[ 1503.487618][    C0]  ? console_conditional_schedule+0x40/0x40
[ 1503.493535][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 1503.499474][    C0]  ? update_process_times+0x1b0/0x1b0
[ 1503.504889][    C0]  ? prepare_to_swait_event+0x339/0x360
[ 1503.510484][    C0]  rcu_gp_fqs_loop+0x302/0x1560
[ 1503.515386][    C0]  ? rcu_gp_init+0x110e/0x1510
[ 1503.520196][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[ 1503.526403][    C0]  ? rcu_gp_init+0x1510/0x1510
[ 1503.531213][    C0]  ? rcu_gp_cleanup+0xb4c/0xca0
[ 1503.536125][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1503.541361][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 1503.546607][    C0]  rcu_gp_kthread+0x99/0x380
[ 1503.551269][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1503.556442][    C0]  ? __kthread_parkme+0x7a/0x1c0
[ 1503.561429][    C0]  ? __kthread_parkme+0x162/0x1c0
[ 1503.566513][    C0]  kthread+0x2fa/0x390
[ 1503.570716][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1503.575885][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1503.580508][    C0]  ret_from_fork+0x48/0x80
[ 1503.584955][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1503.589583][    C0]  ret_from_fork_asm+0x11/0x20
[ 1503.594403][    C0]  </TASK>
[ 1503.597448][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1503.603804][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
[ 1503.610869][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1503.620946][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1503.626714][    C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 f4 38 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
[ 1503.646359][    C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2
[ 1503.652464][    C0] RAX: f8cdcd7d91222f00 RBX: ffffffff8161981b RCX: f8cdcd7d91222f00
[ 1503.660464][    C0] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f40
[ 1503.668475][    C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65
[ 1503.676472][    C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a8e28
[ 1503.684474][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952688
[ 1503.692478][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1503.701448][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1503.708068][    C0] CR2: 00007ffa64ee7e90 CR3: 000000007706b000 CR4: 00000000003506f0
[ 1503.716076][    C0] DR0: 0000000000000000 DR1: 0000000000000705 DR2: 0000000000000000
[ 1503.724084][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1503.732091][    C0] Call Trace:
[ 1503.735401][    C0]  <TASK>
[ 1503.738358][    C0]  default_idle+0x13/0x20
[ 1503.742746][    C0]  default_idle_call+0x6c/0xa0
[ 1503.747559][    C0]  do_idle+0x1eb/0x510
[ 1503.751663][    C0]  ? idle_inject_timer_fn+0x60/0x60
[ 1503.756895][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1503.762568][    C0]  cpu_startup_entry+0x43/0x60
[ 1503.767364][    C0]  rest_init+0x2e2/0x300
[ 1503.771640][    C0]  ? time_init+0x40/0x40
[ 1503.775916][    C0]  arch_call_rest_init+0xe/0x10
[ 1503.780798][    C0]  start_kernel+0x459/0x4e0
[ 1503.785335][    C0]  x86_64_start_reservations+0x2a/0x30
[ 1503.790826][    C0]  x86_64_start_kernel+0x60/0x60
[ 1503.795796][    C0]  secondary_startup_64_no_verify+0x179/0x17b
[ 1503.801906][    C0]  </TASK>
[ 1504.356132][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1504.441092][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1504.450153][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
SYZFAIL: failed to send rpc
fd=3 want=4472 sent=0 n=-1 (errno 32: Broken pipe)
[ 1506.512521][T20996] Bluetooth: hci3: command 0x0406 tx timeout
[ 1506.518629][T19194] Bluetooth: hci2: command 0x0406 tx timeout
[ 1506.548422][T17993] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.010642][T17993] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.174689][T17993] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.310982][T17993] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.676272][T17993] hsr_slave_0: left promiscuous mode
[ 1508.686010][T17993] hsr_slave_1: left promiscuous mode
[ 1508.692033][T17993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1508.701557][T17993] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1508.710611][T17993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1508.719522][T17993] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1508.728034][T17993] bridge_slave_1: left allmulticast mode
[ 1508.735035][T17993] bridge_slave_1: left promiscuous mode
[ 1508.741661][T17993] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1508.758288][T17993] bridge_slave_0: left allmulticast mode
[ 1508.767007][T17993] bridge_slave_0: left promiscuous mode
[ 1508.774091][T17993] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1508.818497][T17993] veth1_macvtap: left promiscuous mode
[ 1508.832644][T17993] veth0_macvtap: left promiscuous mode
[ 1508.838305][T17993] veth1_vlan: left promiscuous mode
[ 1508.862466][T17993] veth0_vlan: left promiscuous mode
[ 1510.078341][T17993] team0 (unregistering): Port device team_slave_1 removed
[ 1510.153152][T17993] team0 (unregistering): Port device team_slave_0 removed
[ 1510.234203][T17993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1510.246167][T17993] bond_slave_1 (unregistering): left promiscuous mode
[ 1510.327053][T17993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1510.341768][T17993] bond_slave_0 (unregistering): left promiscuous mode
[ 1511.400792][T17993] bond0 (unregistering): Released all slaves
[ 1512.007420][T17993] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.125776][T17993] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.216704][T17993] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.286711][T17993] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.578974][T17993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.685553][T17993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.794842][T17993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.914629][T17993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1513.128830][T17993] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0