last executing test programs:

10m52.60816193s ago: executing program 0 (id=1):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xd0, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f00000001c0), 0xffffffffffffff94, 0x9b00, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200)=0x3, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10)
recvfrom$inet(r0, &(0x7f00000002c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

10m51.33956916s ago: executing program 0 (id=7):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x88000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1001)

10m50.504290275s ago: executing program 0 (id=8):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)

10m45.571281591s ago: executing program 0 (id=17):
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x8, 0xf}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0xa283, r1}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8)
r4 = open(&(0x7f0000019580)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r4, 0xa, 0x21)
fcntl$setlease(r4, 0x400, 0x1)
open$dir(&(0x7f00000195c0)='./file0\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000019600)='./file0\x00', 0x0)
close_range(r4, r5, 0x0)
futex(0x0, 0x5, 0x10000, 0x0, 0x0, 0x3000000)

10m44.945773885s ago: executing program 32 (id=17):
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x8, 0xf}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0xa283, r1}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8)
r4 = open(&(0x7f0000019580)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r4, 0xa, 0x21)
fcntl$setlease(r4, 0x400, 0x1)
open$dir(&(0x7f00000195c0)='./file0\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000019600)='./file0\x00', 0x0)
close_range(r4, r5, 0x0)
futex(0x0, 0x5, 0x10000, 0x0, 0x0, 0x3000000)

7m47.813288738s ago: executing program 2 (id=377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000d40)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000dc0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0), 0x10106, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f00), &(0x7f0000000f40)=0xc)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)={0x14, r1, 0x9621b85c3205ab, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x440088d0)

7m46.560090906s ago: executing program 2 (id=379):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
getpid()
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fallocate(r2, 0x6a, 0xfffffffffffffdff, 0x8000000000000001)
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0)
write$sysctl(0xffffffffffffffff, &(0x7f0000000280)='2\x00', 0x2)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x882)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r4, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000640), 0x100)
set_mempolicy(0x3, &(0x7f0000000100)=0x3ff, 0x1ff)
write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x4, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x1, "c12400"}, 0x2, 0x2, {0x0}, 0x96000})
openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x1834c1, 0x9c37611dc13d0da6)
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

7m40.888225598s ago: executing program 2 (id=388):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x1b)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

7m39.730406066s ago: executing program 2 (id=391):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="f3670f185e180f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8", 0x63}], 0x1, 0x10, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m39.408720619s ago: executing program 2 (id=393):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ae2000/0x1000)=nil)
r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001240)=""/102392, 0x18ff8)
syz_emit_ethernet(0x8e, 0x0, 0x0)
capset(0x0, &(0x7f000001a280))
socket$netlink(0x10, 0x3, 0x8000000004)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, 0x0, 0x0)
connect$inet(r4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f0000286639c8bac66d10d38a310004000000040000001000000000000000f2fb016966be23bce7578e9f91e1e57a81cd5161e7a1ca6f63c8264a1c070e36df177e9847d64f7803e9d3bef47aa0e14b4f6e96709de15c368731dfde6266639ef44f7c39b8ac7374387fbd3107ac98656d18bb43", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
mq_open(&(0x7f0000000300)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)

7m37.867891317s ago: executing program 2 (id=394):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000740)=""/102392, 0x18ff8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019780)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfdf1}, 0x94)
syz_emit_ethernet(0x32, 0x0, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r3, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000019a00)='./dev/cpu/0/msr\x00', 0xcac87271e314962c, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x13f)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00')
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

7m22.481409154s ago: executing program 33 (id=394):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000740)=""/102392, 0x18ff8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019780)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfdf1}, 0x94)
syz_emit_ethernet(0x32, 0x0, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r3, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000019a00)='./dev/cpu/0/msr\x00', 0xcac87271e314962c, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x13f)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00')
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x1, &(0x7f0000000700)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

52.457536264s ago: executing program 5 (id=1173):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
r2 = socket$kcm(0x23, 0x5, 0x0)
listen(r2, 0x800)
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000019540)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50)
r4 = syz_open_procfs(0x0, &(0x7f0000000240))
read$FUSE(r4, &(0x7f0000019700)={0x2020}, 0x2020)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000500)={0x3, 0x2, 0x1})

51.082552365s ago: executing program 5 (id=1176):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone3(&(0x7f00000002c0)={0xa690b000, &(0x7f0000000400), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000001a80)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001ac0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001b00)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000001b40)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000001b80), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
read$msr(r1, &(0x7f0000001bc0)=""/102400, 0x19000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001abc0)={<r2=>0xffffffffffffffff})
gettid()
pipe(&(0x7f000001acc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_pid(r4, &(0x7f000001ad00), 0xffffff98)
splice(r3, 0x0, r2, 0x0, 0x100000006, 0x0)

49.177021561s ago: executing program 5 (id=1179):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x6, 0x40, 0x9, 0x3, 0x4, 0x2, 0x80}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x8, 0x5, 0x6, @mcast1, @mcast1, 0x80, 0x10, 0x9, 0xfffffff5}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

46.812530423s ago: executing program 5 (id=1187):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000d80)={'wg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}})
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2000c12, &(0x7f0000000100)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRES32, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa4c, &(0x7f0000000280)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000dc0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x76, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '{\x9a.\x89=\x94\xdc\xc3\x8f\x8a\x99', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x46, 0x4f, 0x43]}, 0x42)

46.661715359s ago: executing program 1 (id=1189):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '0\x00'}}})
openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000002280)={0x1, @pix={0x0, 0x4, 0x20303159, 0x2, 0x4000000, 0xffffffff, 0x4, 0x8000}})
mkdirat(0xffffffffffffff9c, &(0x7f0000002380)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000023c0)='./debug\x00', &(0x7f0000002400)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002440)='./debug/failslab/times\x00', 0x2, 0x0)
write(r2, &(0x7f0000002480)='10000\x00', 0x5)
close(0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000024c0)='./debug/failslab/probability\x00', 0x2, 0x10)
write(r3, &(0x7f0000002500)='5', 0x1)
r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002540)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
write(r4, &(0x7f0000002580)='1', 0x1)
r5 = syz_open_dev$dvb_demux(&(0x7f00000025c0), 0x0, 0x2)
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000002680)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]})
ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000002800)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}})
mknodat$dm(0xffffffffffffff9c, &(0x7f0000002ac0)='./dm0\x00', 0x6180, r1)
openat$dm_dev(0xffffffffffffff9c, &(0x7f0000002b00)='./dm0\x00', 0x2, 0x0)

45.256814702s ago: executing program 5 (id=1194):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r2, 0x8b2a, &(0x7f0000000040))

44.278568213s ago: executing program 1 (id=1196):
socket(0x10, 0x3, 0x0)
socket(0x1e, 0x805, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
select(0x0, 0x0, 0x0, &(0x7f0000003580)={0x100000000000000}, &(0x7f0000003740))
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_coalesce={0xf}})
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003500)={0x0, 0x18}}, 0x0)
getsockname$packet(r4, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r5 = socket(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89fe, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0xe, 0x0, 0x20}})

43.82024576s ago: executing program 5 (id=1197):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x6, 0x40, 0x9, 0x3, 0x4, 0x2, 0x80}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x8, 0x5, 0x6, @mcast1, @mcast1, 0x80, 0x10, 0x9, 0xfffffff5}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

43.288426964s ago: executing program 34 (id=1197):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x6, 0x40, 0x9, 0x3, 0x4, 0x2, 0x80}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x8, 0x5, 0x6, @mcast1, @mcast1, 0x80, 0x10, 0x9, 0xfffffff5}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

43.271086936s ago: executing program 1 (id=1199):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./tracing\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)

37.835200463s ago: executing program 1 (id=1213):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESOCT], 0x9, 0xc41, &(0x7f0000001b80)="$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")
creat(&(0x7f0000000e80)='./bus\x00', 0x44)
mount(&(0x7f0000000ec0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000f40)='./bus\x00', 0x0, 0x321001, 0x0)
r0 = open(&(0x7f0000000f80)='./bus\x00', 0x64842, 0x5a)
pwritev2(r0, &(0x7f0000001080)=[{&(0x7f00000010c0)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
truncate(&(0x7f0000000040)='./file3\x00', 0x2)

35.343601398s ago: executing program 1 (id=1219):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b2a, &(0x7f0000000040))

31.708251191s ago: executing program 1 (id=1223):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x2e, 0x0, 0x61]}}, 0x0, 0x39}, 0x28)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, 0x0, 0x0)
write(r4, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xf)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000180), 0x8, 0x109340)
ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000240)={0xa, 0x0, 0x4, {0x80000004, 0x1, 0x2, 0x8000001}})
unshare(0x20000000)

31.270530216s ago: executing program 35 (id=1223):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x2e, 0x0, 0x61]}}, 0x0, 0x39}, 0x28)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, 0x0, 0x0)
write(r4, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xf)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000180), 0x8, 0x109340)
ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000240)={0xa, 0x0, 0x4, {0x80000004, 0x1, 0x2, 0x8000001}})
unshare(0x20000000)

19.273120625s ago: executing program 3 (id=1245):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

19.080279545s ago: executing program 3 (id=1246):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r1, &(0x7f0000000800)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/mtrr\x00', 0x20002, 0x0)
ioctl(r2, 0x40104d02, &(0x7f0000000400))

13.651745541s ago: executing program 7 (id=1254):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, 0x0, 0x84bb16d3f2c98781, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10)
lseek(r3, 0x2000, 0x1)

12.138547786s ago: executing program 7 (id=1257):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
r2 = socket$kcm(0x23, 0x5, 0x0)
listen(r2, 0x800)
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000540)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000019540)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50)
read$FUSE(0xffffffffffffffff, &(0x7f0000019700)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xd, &(0x7f0000019640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80100}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000196c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000500)={0x3, 0x2, 0x1})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11.298159652s ago: executing program 7 (id=1258):
r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3)
r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0)
write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5)
r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0)
write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1)
r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0)
write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3)
r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0)
write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16)
r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@rd='rd1/', 'slot\x00'}}, 0x1, 0x0)
write$md_sysfs(r5, 0x0, 0x0)
r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0)
write$md_sysfs(r6, &(0x7f00000003c0)=@str='1', 0x1)
write$md_new_array(r0, 0x0, 0x0)
r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0)
write$md_sysfs(r7, &(0x7f0000000500)=@str='clear', 0x5)

10.869983266s ago: executing program 3 (id=1259):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)={[], [{@appraise}]}, 0x0, 0x236, &(0x7f0000000400)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000640))
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000700)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000800), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000840), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x6)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f00000008c0)={0x28, 0x0, 0x2710, @local}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
connect$vsock_stream(r5, &(0x7f0000000900)={0x28, 0x0, 0x2710, @local}, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000940)={0x0, 0x8000}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, &(0x7f0000000240))

9.705059756s ago: executing program 6 (id=1261):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x2]}, 0x8, 0x80000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000200)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc)
bind$bt_l2cap(r3, &(0x7f0000000380)={0x1f, 0x0, @any, 0xfff8}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000440)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg$inet(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x2400c8c4)

8.800422448s ago: executing program 6 (id=1263):
r0 = socket$inet6(0xa, 0x3, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xc4}}, 0x4c050)
r2 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e)
recvmmsg(r4, &(0x7f0000000480), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6)
r5 = syz_open_dev$media(&(0x7f0000000500), 0x1058, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000540)=<r6=>0xffffffffffffffff)
r7 = syz_open_dev$radio(&(0x7f0000000580), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000005c0)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0})
sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x2}, 0x1c, &(0x7f00000018c0)=[{&(0x7f00000001c0)="8449781d220133f57c398caa39697cbdfeb592931c7b29ef8c46bdd8868e22953b8532082dbac1f7add4beced826b6dc0702b787a39ce42e3a3cb67bdf5fc06622eec05bcb2652dd5097396b919cab92d8fe4c2ccd6665b35ee3108518f643a294f0d9b229c7dc1763358bda735b14c568dfde9c107ba51830b85767d29716c3463e736bc36d56", 0x87}, {&(0x7f0000000280)="49ced1368d24bd855c4af318e84f49c72f603a81d83c5a6003932e73d14d483625c5e8ad67228c10c17a8bed3b38e895437825ecc7b0e5dc5475d5c37bbc183d49b5", 0x42}, {&(0x7f0000000880)="1c4c573c4eb61a8dfdb09f6c895f7ebb5d8c00f958d313c3160bc0f50ce674e1d434471b2847c66a1e656cfb12e3487bb4db7b8f7e64f2e16640283b44ede796e42157aef05036a80a66482e863bf741b58fe458f2e97aa1acf98e4524d44e247d27123dac7a323c73e7efe509f3cc7ffc76a870fee764b89739f7e7dfc7d8334a80975549a65d3fb91abd0c4fd46b7209a5b1af4c359b9a92e8bc95006d501613da324bc4acc60d061d1df1aca3a2e639700a204afa3e1e7918dcbc4b9e2b18893ad9e490fcc8abdf64178a50850e3ffe3e169d10a7999a4cb3ff4aa5d172e9fc220187b7f60202219c37aacd7288c2885868d392fc167a4624f54efd352d2433d9e58134879a8d7443308b513c51cb7d61ef2b183eab747ad80086db109dfabcb1be121d02e303f352ec697c4acb8d2c140f593744e978a179b007e6f2e6bf51ba0715d86aa932556c856695ee3b7a9460d532d73e5e69ef978906afe109fdf56c6860c64b396a38907abcbb56c618087cb814a937ff7bb5900af118fe70060ca6af12edbce6194a2a557210ce531ef123062577dfe2e272c14877ce47823f30d77dd766293d9e51198c587a2fa88dcd8fba920b2bcfb5cd61e843448af33920a502a7ccddd23d6ba5e64322fefc0e290e53d0273390b885918ede6768e944cbd9b272b2d60f7978e9c47bf0be022b4063f4999d7a3c40758d60a400b31d5d96499bc01d60ce4d086ae17baa4828460d8322acb194c11c65b09d918fe46ac59ccba92551dd2659dc9c651147569c8b35f59a53559628cfcaa438c9bdf1208e08e92c4da2ede656b130454b6c25f530c509313ad3011a9e5d23700a3da8d157c7ec9c24e9f1cc5c1a8f0412652e9c668af666c033da0f5076f88686a230379a4c4f97e15c6fa11de0228b1dd4617a25e188362e76e09d4c5973659a60f865384048d1f675ae87ec49bbf0cfb3c58837cf143070c1e0caea97e05fb02dc85425b5dfcd660d3d68429cbd47f1371009f0b0c816008e30956a76628cc50afa31468fc0649d7685734ad3429eddb3d2daf2ea7c88fea84e70a261347fc5e941d4150672afb9466488425d927e0d48a29956cda069e6bb5c7f4765e4272c19d660b280e767b2a87a40a1807c3bed169d236803b369bacceb78730ddce70be2ba3f98ad377c514a5799496c024e053b46b4a8e670bcbf4ab9672c7aa67e4380994a2909ab8b65c16e8f8ee18eaec1478f734eb9b617b462946646341b15e02303285918480884c317dd02a3636202d16dbd63af5ca8ce2645e8429791297210bb21cbdfe99d0e992013f2b8ded9fb889c73f998157ba935d4187784d3c1a0b0bcc37ea43775f6bcfa4b037b129c1b07f4e05ca26df4769d0cb91ed2a7ae60f0a716169660da03bc7549df94ccd59d945e19226995e6dc7d5868e50b1bba6c2535120bca6753ef28e5ecc2bbed8df9f591cea2a5c004bae4151a56a445d6c2973cdcbafbcf4836c38e99ebed4c28492b16e58ac1d4b78fe63932c5330e5ba255ffe2ef42b5251b91dc64f05dd158d7c9e4e680fba2d01acc87980ed6cca64eb859a34af18231da1f190670975c22298ba9df57ac2b573cfa838af53f7e1f3ea6b154101a62dc699289ee43e39a2c5d36bf8e5e4eb29c5e1aebe7a8a7db2c20f4f1fcc54ddbaa4bbb0c9b9973dcdc959705ebe7d511237110b3bf701629e817a35af43ae5343a649b0230320788e626ce4c234d740af8a9d1cb4bc1fb01983e4b3f8f2dab394f50e63f2999405ec483c16bcdf89ecc8f51e459c1a253fa663695fa96596b3b8c5b8a0445b1a0fcea6e31ad6de220fbd814d0f3d084a21b9ebbc149b78382722611f84d57b713eb370ed2a12c8c8211d0d76659f8104e791132435c5d744a26712d1459840608d1ec0e7530f2cc6bcab4ce6a017ec625dc9741199efaecf3ab5b167f54c9f5a155daeff152af71eb5b69ec369f616c55be893b00ec5c603e13de00b73a240a717b6c36dbca1a57c3831da8540afcfb20caa50f1876583b95cb03e6b6b43553aaf6e16866a89ae335099bf4042339153ff2205d2fe12ff4926076e5dfa042a0ffc5ea2fa717a8adf1fde99cf90248654e1d680a29f6a63b967d8ebcc0aeceee245e046aac08a33e8954087695ce82c12a6ad1d53fe336ace13cdb2872f74c7a802df6efd308f32e6fe6e4c230a27cc985619c9b2bf52b111a95f1940f1bf64b973e36a5afa2a659f176e8c41eb16b2a5ec24b27b5e9b7c2ed5d158c4cb0398ddc2416a6905c7fc60a3002ee867c3e9022c23d1143873bbd33bebaddb357c33ab4b3d58cd3e7409facf865402c99aa6e3b7817712bcd0caa4133922c7acf8a4eb87d07b452e5761d34f6a3c43ae9ff5719cd1dc235bdb95c0de99fae84b9fb59cd79a16ef3fef754de65e5cf6d4ec30c2051459ac10af38b6666e4bb0e0b94d072611cab070f39db20e99d71686a95821f1f0390e1fb27c310cd677b25e7452cff7a7a9fc9b754f4ed32dba9a8a85775c9517ff95ba9cdf01a33a0c4823168f59e070068db2bca0cbd05adecdb316862a369459a49c743d963a94a7fc460d584516b886ae74e42a01c133fc25f5bddf24d2f7d81e43ecf529241c6ce04484aac8823460d9282e1558f7caef9e60d528c88425aaca026b6eb02978c8cf3cb2edf8c0d316fbfb0695cb80cd38ad083db6655526e97d58a6bc211d3095d8e8450be5a7286ea12575a8fbc110af88673dfd9c8caaf4b11af5ac044a623b71dbef0072906dc92f3278a2427c2b709af037f203564bbba0cedeaeaff397c642337446461fa4036ed717bdee7cf531a5a6f77e98ffb9d1c97636f78effeea54ab8d7507fd8c55de5afc53eb462d76bc8622e366f6a489931622f3eabff119925dddfb016babbae5a2f68c03fab528a5e8bc46a7e8be642f4a0a205c6d34ea8d8c1ed167278d99ecb1f27434d74d4543810dc623a1ba75b2618e8ad91daacfff712d490250529a2a89877d59a69bb75c9d8709751759f886f0c92fc2916ba421f03387d3b97e322db5945525d1e659bd2f7095b34128a85c64eac283f1aaa0e3a6c6cf72a48bf81e3a7ce45d38f998280ff9aeaf80a69a3cd3c91a48ecd19e56a8bf00bbfddf7040a8917565f14695aa345c4e12ca67171f1a2fe5bde3e1a06b60733d34d40bf08ea24c8c97e2647aa9fecea680dd796c6c04fa1bbd1279fccee9e5bd306697afef020e81a46e92c2243eabe58ed41a4e8b9c135961d5e6dbfa75817bb0df97137d910d76d14fa5c086e120e91c53b0457cf09581f26ade7036b07c8db909046a6c3e84e540460ba552f721a0f1872b1e7ae7d9b584023fc86b2bc739c59e1c5a3f6ab583780bf95477a8c8a31354cf4bf6d35778978c465f3a8d057da77d17c2d3b1bbd5edc73f57805259952b3cfe187bf5f96db8ce1b661e1d04f4e61fc9928faba78ade97306c003e84b81ca2220ddd5c09ce779effc89d705aa637d2c7b32cbfb51faac59bca8564fb4c88fe578b11665e7c77fc7ed38876623bda1ffbd6d6d0848b9dcab66c70ef3cda928642a3c6190e0f9d6becc2082d4e8c00f263647ec35f89d8cf1c728241c9be85fb16e3c19f5ccec54b9249e0e22eb20e95b0ad42b2263881248def8bfef5a1b1159a521f6a7bf7750bcc0ae4be25854b1793e732ed6c7469c2bdf8cba628651db4a72001d0aefcd53e315f51e06d289d7ddc0979773bc5fcb278fb4e8d0e2e2f6a28af70615e9f4269258bb155a4ca0fbe0fb5edec605a724db5ec48f7d4ad6566e1460dded1184321b2cde49e24c1bdb9d6eaca6e6a2d4505145fe82be32896a1957cf31e3680a7896630de2e8887096e3c4c9765da627412565c662479cfbd91cb4da4f6ee77b01569bdbbb8eccf0507318541a5bc834d5e563b02f90b167c02c7583bc193087d476a9a1237bfaf7f1d7f60dd42fe6b48970314d202dbfe0da68da03848dea876a96d731b424285bc656c568b5215c1c00ce03c7e3c31417d76acd0c87198e41b63c4f850ff3b2976bd0629f56cf712d9da867508b364a662c583ffec2c092986e3be8ce2b16459ccb46497230f52536a6801559efcc5fcfdb8cc68a68dd09c9ae28e7370d009bf0dc77da5407dd82fefe82aac6cd23ec01dbf048ba5826d52c450bdec9cc4848db769d04e8592c4115e4ec704c5063f1548e8d751d2a323ef3084ce7f8ab065a9c7b3fbd5e6a9a1ae8ca1ddded9a7d19bdbd9ba321feedd71efbb7290ea6ba1214dd4549fff60cbdb3ff06dea0f144d170b041fad7a3a13755269c5745907eef23546955703e34b719faeb46bd897f0db51a12b5dbde7107509485fa0842ca812d0d55ab95fed67896d1274f2d8168eca8414f07dbde9ce8dbe3fdf69b3e0770b60784c83a04cfc35afd2cf35e88cd9cdb0b860cc43037b957dc59d8fa2573f6499c62902c34cb6e1f8a35540ceab70ea54e39726367fde189efcb2e138cdafd491ae660e1acdc552c127d219716572bbd4a81a9c10bc754d3bbcf20f6a92578ad7b1a7367811f6d71482488992c52aa1425f8ad21e338e99508fad18e5322fdd9225f250c80e6820a1a87f1d0d98de9413ef636b374448e418b12c8f337d71e05aeb8ea71e80494fbea5a7ba87be1906882e1b627dd0780ffdf2bd528933d50bd0e1efe91be468587b66c8ad9f3d308594cbc288753964f3fa05df9299611ef94a8eeec2c2974985875fa4c6c4fefc66a49b22ffaf4e65189ed7cf2fabc4e593d1b5993122796d1ceb147ae162bff6f40e28d0884533557a7d196ce26ca73b58eb30193e0f416ec42c81da6f917e554d0b2666624ba2f42d8a6616708210312c4fc03923784b419f247f39301d690e2c4a3e7e2e80b2b2e0b585202218ac8fe878dad2100908cf4e27c132fbc2cf38ba505bb19463813b7dbad30e2a3af61ef756a7f7ade27087f90151e54c15aa2e2c955f8d99dd99ab03022f1cf0ed1658ec5c9095a4e90f7438cc435d9961723d8fa05e76342a8cd30d9f7c91447e0c4cd170587da1f441e2d65dc4f78258c8491ef4a833c18d3fd398dd4ae6535d05e6f7388fa0a93216e8f095d8e3b8396bfcfad205c10db0a0093940f9f08e326620493af83a225f7b29a5080cc1df44f9dcf198f162146c35efbf85b088d4e951b22c3ba37fd46b91a5f428318545795c838dfa168dd7251fb6780c8c225e9b3a91262265dfc64fb32b613ffe59ef8710dbb5403f3df70c47d900de03e8ed1095756fa597c21f7b7de861b285bb09aff27a3fa0d9a71613859d4d14c551d5530233d1807a5e75e0196234201013dcd6aae073daedcd2e2dc18825f6b3321e19c47fbfdbfc6da867a3eb6c2bd4498d565fd22c95772da5615e5db0f4bf52c82cb9fc15414895ee452164e88fe8052409a9ad8f30fb2b9bd582da32660bdddcb487a5dc43e7f9fbd0f65f75415d67f4ec3c9afae69cfbd7ee7bfb01a2c2671735ab4b57e561ade08ef9efc7dee8b4784d4b6ca878565ab8f2d78a2797c65e4b131a04acd387db7ef9d48e6a264e5e281119d646f7fd2cf50ecf85a0fa07c31ea69855ce1ce8d8506f6fa53ed8b152e75c98a135c245648f14b4ccca380f2e04b36da4ad6bda7160717a63c41459e54bac07898397751f0753d1f7657b1f6727b1ea4a656fba18b6578249caceee34e353a94f3ff7e7dca917d446ed9b378096ec07d72f33141046796f60aca430e3508728f0cafe592bed5b1983a0f24bf7613ae5484a07678736ae30ad857227bb159764734c71f2dcf970819e1fbb", 0x1000}, {&(0x7f0000001880)="1a28a0033627a80d0c5c7cdc834c57f387e2b43b3bd180d6957bf962a45d4d550a4429f68b7c41e5e763b3c744005bc989733aecb65b95d86d61078f44702c32", 0x40}], 0x4, &(0x7f0000001900)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x88, 0x29, 0x39, {0x92, 0xe, 0x2, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @mcast2, @empty, @local]}}}, @dstopts={{0xf0, 0x29, 0x37, {0xc, 0x1a, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x31}}, @pad1, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x48, {0x3, 0x10, 0xa, 0x3, [0x4, 0x7, 0x8, 0x3ff, 0x4, 0x4, 0xc, 0x3]}}, @enc_lim={0x4, 0x1, 0x81}, @generic={0x3, 0x5a, "1e0a7ad903952d544d00ac7b4cd307a9d8aa68bf1a92b60867c2df280d6f951af9da764c7529f2e1d27d97f117849995d9cafb70802e0c81c7cc7762a9f6558dd506919f1a94a33c65d51c05154cb07ea64fb8660a2ddca3797f"}, @pad1]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x9b}}}], 0x1c0}}], 0x1, 0x20000000)
sendmsg$key(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x13, 0x0, 0x5, 0x2, 0x0, 0x80}, 0x10}}, 0x8800)

7.880840142s ago: executing program 6 (id=1265):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_devices(r1, &(0x7f00000003c0)=ANY=[], 0x1000d)

7.699480401s ago: executing program 7 (id=1266):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, 0x0, 0x84bb16d3f2c98781, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10)
lseek(r3, 0x2000, 0x1)

7.662837915s ago: executing program 4 (id=1267):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"fc7fbced01eb1b00000000000000000700"})
ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000200)=0x402)
ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0)

6.760443547s ago: executing program 7 (id=1268):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r1, &(0x7f0000000800)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/mtrr\x00', 0x20002, 0x0)
ioctl(r2, 0x40104d02, &(0x7f0000000400))

6.73316306s ago: executing program 4 (id=1269):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r3=>0x0})
sendto$packet(r0, &(0x7f0000000200)="0b032200e0ff25000258025400f6", 0xe, 0x5, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14)

6.608924063s ago: executing program 6 (id=1270):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00')
read$eventfd(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000e00), 0x129202, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r6, 0x0)
ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000e40)={&(0x7f0000000e80)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000ec0)={r7, r5})
sendmsg$kcm(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="1a", 0x100000}], 0x1}, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0)

6.560176748s ago: executing program 4 (id=1271):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00')
read$eventfd(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000e00), 0x129202, 0x0)
r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f00000002c0)={0x7, {0x80000000, 0xf, 0x2c3, 0x4}})
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r6, 0x0)
ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000e40)={&(0x7f0000000e80)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000ec0)={r8, r5})
sendmsg$kcm(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="1a", 0x100000}], 0x1}, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0)

6.021756373s ago: executing program 3 (id=1272):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$sndmidi(&(0x7f00000005c0), 0x0, 0x179602)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x10, 0x140d, 0x1, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
socket$alg(0x26, 0x5, 0x0)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000180)={0x0, @reserved})
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys_sec\x00', 0x1ff)
socket(0x28, 0x5, 0x0)
mount(0x0, &(0x7f00000004c0)='./sys_sec\x00', &(0x7f0000000500)='securityfs\x00', 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000580)=""/9, 0xfffffd87)

4.600726919s ago: executing program 3 (id=1274):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='GPL\x00', 0x4, 0x436, &(0x7f00000014c0)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001580), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000015c0)={r0, r1})
sendmmsg$inet(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000016c0)="03362a247861461b950daf81800a038f1ee4d89769187dcd3a5f3b23aaab61614df7ed7e9300c2cbd640ee12e7d98ef42c23e9f77543d8561a06ae5dca898dbcf6c4696e3a49a32599699c258a5766784886810a9a80505a31031800d541c3057f00f988f68cac40b9ff64906e2a4d611b85625dcc2e6ea9891e12b1a9fda5d3a53c6a5fffaddefda1e252bdfa85", 0x8e}], 0x1}}], 0x1, 0x40)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

3.746936797s ago: executing program 8 (id=1275):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)

3.642540277s ago: executing program 8 (id=1276):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00')
read$eventfd(r5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94)
r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f00000002c0)={0x7, {0x80000000, 0xf, 0x2c3, 0x4}})
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000e40)={&(0x7f0000000e80)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000ec0)={r8, r6})
sendmsg$kcm(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="1a", 0x100000}], 0x1}, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local})

3.491139722s ago: executing program 3 (id=1277):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00')
read$eventfd(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000e00), 0x129202, 0x0)
r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f00000002c0)={0x7, {0x80000000, 0xf, 0x2c3, 0x4}})
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r6, 0x0)
ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000e40)={&(0x7f0000000e80)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000ec0)={r8, r5})
sendmsg$kcm(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="1a", 0x100000}], 0x1}, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0)

2.916132111s ago: executing program 4 (id=1278):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8d7e}, [@call={0x85, 0x0, 0x0, 0x13}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.802121643s ago: executing program 4 (id=1279):
r0 = socket$inet6(0xa, 0x3, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xc4}}, 0x4c050)
r2 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e)
recvmmsg(r4, &(0x7f0000000480), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6)
r5 = syz_open_dev$media(&(0x7f0000000500), 0x1058, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000540)=<r6=>0xffffffffffffffff)
r7 = syz_open_dev$radio(&(0x7f0000000580), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000005c0)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0})
sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x2}, 0x1c, &(0x7f00000018c0)=[{&(0x7f00000001c0)="8449781d220133f57c398caa39697cbdfeb592931c7b29ef8c46bdd8868e22953b8532082dbac1f7add4beced826b6dc0702b787a39ce42e3a3cb67bdf5fc06622eec05bcb2652dd5097396b919cab92d8fe4c2ccd6665b35ee3108518f643a294f0d9b229c7dc1763358bda735b14c568dfde9c107ba51830b85767d29716c3463e736bc36d56e5aa", 0x89}, {&(0x7f0000000280)="49ced1368d24bd855c4af318e84f49c72f603a81d83c5a6003932e73d14d483625c5e8ad67228c10c17a8bed3b38e895437825ecc7b0e5dc5475d5c37bbc183d49b5", 0x42}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="1a28a0033627a80d0c5c7cdc834c57f387e2b43b3bd180d6957bf962a45d4d550a4429f68b7c41e5e763b3c744005bc989733aecb65b95d86d61078f44702c32", 0x40}], 0x4, &(0x7f0000001900)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x88, 0x29, 0x39, {0x92, 0xe, 0x2, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @mcast2, @empty, @local]}}}, @dstopts={{0xf0, 0x29, 0x37, {0xc, 0x1a, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x31}}, @pad1, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x48, {0x3, 0x10, 0xa, 0x3, [0x4, 0x7, 0x8, 0x3ff, 0x4, 0x4, 0xc, 0x3]}}, @enc_lim={0x4, 0x1, 0x81}, @generic={0x3, 0x5a, "1e0a7ad903952d544d00ac7b4cd307a9d8aa68bf1a92b60867c2df280d6f951af9da764c7529f2e1d27d97f117849995d9cafb70802e0c81c7cc7762a9f6558dd506919f1a94a33c65d51c05154cb07ea64fb8660a2ddca3797f"}, @pad1]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x9b}}}], 0x1c0}}], 0x1, 0x20000000)
sendmsg$key(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x13, 0x0, 0x5, 0x2, 0x0, 0x80}, 0x10}}, 0x8800)

2.384297776s ago: executing program 6 (id=1280):
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f40), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000f80), 0x2, 0x141102)
writev(r1, &(0x7f0000000fc0)=[{&(0x7f0000001000)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
socket(0x10, 0x3, 0x0)
shmctl$IPC_RMID(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2814000, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@noblock_validity}, {@nouid32}, {@dioread_nolock}, {@quota}, {@nomblk_io_submit}, {@delalloc}, {@nolazytime}]}, 0x1, 0x5b1, &(0x7f0000000140)="$eJzs3U1oHGUfAPD/zGabfuR90xfeF16lh6JChdJN0g+tntqrWCj0IHjRsN2Gkk23ZDfahIDpvYg9iEov9aYHj4oHD+LFo1cvfpyFYoOFpgdd2exsmqabuEmzWc3+fjDJ88zM7v//7Mzz7MwwwwbQtw43/qQRT0XE+SRieNWygcgWHm6ut7Q4X3ywOF9Mol6/8GsSSUTcX5wvttZPsv8HImIhIv4fEd/kI46mK2+5p1Wozs5NjpfLpemsPlKbujpSnZ07dnlqfKI0Ubpy4sWXTp0+eWrs+NjqdB/UV9fym2vrjR9vvnvju1du3/z0s0MLxffHkzgTQ9my1e3YTs3PJB9n1sw/2Y1gPZT0OgG2JJf180ZX+l8MRy7r9e3UVw8OgzuSHtBF9cGI+opVRaAPJDo99KnWcUDj/Lc17eTxx52zzROQRtylxfniO9GKP9C8NhF7l89N9v+WPHJm0jjfPLiTibIrLVyPiNGBgcf3/yTb/7ZudDsSpKu+PtvcUI9v/3Rl/Ik2489Q69rpE2qNf0vZ+LfUJn5unfHvfIcxfn/954/WjX99MJ5uGz9ZiZ+0iZ9GxJsdxr/12pen11tW/zjiSLSP35JsfH145NLlcmm0+bdtjK+OHHp5/fZH7F8nfvOa7d7lRFa3f0+WU9ph+7/49vNnFjaI//yzG2//dp//voh4r8P4/7n/yavrLbtzPbnbOArY7PZPIh+3O4z/wpnDP2RFVw0BAAAAAAAAAGAbpcv3siVpYaWcpoVC8xne/8b+tFyp1o5eqszksnveDkY+bd1pNdysJ436WHY/bqt+fE39RC4LmNu3XC8UK+WLPW47AAAAAAAAAAAAAAAAAAAA/F0cWPP8/73c8vP/a3+uGtit1v/Jb2C30/+hfz3a/5Oe5QHsPN//0LfqG/d/xwOwm/n+h/6l/0P/0v+hf7Xt//t2Pg9g5/n+h/6l/wMAAAAAAAAAAAAAAAAAAAAAAAAAQFecP3euMdUfLM4XG/WLA7Mzk5W3jl0sVScLUzPFQrEyfbUwUalMlEuFYmXqr94vqVSujsaVmWsjtVK1NlKdnXtjqjJzpfUbYqV811sEAAAAAAAAAAAAAAAAAAAA/zxDy1OSFiLyzXqaFgoR/4qIg0kkly6XS6MR8e+I+D6XH2zUx3qdNAAAAAAAAAAAAAAAAAAAAOwy1dm5yfFyuTTdvcJAFqqzV/1U62o+A5tZOSIWNlwnnzWt4zQa77jpnFtRuruZnqhwbyd2pG0p5DrcD/u+0KMBCQAAAAAAAAAAAAAAAAAA+tjDh347fcUf3U0IAAAAAAAAAAAAAAAAAAAA+lL6SxIRjenI8HNDa5fuSZZyy/8j4u1bFz64Nl6rTY815t9dmV/7MJt/vBf5A51q9dM0Ihr9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHioOjs3OV4ul6a3WBjsYJ1etxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgK/4MAAD//4oTyqc=")
r2 = syz_open_dev$video(&(0x7f0000000bc0), 0xa3, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000c00)={0x1, @pix={0x0, 0x4, 0x47425247, 0x8, 0xfffffffd, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7, 0x1}})
mknod$loop(&(0x7f0000000d00)='./file0\x00', 0xfff, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), &(0x7f0000000dc0), 0xfe1c, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./gadget\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r3, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000b80)="0100000007058102400000", 0xb)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
fallocate(0xffffffffffffffff, 0x0, 0xfff, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x101042, 0x1d8)

2.139149991s ago: executing program 8 (id=1281):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"fc7fbced01eb1b00000000000000000700"})
ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000200)=0x402)
ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0)

1.903748595s ago: executing program 4 (id=1282):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000340)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000193c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a0096"], 0x1c}], 0x1}, 0x4)

1.473856149s ago: executing program 6 (id=1283):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000180)=0x2, 0x4)
bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d)
dup(0xffffffffffffffff)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r2, 0x5606, 0x9)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'bond0\x00', 0x2000})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)

1.215497896s ago: executing program 8 (id=1284):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b2a, &(0x7f0000000040))

986.123579ms ago: executing program 8 (id=1285):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl(0xffffffffffffffff, 0x400c4d04, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x102030405060708, {}, 0xfe}, 0x18)
connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0xee, 0x4}, 0xff}, 0x18)

751.408693ms ago: executing program 7 (id=1286):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x214c02, &(0x7f0000000540)={[{@block_validity}]}, 0x1, 0x470, &(0x7f00000008c0)="$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")
r1 = getpid()
creat(0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000d40)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001880)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000018c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001900)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001940)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000019c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001a00), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000021000900000000000000000002000040000000011400010066be08f666a8e4ed2256134fc998f3ee47091244b0e69d15a7431da769cb094d6e8c7054"], 0x1c}}, 0x0)
r7 = syz_pidfd_open(r1, 0x0)
setns(r7, 0x24020000)
umount2(0x0, 0x2)
openat$null(0xffffffffffffff9c, &(0x7f0000001bc0), 0xa0140, 0x0)
lseek(r4, 0x7, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x1e8, 0x700001b, 0x148, 0x90, 0x148, 0x1e8, 0x206, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'sit0\x00'}, 0x1ea, 0xc0, 0x128, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)

0s ago: executing program 8 (id=1287):
r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3)
r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0)
write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5)
r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0)
write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1)
r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0)
write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3)
r4 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0)
write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16)
r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/block/md', @num=0x0, '/md/', @rdev={@rd='rd1/', 'slot\x00'}}, 0x1, 0x0)
write$md_sysfs(r5, 0x0, 0x0)
r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000380)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0)
write$md_sysfs(r6, &(0x7f00000003c0)=@str='1', 0x1)
write$md_new_array(r0, 0x0, 0x0)
write$md_sysfs(0xffffffffffffffff, &(0x7f0000000440)=@str='active', 0x6)
openat$md(0xffffffffffffff9c, &(0x7f0000000480)={'/dev/md', @num=0x0}, 0x2, 0x0)
write$md_sysfs(0xffffffffffffffff, &(0x7f0000000500)=@str='clear', 0x5)

kernel console output (not intermixed with test programs):

INJECTION: forcing a failure.
[  183.175277][ T5429] name failslab, interval 1, probability 0, space 0, times 0
[  183.222928][ T5429] CPU: 1 PID: 5429 Comm: syz.4.209 Not tainted syzkaller #0
[  183.230273][ T5429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  183.234206][ T5421] device syzkaller1 entered promiscuous mode
[  183.240346][ T5429] Call Trace:
[  183.240357][ T5429]  <TASK>
[  183.252597][ T5429]  dump_stack_lvl+0x188/0x250
[  183.257320][ T5429]  ? show_regs_print_info+0x20/0x20
[  183.262563][ T5429]  ? load_image+0x410/0x410
[  183.267102][ T5429]  ? __might_sleep+0xf0/0xf0
[  183.271751][ T5429]  ? __lock_acquire+0x7d40/0x7d40
[  183.276809][ T5429]  ? aa_get_newest_label+0xf5/0x5a0
[  183.282043][ T5429]  should_fail+0x383/0x4b0
[  183.286512][ T5429]  should_failslab+0x5/0x20
[  183.291049][ T5429]  slab_pre_alloc_hook+0x51/0xc0
[  183.296010][ T5429]  ? skb_clone+0x1bd/0x350
[  183.300459][ T5429]  kmem_cache_alloc+0x3d/0x280
[  183.305250][ T5429]  skb_clone+0x1bd/0x350
[  183.309505][ T5429]  ? nfnetlink_rcv+0x4a7/0x2450
[  183.314370][ T5429]  nfnetlink_rcv+0x4e0/0x2450
[  183.319057][ T5429]  ? __local_bh_enable_ip+0x136/0x1c0
[  183.324436][ T5429]  ? lockdep_hardirqs_on+0x94/0x140
[  183.329656][ T5429]  ? __local_bh_enable_ip+0x136/0x1c0
[  183.335046][ T5429]  ? __dev_queue_xmit+0x1b64/0x2e50
[  183.340258][ T5429]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  183.345842][ T5429]  ? dev_queue_xmit+0x20/0x20
[  183.350530][ T5429]  ? __copy_skb_header+0x3ba/0x4f0
[  183.355673][ T5429]  ? memcpy+0x3c/0x60
[  183.359685][ T5429]  ? __copy_skb_header+0x3ba/0x4f0
[  183.364816][ T5429]  ? __skb_clone+0x446/0x6c0
[  183.369429][ T5429]  ? rcu_lock_release+0x5/0x20
[  183.374203][ T5429]  ? __lock_acquire+0x7d40/0x7d40
[  183.379249][ T5429]  netlink_unicast+0x804/0x9e0
[  183.384048][ T5429]  netlink_sendmsg+0x8ba/0xbe0
[  183.388840][ T5429]  ? netlink_getsockopt+0x570/0x570
[  183.394049][ T5429]  ? aa_sock_msg_perm+0x94/0x150
[  183.398996][ T5429]  ? apparmor_socket_sendmsg+0x88/0x230
[  183.404553][ T5429]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  183.409850][ T5429]  ? security_socket_sendmsg+0x7c/0xa0
[  183.415312][ T5429]  ? netlink_getsockopt+0x570/0x570
[  183.420518][ T5429]  ____sys_sendmsg+0x5be/0x8f0
[  183.425295][ T5429]  ? __sys_sendmsg_sock+0x30/0x30
[  183.430349][ T5429]  ? import_iovec+0x6f/0xa0
[  183.434882][ T5429]  ___sys_sendmsg+0x236/0x2e0
[  183.439584][ T5429]  ? __sys_sendmsg+0x290/0x290
[  183.444391][ T5429]  __se_sys_sendmsg+0x1b7/0x2a0
[  183.449263][ T5429]  ? __x64_sys_sendmsg+0x80/0x80
[  183.454212][ T5429]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  183.460224][ T5429]  ? lockdep_hardirqs_on+0x94/0x140
[  183.465442][ T5429]  do_syscall_64+0x4c/0xa0
[  183.469876][ T5429]  ? clear_bhb_loop+0x30/0x80
[  183.474559][ T5429]  ? clear_bhb_loop+0x30/0x80
[  183.479248][ T5429]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  183.485151][ T5429] RIP: 0033:0x7f2b25757b19
[  183.489574][ T5429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.509184][ T5429] RSP: 002b:00007f2b239ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.517607][ T5429] RAX: ffffffffffffffda RBX: 00007f2b259ddfa0 RCX: 00007f2b25757b19
[  183.525595][ T5429] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000005
[  183.533590][ T5429] RBP: 00007f2b257efb70 R08: 0000000000000000 R09: 0000000000000000
[  183.541568][ T5429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.549549][ T5429] R13: 00007f2b259de038 R14: 00007f2b259ddfa0 R15: 00007ffd76521198
[  183.557543][ T5429]  </TASK>
[  183.605663][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'.
[  184.331328][ T5413] loop3: detected capacity change from 0 to 32768
[  184.861396][ T5413] XFS (loop3): Mounting V5 Filesystem
[  185.240772][ T5451] netlink: 64 bytes leftover after parsing attributes in process `syz.2.213'.
[  185.435265][ T5413] XFS (loop3): Ending clean mount
[  185.585222][ T4193] XFS (loop3): Unmounting Filesystem
[  187.979122][   T26] audit: type=1800 audit(1793787816.650:2): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.220" name=08 dev="sda1" ino=2049 res=0 errno=0
[  189.452804][ T5483] loop4: detected capacity change from 0 to 1024
[  189.664509][ T5487] ip_tables: iptables: counters copy to user failed while replacing table
[  189.880637][ T5483] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  189.895709][ T5483] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  189.929597][ T5488] CIFS: Attempting to mount \\127.0.0.1\share
[  189.938382][ T5488] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  190.010381][ T5483] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  190.167982][ T5483] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.250337][ T5478] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.225: bg 0: block 112: padding at end of block bitmap is not set
[  190.320729][ T5478] EXT4-fs (loop4): Remounting filesystem read-only
[  190.717743][ T5487] loop3: detected capacity change from 0 to 32768
[  190.790365][ T5488] CIFS: VFS: cifs_mount failed w/return code = -112
[  190.827988][ T5487] XFS (loop3): Mounting V5 Filesystem
[  191.067541][ T5487] XFS (loop3): Ending clean mount
[  191.085568][ T4278] Bluetooth: hci2: command 0x0406 tx timeout
[  191.094484][ T4278] Bluetooth: hci0: command 0x0406 tx timeout
[  191.100558][ T4278] Bluetooth: hci4: command 0x0406 tx timeout
[  191.106660][ T4278] Bluetooth: hci3: command 0x0406 tx timeout
[  191.318671][ T1107] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  192.038504][ T4193] XFS (loop3): Unmounting Filesystem
[  192.237723][ T1107] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  192.269799][ T1107] usb 5-1: config 0 interface 0 has no altsetting 0
[  192.299806][ T1107] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  192.330245][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.353583][ T1107] usb 5-1: config 0 descriptor??
[  192.527152][ T4278] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  192.878356][ T1107] hid-generic 0003:1532:011B.0002: ignoring exceeding usage max
[  193.969175][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  193.975560][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.017732][ T1107] hid-generic 0003:1532:011B.0002: No inputs registered, leaving
[  194.027085][ T1107] hid-generic 0003:1532:011B.0002: hidraw0: USB HID v0.11 Joystick [HID 1532:011b] on usb-dummy_hcd.4-1/input0
[  194.047692][ T1107] usb 5-1: USB disconnect, device number 6
[  194.093016][ T4278] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  194.133983][ T5547] sg_write: data in/out 290240/136 bytes for SCSI command 0x0-- guessing data in;
[  194.133983][ T5547]    program syz.2.238 not setting count and/or reply_len properly
[  194.155698][ T4278] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024
[  194.310160][ T4278] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  194.320601][ T4278] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255
[  194.331146][ T4278] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[  194.340652][ T4278] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.368845][ T5549] loop3: detected capacity change from 0 to 1024
[  194.377902][ T5531] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  194.783101][ T5549] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  194.793394][ T5549] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  194.906392][ T5548] fido_id[5548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  194.937852][ T5549] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  195.067726][ T4278] ims_pcu 6-1:1.0: Failed to set line coding, error: -71
[  195.074212][ T5549] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.148063][ T4278] ims_pcu: probe of 6-1:1.0 failed with error -71
[  195.160038][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  195.168741][ T5546] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.239: bg 0: block 112: padding at end of block bitmap is not set
[  195.197681][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.239743][ T4278] usb 6-1: USB disconnect, device number 3
[  195.248597][ T5546] EXT4-fs (loop3): Remounting filesystem read-only
[  195.279023][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.522471][ T5571] ip_tables: iptables: counters copy to user failed while replacing table
[  197.825605][ T5582] batman_adv: batadv0: Adding interface: syz_tun
[  197.831982][ T5582] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.812990][ T5582] batman_adv: batadv0: Interface activated: syz_tun
[  198.978851][ T5589] device-mapper: table: 248:0: crypt: Invalid feature arguments
[  198.995043][ T5589] device-mapper: ioctl: error adding target to table
[  199.340977][ T5571] loop5: detected capacity change from 0 to 32768
[  199.441528][ T5571] XFS (loop5): Mounting V5 Filesystem
[  199.541952][ T5571] XFS (loop5): log mount failed
[  199.599892][ T4975] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  199.607706][ T4977] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  200.013157][ T4977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024
[  200.024546][ T4975] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  200.045585][ T4977] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  200.166937][ T5616] autofs4:pid:5616:autofs_fill_super: called with bogus options
[  200.410639][ T4977] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  200.420396][ T4975] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  200.429575][ T4977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.438513][ T4975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.446875][ T4977] usb 4-1: Product: syz
[  200.451060][ T4977] usb 4-1: Manufacturer: syz
[  200.455989][ T4975] usb 3-1: Product: syz
[  200.460183][ T4975] usb 3-1: Manufacturer: syz
[  200.465185][ T4977] usb 4-1: SerialNumber: syz
[  200.470625][ T4975] usb 3-1: SerialNumber: syz
[  200.496181][ T5601] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  201.223664][ T4975] usb 3-1: config 0 descriptor??
[  202.613032][ T4977] usb 4-1: Cannot retrieve CPort count: -110
[  202.619260][ T4977] usb 4-1: Cannot retrieve CPort count: -110
[  202.791525][ T4975] usb 3-1: can't set config #0, error -71
[  202.798784][ T4975] usb 3-1: USB disconnect, device number 4
[  202.805391][ T4977] es2_ap_driver: probe of 4-1:1.0 failed with error -110
[  202.815386][ T4977] usb 4-1: USB disconnect, device number 4
[  207.764537][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'.
[  207.869293][ T5666] bond0: (slave bond_slave_0): Releasing backup interface
[  211.681147][ T5668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  211.707273][ T4976] Bluetooth: hci1: command 0x0406 tx timeout
[  222.733995][ T5791] loop1: detected capacity change from 0 to 64
[  222.992519][ T5791] X25: unknown 0F in state 3
[  226.158378][ T4364] Bluetooth: hci1: command 0x0405 tx timeout
[  226.520759][ T5803] loop5: detected capacity change from 0 to 32768
[  226.634198][ T5803] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.310 (5803)
[  226.698792][ T5803] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  226.723100][ T5803] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  226.787237][ T5803] BTRFS info (device loop5): use zstd compression, level 3
[  226.837736][ T5803] BTRFS info (device loop5): force clearing of disk cache
[  226.983036][ T5803] BTRFS info (device loop5): enabling disk space caching
[  226.993198][ T5803] BTRFS info (device loop5): disk space caching is enabled
[  227.010669][ T5803] BTRFS info (device loop5): has skinny extents
[  227.328926][ T5803] BTRFS error (device loop5): open_ctree failed: -12
[  227.678592][ T5797] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by udevd (5797)
[  231.778820][ T5917] loop1: detected capacity change from 0 to 64
[  232.530644][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.331'.
[  232.570433][ T5917] X25: unknown 0F in state 3
[  232.631707][ T5928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'.
[  232.642616][ T5926] loop2: detected capacity change from 0 to 2
[  232.658619][ T5797] Dev loop2: unable to read RDB block 2
[  232.669681][ T5797]  loop2: unable to read partition table
[  232.681111][ T5797] loop2: partition table beyond EOD, truncated
[  232.692071][ T5928] device bond0 entered promiscuous mode
[  232.700380][ T5926] Dev loop2: unable to read RDB block 2
[  232.713005][ T5926]  loop2: unable to read partition table
[  232.726908][ T5928] device bond_slave_0 entered promiscuous mode
[  232.729541][ T5926] loop2: partition table beyond EOD, truncated
[  232.746529][ T5928] device bond_slave_1 entered promiscuous mode
[  232.762872][ T5926] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5)
[  232.786256][ T5928] device gretap0 entered promiscuous mode
[  232.799279][ T5928] device hsr1 entered promiscuous mode
[  234.129458][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  234.500899][ T5947] loop4: detected capacity change from 0 to 32768
[  235.375419][ T5947] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  235.384316][ T5947] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  235.394517][ T5947] BTRFS info (device loop4): use zstd compression, level 3
[  235.401762][ T5947] BTRFS info (device loop4): force clearing of disk cache
[  235.409032][ T5947] BTRFS info (device loop4): enabling disk space caching
[  235.416507][ T5947] BTRFS info (device loop4): disk space caching is enabled
[  235.423775][ T5947] BTRFS info (device loop4): has skinny extents
[  236.927036][ T5947] BTRFS info (device loop4): enabling ssd optimizations
[  236.940755][ T5947] BTRFS info (device loop4): clearing free space tree
[  236.947779][ T5947] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  236.957827][ T5947] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  244.357022][ T6035] loop3: detected capacity change from 0 to 32768
[  244.996455][ T6035] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.357 (6035)
[  245.071141][ T6035] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  245.080180][ T6035] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  245.089781][ T6035] BTRFS info (device loop3): use zstd compression, level 3
[  245.097047][ T6035] BTRFS info (device loop3): force clearing of disk cache
[  245.104225][ T6035] BTRFS info (device loop3): enabling disk space caching
[  245.111282][ T6035] BTRFS info (device loop3): disk space caching is enabled
[  245.118542][ T6035] BTRFS info (device loop3): has skinny extents
[  246.699759][ T6066] loop4: detected capacity change from 0 to 64
[  246.824896][ T6066] X25: unknown 0F in state 3
[  246.879359][ T6035] BTRFS info (device loop3): enabling ssd optimizations
[  246.888005][ T6035] BTRFS info (device loop3): clearing free space tree
[  246.894976][ T6035] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  246.904659][ T6035] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  255.633234][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.641399][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.705722][ T6166] loop5: detected capacity change from 0 to 64
[  255.923168][ T6166] X25: unknown 0F in state 3
[  258.002428][ T6187] loop2: detected capacity change from 0 to 32768
[  258.062782][ T6187] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.379 (6187)
[  258.094393][ T6187] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  258.098393][ T6186] block device autoloading is deprecated and will be removed.
[  258.103302][ T6187] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  258.103430][ T6187] BTRFS info (device loop2): use zstd compression, level 3
[  258.103473][ T6187] BTRFS info (device loop2): force clearing of disk cache
[  258.135189][ T6187] BTRFS info (device loop2): enabling disk space caching
[  258.142234][ T6187] BTRFS info (device loop2): disk space caching is enabled
[  258.149721][ T6187] BTRFS info (device loop2): has skinny extents
[  259.806649][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.382'.
[  262.314950][ T6187] BTRFS error (device loop2): open_ctree failed: -12
[  262.649751][ T6237] ip_tables: iptables: counters copy to user failed while replacing table
[  262.687063][ T6237] hub 5-0:1.0: USB hub found
[  262.693892][ T6237] hub 5-0:1.0: 1 port detected
[  263.649492][ T6144] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by udevd (6144)
[  264.697404][ T6254] loop1: detected capacity change from 0 to 64
[  264.834054][ T6254] X25: unknown 0F in state 3
[  266.663069][ T4338] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  267.902845][ T4338] usb 4-1: device descriptor read/64, error -71
[  269.614820][ T6294] loop5: detected capacity change from 0 to 32768
[  269.638977][ T6300] netlink: 'syz.3.397': attribute type 29 has an invalid length.
[  269.647055][ T6300] netlink: 'syz.3.397': attribute type 29 has an invalid length.
[  272.109807][ T6294] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  272.119619][ T6294] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  272.129134][ T6294] BTRFS info (device loop5): use zstd compression, level 3
[  272.136379][ T6294] BTRFS info (device loop5): force clearing of disk cache
[  272.143517][ T6294] BTRFS info (device loop5): enabling disk space caching
[  272.150534][ T6294] BTRFS info (device loop5): disk space caching is enabled
[  272.157793][ T6294] BTRFS info (device loop5): has skinny extents
[  272.745245][ T6294] BTRFS error (device loop5): open_ctree failed: -12
[  272.753387][ T6202] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by udevd (6202)
[  273.572297][ T4975] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  274.219898][ T4975] usb 6-1: device descriptor read/64, error -71
[  274.723119][ T4975] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  275.073793][ T4975] usb 6-1: device descriptor read/64, error -71
[  275.205357][ T4975] usb usb6-port1: attempt power cycle
[  275.625033][ T4975] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  275.733128][ T4975] usb 6-1: device descriptor read/8, error -71
[  275.858099][ T6361] FAULT_INJECTION: forcing a failure.
[  275.858099][ T6361] name failslab, interval 1, probability 0, space 0, times 0
[  275.911929][ T6361] CPU: 1 PID: 6361 Comm: syz.4.413 Not tainted syzkaller #0
[  275.919273][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  275.929351][ T6361] Call Trace:
[  275.932654][ T6361]  <TASK>
[  275.935627][ T6361]  dump_stack_lvl+0x188/0x250
[  275.940335][ T6361]  ? show_regs_print_info+0x20/0x20
[  275.945552][ T6361]  ? load_image+0x410/0x410
[  275.950084][ T6361]  ? __might_sleep+0xf0/0xf0
[  275.954699][ T6361]  ? __lock_acquire+0x7d40/0x7d40
[  275.959771][ T6361]  should_fail+0x383/0x4b0
[  275.964224][ T6361]  should_failslab+0x5/0x20
[  275.968784][ T6361]  slab_pre_alloc_hook+0x51/0xc0
[  275.973754][ T6361]  ? __kernfs_new_node+0xa8/0x6b0
[  275.978811][ T6361]  __kmalloc_track_caller+0x69/0x330
[  275.984123][ T6361]  ? __kernfs_new_node+0xa8/0x6b0
[  275.989178][ T6361]  kstrdup_const+0x51/0x90
[  275.993616][ T6361]  __kernfs_new_node+0xa8/0x6b0
[  275.998492][ T6361]  ? kernfs_new_node+0x250/0x250
[  276.003463][ T6361]  ? sysfs_do_create_link_sd+0x75/0x110
[  276.009037][ T6361]  kernfs_new_node+0x148/0x250
[  276.013840][ T6361]  kernfs_create_link+0xa3/0x200
[  276.018807][ T6361]  sysfs_do_create_link_sd+0x83/0x110
[  276.024209][ T6361]  device_add+0x83b/0x1050
[  276.028684][ T6361]  netdev_register_kobject+0x184/0x320
[  276.034194][ T6361]  register_netdevice+0x10e8/0x1720
[  276.039456][ T6361]  ? netif_stacked_transfer_operstate+0x200/0x200
[  276.045893][ T6361]  ? memset+0x1e/0x40
[  276.049910][ T6361]  ip6_tnl_locate+0x72e/0x840
[  276.054624][ T6361]  ? ip6_tnl_unlink+0x2c0/0x2c0
[  276.059506][ T6361]  ? ip6_tnl_siocdevprivate+0x5f5/0xb90
[  276.065088][ T6361]  ip6_tnl_siocdevprivate+0x61b/0xb90
[  276.070509][ T6361]  ? ip6_tnl_start_xmit+0x12d0/0x12d0
[  276.075918][ T6361]  ? full_name_hash+0x8e/0xe0
[  276.080630][ T6361]  dev_ifsioc+0xa30/0xd50
[  276.084990][ T6361]  ? dev_ioctl+0xe30/0xe30
[  276.089427][ T6361]  ? full_name_hash+0x8e/0xe0
[  276.094146][ T6361]  dev_ioctl+0x5df/0xe30
[  276.098407][ T6361]  ? get_user_ifreq+0xc7/0x170
[  276.103192][ T6361]  sock_ioctl+0x679/0x700
[  276.107549][ T6361]  ? sock_poll+0x420/0x420
[  276.112018][ T6361]  ? bpf_lsm_file_ioctl+0x5/0x10
[  276.116984][ T6361]  ? security_file_ioctl+0x7c/0xa0
[  276.122121][ T6361]  ? sock_poll+0x420/0x420
[  276.126564][ T6361]  __se_sys_ioctl+0xfa/0x170
[  276.131179][ T6361]  do_syscall_64+0x4c/0xa0
[  276.135616][ T6361]  ? clear_bhb_loop+0x30/0x80
[  276.140316][ T6361]  ? clear_bhb_loop+0x30/0x80
[  276.145024][ T6361]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  276.150939][ T6361] RIP: 0033:0x7f2b25757b19
[  276.155378][ T6361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.175012][ T6361] RSP: 002b:00007f2b239ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  276.183446][ T6361] RAX: ffffffffffffffda RBX: 00007f2b259ddfa0 RCX: 00007f2b25757b19
[  276.191436][ T6361] RDX: 0000200000000400 RSI: 00000000000089f1 RDI: 0000000000000004
[  276.199419][ T6361] RBP: 00007f2b257efb70 R08: 0000000000000000 R09: 0000000000000000
[  276.207414][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.215411][ T6361] R13: 00007f2b259de038 R14: 00007f2b259ddfa0 R15: 00007ffd76521198
[  276.223423][ T6361]  </TASK>
[  276.970639][ T4975] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  277.203007][ T6239] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  277.212920][ T4975] usb 6-1: device not accepting address 7, error -71
[  277.233064][ T4975] usb usb6-port1: unable to enumerate USB device
[  278.661462][ T6372] loop5: detected capacity change from 0 to 32768
[  278.759535][ T6380] loop4: detected capacity change from 0 to 32768
[  278.775599][ T6372] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  278.802894][ T6239] usb 4-1: Using ep0 maxpacket: 8
[  278.955973][ T6372] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  278.979661][ T6372] BTRFS info (device loop5): use zstd compression, level 3
[  279.011126][ T6372] BTRFS info (device loop5): force clearing of disk cache
[  280.162168][ T6372] BTRFS info (device loop5): enabling disk space caching
[  280.187418][ T6372] BTRFS info (device loop5): disk space caching is enabled
[  280.215394][ T6372] BTRFS info (device loop5): has skinny extents
[  280.229813][ T6239] usb 4-1: device descriptor read/all, error -71
[  280.288223][ T6380] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.417 (6380)
[  280.615521][ T6372] BTRFS error (device loop5): open_ctree failed: -12
[  280.744780][ T6144] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by udevd (6144)
[  282.690963][ T6421] ip_tables: iptables: counters copy to user failed while replacing table
[  284.363185][ T6427] sctp: [Deprecated]: syz.4.427 (pid 6427) Use of struct sctp_assoc_value in delayed_ack socket option.
[  284.363185][ T6427] Use struct sctp_sack_info instead
[  284.877186][ T6239] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  285.054959][ T6424] rxe_eth0 speed is unknown, defaulting to 1000
[  285.113003][ T6239] usb 4-1: device descriptor read/64, error -71
[  285.379554][ T4192] batman_adv: batadv0: Interface deactivated: syz_tun
[  285.393625][ T6239] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  285.530094][ T4192] batman_adv: batadv0: Removing interface: syz_tun
[  285.612883][ T6239] usb 4-1: device descriptor read/64, error -71
[  285.668190][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.743178][ T6239] usb usb4-port1: attempt power cycle
[  285.775249][ T6424] chnl_net:caif_netlink_parms(): no params data found
[  285.947705][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.101141][ T4192] syz-executor (4192) used greatest stack depth: 20032 bytes left
[  286.163036][ T6239] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  286.185629][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.281095][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.288477][ T6239] usb 4-1: Using ep0 maxpacket: 8
[  286.312294][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.921211][ T4981] Bluetooth: hci5: command 0x0409 tx timeout
[  288.123193][ T6424] device bridge_slave_0 entered promiscuous mode
[  288.137526][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.149567][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.161163][ T6424] device bridge_slave_1 entered promiscuous mode
[  288.207706][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.226393][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.114305][ T6239] usb 4-1: unable to read config index 0 descriptor/start: -71
[  289.121959][ T6239] usb 4-1: can't read configurations, error -71
[  289.307157][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.967393][ T6459] sctp: failed to load transform for md5: -2
[  289.997723][ T6424] team0: Port device team_slave_0 added
[  290.043433][ T4981] Bluetooth: hci5: command 0x041b tx timeout
[  290.081091][ T6424] team0: Port device team_slave_1 added
[  291.205993][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.256435][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.363618][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.376025][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.383027][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.409073][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.533123][ T6488] ip_tables: iptables: counters copy to user failed while replacing table
[  291.676400][ T6424] device hsr_slave_0 entered promiscuous mode
[  291.733552][ T6424] device hsr_slave_1 entered promiscuous mode
[  291.763049][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  291.782582][ T6424] Cannot create hsr debugfs directory
[  292.123096][ T4983] Bluetooth: hci5: command 0x040f tx timeout
[  293.136570][ T6488] loop4: detected capacity change from 0 to 32768
[  293.261800][ T6488] XFS (loop4): Mounting V5 Filesystem
[  293.536465][ T6424] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  293.569737][ T6488] XFS (loop4): Ending clean mount
[  293.672550][ T6424] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  293.711578][ T6424] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  293.733082][ T4189] XFS (loop4): Unmounting Filesystem
[  293.808144][ T6424] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  294.105867][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.140782][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  294.159821][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  294.203417][ T4981] Bluetooth: hci5: command 0x0419 tx timeout
[  294.228324][ T6424] 8021q: adding VLAN 0 to HW filter on device team0
[  294.688015][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  294.770523][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  294.944772][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.951945][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.053119][ T4981] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  295.170737][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  295.203762][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  295.222658][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  295.253268][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.260354][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.288658][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  295.431219][    T9] device hsr_slave_0 left promiscuous mode
[  295.453848][    T9] device hsr_slave_1 left promiscuous mode
[  295.676371][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.780856][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.905392][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.011963][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.144734][    T9] device bridge_slave_1 left promiscuous mode
[  296.150956][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.286625][ T4981] usb 5-1: Using ep0 maxpacket: 8
[  296.314602][    T9] device bridge_slave_0 left promiscuous mode
[  296.348693][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.388924][    T9] device veth1_macvtap left promiscuous mode
[  297.585361][    T9] device veth0_macvtap left promiscuous mode
[  297.591532][    T9] device veth1_vlan left promiscuous mode
[  297.600543][    T9] device veth0_vlan left promiscuous mode
[  297.753058][ T4981] usb 5-1: unable to read config index 0 descriptor/all
[  297.762047][ T4981] usb 5-1: can't read configurations, error -71
[  299.009813][ T6567] ip_tables: iptables: counters copy to user failed while replacing table
[  299.789761][ T6567] loop3: detected capacity change from 0 to 32768
[  299.818955][    T9] team0 (unregistering): Port device team_slave_1 removed
[  299.888222][    T9] team0 (unregistering): Port device team_slave_0 removed
[  299.972694][ T6567] XFS (loop3): Mounting V5 Filesystem
[  299.989996][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.037187][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.083930][ T6567] XFS (loop3): Ending clean mount
[  300.225647][ T4193] XFS (loop3): Unmounting Filesystem
[  300.287676][ T4981] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  300.299158][    T9] bond0 (unregistering): Released all slaves
[  300.380709][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  300.405918][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  300.482468][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  300.513830][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  300.543004][ T4981] usb 6-1: Using ep0 maxpacket: 8
[  300.564409][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'.
[  301.922975][ T4981] usb 6-1: unable to get BOS descriptor or descriptor too short
[  301.983010][ T4981] usb 6-1: unable to read config index 0 descriptor/start: -71
[  302.105595][ T4981] usb 6-1: can't read configurations, error -71
[  302.557648][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  302.739363][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  304.064774][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  304.089351][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  304.118520][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  304.143505][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  304.153087][ T4338] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  304.162299][ T6424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  304.544126][ T4338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.572387][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.602856][ T4338] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  304.611936][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.639352][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  304.651818][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  304.691066][ T4338] usb 4-1: config 0 descriptor??
[  305.103591][ T4338] usbhid 4-1:0.0: can't add hid device: -71
[  305.125930][ T4338] usbhid: probe of 4-1:0.0 failed with error -71
[  305.364647][ T4338] usb 4-1: USB disconnect, device number 13
[  307.373218][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  307.395651][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  307.455767][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  307.473417][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  307.487604][ T6647] syz.3.467 uses obsolete (PF_INET,SOCK_PACKET)
[  307.503933][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  307.512186][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  307.542033][ T6424] device veth0_vlan entered promiscuous mode
[  307.567758][ T6424] device veth1_vlan entered promiscuous mode
[  307.654384][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  307.681183][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  307.709800][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  307.743245][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  307.774327][ T6424] device veth0_macvtap entered promiscuous mode
[  307.824398][ T6424] device veth1_macvtap entered promiscuous mode
[  307.876685][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.923742][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.974457][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.014698][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.089565][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.142869][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.420817][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.181895][ T4338] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  310.793314][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  310.805716][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  310.832321][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  310.885285][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  310.925532][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.956541][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.982965][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.020715][ T6677] ip_tables: iptables: counters copy to user failed while replacing table
[  311.035705][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.075333][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.137069][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.163628][ T4338] usb 5-1: unable to read config index 0 descriptor/start: -71
[  311.171276][ T4338] usb 5-1: can't read configurations, error -71
[  311.214284][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.221974][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  311.263803][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  311.445241][ T6424] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.477405][ T6424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.571855][ T6424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.630432][ T6424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.998940][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.027290][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.061996][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  312.179800][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.207102][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.251799][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  313.357295][ T6677] loop5: detected capacity change from 0 to 32768
[  313.470843][ T6677] XFS (loop5): Mounting V5 Filesystem
[  313.638605][ T6677] XFS (loop5): Ending clean mount
[  313.791977][ T4389] XFS (loop5): Unmounting Filesystem
[  316.846134][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  316.856181][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.835902][ T6771] ip_tables: iptables: counters copy to user failed while replacing table
[  317.937425][ T6776] FAULT_INJECTION: forcing a failure.
[  317.937425][ T6776] name failslab, interval 1, probability 0, space 0, times 0
[  317.993087][ T6776] CPU: 1 PID: 6776 Comm: syz.3.489 Not tainted syzkaller #0
[  318.000517][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  318.010590][ T6776] Call Trace:
[  318.013894][ T6776]  <TASK>
[  318.016835][ T6776]  dump_stack_lvl+0x188/0x250
[  318.021541][ T6776]  ? show_regs_print_info+0x20/0x20
[  318.026769][ T6776]  ? load_image+0x410/0x410
[  318.031307][ T6776]  ? __might_sleep+0xf0/0xf0
[  318.035917][ T6776]  ? __lock_acquire+0x7d40/0x7d40
[  318.040971][ T6776]  should_fail+0x383/0x4b0
[  318.045414][ T6776]  should_failslab+0x5/0x20
[  318.049930][ T6776]  slab_pre_alloc_hook+0x51/0xc0
[  318.054902][ T6776]  kmem_cache_alloc_trace+0x47/0x290
[  318.060218][ T6776]  ? __list_lru_init+0x535/0xac0
[  318.065199][ T6776]  __list_lru_init+0x535/0xac0
[  318.070006][ T6776]  alloc_super+0x787/0x970
[  318.074458][ T6776]  ? kernfs_get_tree+0x6b0/0x6b0
[  318.079448][ T6776]  sget_fc+0x2d4/0x6f0
[  318.083545][ T6776]  ? kernfs_test_super+0x100/0x100
[  318.088689][ T6776]  kernfs_get_tree+0x15c/0x6b0
[  318.093483][ T6776]  ? apparmor_capable+0x12c/0x190
[  318.098528][ T6776]  sysfs_get_tree+0x42/0x110
[  318.103135][ T6776]  vfs_get_tree+0x88/0x270
[  318.107572][ T6776]  do_new_mount+0x247/0xa50
[  318.112121][ T6776]  __se_sys_mount+0x2e3/0x3d0
[  318.116825][ T6776]  ? __x64_sys_mount+0xc0/0xc0
[  318.121614][ T6776]  ? lockdep_hardirqs_on+0x94/0x140
[  318.126839][ T6776]  ? __x64_sys_mount+0x1c/0xc0
[  318.131629][ T6776]  do_syscall_64+0x4c/0xa0
[  318.136074][ T6776]  ? clear_bhb_loop+0x30/0x80
[  318.140783][ T6776]  ? clear_bhb_loop+0x30/0x80
[  318.145478][ T6776]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  318.151394][ T6776] RIP: 0033:0x7fe221c3cb19
[  318.155829][ T6776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  318.175460][ T6776] RSP: 002b:00007fe21fe93028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  318.183912][ T6776] RAX: ffffffffffffffda RBX: 00007fe221ec2fa0 RCX: 00007fe221c3cb19
[  318.191903][ T6776] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 0000000000000000
[  318.199890][ T6776] RBP: 00007fe221cd4b70 R08: 0000000000000000 R09: 0000000000000000
[  318.207877][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.215868][ T6776] R13: 00007fe221ec3038 R14: 00007fe221ec2fa0 R15: 00007ffe0bd14d18
[  318.223874][ T6776]  </TASK>
[  319.806753][ T6792] loop4: detected capacity change from 0 to 1024
[  319.885521][ T6792] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  319.893265][ T6792] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  319.945224][ T6771] loop6: detected capacity change from 0 to 32768
[  319.978796][ T6792] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  319.999887][ T6792] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.021976][ T6792] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.485: bg 0: block 112: padding at end of block bitmap is not set
[  320.037673][ T6792] EXT4-fs (loop4): Remounting filesystem read-only
[  320.231693][ T6771] XFS (loop6): Mounting V5 Filesystem
[  320.378756][ T6771] XFS (loop6): Ending clean mount
[  320.467972][ T6424] XFS (loop6): Unmounting Filesystem
[  321.527407][ T6820] MTRR 1 not used
[  327.201536][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'.
[  328.782928][ T4978] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  329.073023][ T4978] usb 2-1: Using ep0 maxpacket: 16
[  329.193094][ T4978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  329.221516][ T4978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  332.023058][ T4978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  332.032158][ T4978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.082537][ T4978] usb 2-1: Product: syz
[  332.109671][ T6904] ip_tables: iptables: counters copy to user failed while replacing table
[  332.130204][ T4978] usb 2-1: can't set config #1, error -71
[  332.144522][ T4978] usb 2-1: USB disconnect, device number 2
[  333.169551][ T6904] loop6: detected capacity change from 0 to 32768
[  335.457008][ T6934] FAULT_INJECTION: forcing a failure.
[  335.457008][ T6934] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  335.471585][ T6934] CPU: 1 PID: 6934 Comm: syz.5.510 Not tainted syzkaller #0
[  335.478990][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  335.489064][ T6934] Call Trace:
[  335.492385][ T6934]  <TASK>
[  335.495330][ T6934]  dump_stack_lvl+0x188/0x250
[  335.500046][ T6934]  ? verify_lock_unused+0x140/0x140
[  335.505291][ T6934]  ? show_regs_print_info+0x20/0x20
[  335.510526][ T6934]  ? load_image+0x410/0x410
[  335.515353][ T6934]  ? mark_lock+0x94/0x320
[  335.519708][ T6934]  should_fail+0x383/0x4b0
[  335.524147][ T6934]  prepare_alloc_pages+0x1e3/0x5b0
[  335.529325][ T6934]  __alloc_pages+0x11b/0x480
[  335.533945][ T6934]  ? zone_statistics+0x170/0x170
[  335.538946][ T6934]  ? rcu_lock_acquire+0x30/0x30
[  335.543828][ T6934]  ? alloc_pages+0x452/0x560
[  335.548467][ T6934]  __get_free_pages+0x8/0x30
[  335.553061][ T6934]  __tlb_remove_page_size+0x1f2/0x3f0
[  335.558442][ T6934]  unmap_page_range+0xfcf/0x2410
[  335.563417][ T6934]  unmap_vmas+0x131/0x250
[  335.567764][ T6934]  ? unmap_page_range+0x2410/0x2410
[  335.572956][ T6934]  ? __mutex_lock_common+0x435/0x2400
[  335.578338][ T6934]  ? exit_mm_release+0x16/0x30
[  335.583102][ T6934]  exit_mmap+0x3b9/0x640
[  335.587341][ T6934]  ? vm_brk+0x20/0x20
[  335.591336][ T6934]  ? uprobe_clear_state+0x2f6/0x460
[  335.596527][ T6934]  __mmput+0x115/0x390
[  335.600588][ T6934]  exit_mm+0x632/0x7b0
[  335.604660][ T6934]  ? perf_pmu_migrate_context+0xb70/0xb70
[  335.610375][ T6934]  ? do_exit+0x2100/0x2100
[  335.614793][ T6934]  ? __ia32_sys_timer_delete+0x40/0x40
[  335.620246][ T6934]  ? hrtimer_try_to_cancel+0x3d6/0x420
[  335.625715][ T6934]  ? tty_audit_exit+0x149/0x1f0
[  335.630564][ T6934]  do_exit+0x5b8/0x2100
[  335.634728][ T6934]  ? put_task_struct+0x80/0x80
[  335.639487][ T6934]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  335.645470][ T6934]  ? _raw_spin_lock_irq+0xb7/0xf0
[  335.650514][ T6934]  do_group_exit+0x12c/0x2f0
[  335.655134][ T6934]  ? lockdep_hardirqs_on+0x94/0x140
[  335.660334][ T6934]  get_signal+0x7eb/0x12e0
[  335.664780][ T6934]  arch_do_signal_or_restart+0xe6/0x12a0
[  335.670427][ T6934]  ? futex_exit_release+0x1c0/0x1c0
[  335.675646][ T6934]  ? get_sigframe_size+0x10/0x10
[  335.680609][ T6934]  ? __context_tracking_exit+0x4c/0x80
[  335.686086][ T6934]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  335.692073][ T6934]  ? exit_to_user_mode_loop+0x3b/0x130
[  335.697542][ T6934]  exit_to_user_mode_loop+0x9e/0x130
[  335.702846][ T6934]  exit_to_user_mode_prepare+0xee/0x180
[  335.708411][ T6934]  syscall_exit_to_user_mode+0x16/0x40
[  335.713866][ T6934]  do_syscall_64+0x58/0xa0
[  335.718278][ T6934]  ? clear_bhb_loop+0x30/0x80
[  335.722954][ T6934]  ? clear_bhb_loop+0x30/0x80
[  335.727641][ T6934]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  335.733527][ T6934] RIP: 0033:0x7f2a73723b19
[  335.737933][ T6934] Code: Unable to access opcode bytes at RIP 0x7f2a73723aef.
[  335.745282][ T6934] RSP: 002b:00007f2a7197a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  335.753689][ T6934] RAX: fffffffffffffe00 RBX: 00007f2a739a9fa8 RCX: 00007f2a73723b19
[  335.761686][ T6934] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2a739a9fa8
[  335.769654][ T6934] RBP: 00007f2a739a9fa0 R08: 0000000000000000 R09: 0000000000000000
[  335.777620][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.785685][ T6934] R13: 00007f2a739aa038 R14: 00007ffca1e24470 R15: 00007ffca1e24558
[  335.793660][ T6934]  </TASK>
[  337.696657][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'.
[  337.868569][ T6968] loop2: detected capacity change from 0 to 2
[  337.993038][ T6968] Dev loop2: unable to read RDB block 2
[  338.006182][ T6968]  loop2: unable to read partition table
[  338.394062][ T6968] loop2: partition table beyond EOD, truncated
[  338.400433][ T6968] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5)
[  343.762832][ T6999] FAULT_INJECTION: forcing a failure.
[  343.762832][ T6999] name fail_futex, interval 1, probability 0, space 0, times 0
[  343.775823][ T6999] CPU: 0 PID: 6999 Comm: syz.4.531 Not tainted syzkaller #0
[  343.783129][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  343.793185][ T6999] Call Trace:
[  343.796455][ T6999]  <TASK>
[  343.799375][ T6999]  dump_stack_lvl+0x188/0x250
[  343.804053][ T6999]  ? show_regs_print_info+0x20/0x20
[  343.809257][ T6999]  ? load_image+0x410/0x410
[  343.813872][ T6999]  should_fail+0x383/0x4b0
[  343.818305][ T6999]  get_futex_key+0x1a0/0x1200
[  343.822986][ T6999]  ? __lock_acquire+0x13b3/0x7d40
[  343.828028][ T6999]  ? futex_wait_restart+0x250/0x250
[  343.833227][ T6999]  futex_wake+0x101/0x540
[  343.837554][ T6999]  ? futex_wait+0x680/0x680
[  343.842049][ T6999]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  343.848029][ T6999]  ? verify_lock_unused+0x140/0x140
[  343.853224][ T6999]  ? lock_chain_count+0x20/0x20
[  343.858069][ T6999]  do_futex+0xd83/0x12b0
[  343.862309][ T6999]  ? raw_spin_rq_unlock_irq+0x11/0x90
[  343.867675][ T6999]  ? __schedule+0x1465/0x4350
[  343.872349][ T6999]  ? futex_exit_release+0x1c0/0x1c0
[  343.877539][ T6999]  ? __context_tracking_exit+0x4c/0x80
[  343.882998][ T6999]  __se_sys_futex+0x389/0x420
[  343.887673][ T6999]  ? __x64_sys_futex+0xf0/0xf0
[  343.892433][ T6999]  ? __x64_sys_futex+0x1d/0xf0
[  343.897198][ T6999]  do_syscall_64+0x4c/0xa0
[  343.901610][ T6999]  ? clear_bhb_loop+0x30/0x80
[  343.906280][ T6999]  ? clear_bhb_loop+0x30/0x80
[  343.910950][ T6999]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  343.916840][ T6999] RIP: 0033:0x7f2b25757b19
[  343.921253][ T6999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  343.940854][ T6999] RSP: 002b:00007f2b2398d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  343.949266][ T6999] RAX: ffffffffffffffda RBX: 00007f2b259de098 RCX: 00007f2b25757b19
[  343.957228][ T6999] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2b259de09c
[  343.965199][ T6999] RBP: 00007f2b259de090 R08: 002a9624d1ea597c R09: 0000000000000000
[  343.973161][ T6999] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  343.981136][ T6999] R13: 00007f2b259de128 R14: 00007ffd765210b0 R15: 00007ffd76521198
[  343.989120][ T6999]  </TASK>
[  345.356989][ T4984] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  345.569370][ T7023] ip_tables: iptables: counters copy to user failed while replacing table
[  345.662915][ T4984] usb 2-1: Using ep0 maxpacket: 8
[  345.818246][ T4984] usb 2-1: config 2 has an invalid interface number: 241 but max is 0
[  345.832817][ T4984] usb 2-1: config 2 has no interface number 0
[  345.867256][ T4984] usb 2-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  347.172823][ T4984] usb 2-1: config 2 interface 241 has no altsetting 0
[  347.367235][ T4984] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  347.382802][ T4984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.411165][ T4984] usb 2-1: Product: syz
[  347.419666][ T4984] usb 2-1: Manufacturer: syz
[  347.424580][ T4984] usb 2-1: SerialNumber: syz
[  347.456668][ T7023] loop3: detected capacity change from 0 to 32768
[  347.502872][ T4278] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  347.507311][ T4984] ti_usb_3410_5052 2-1:2.241: TI USB 3410 1 port adapter converter detected
[  347.531720][ T4984] ti_usb_3410_5052 2-1:2.241: missing endpoints
[  347.616843][ T7023] XFS (loop3): Mounting V5 Filesystem
[  347.709237][ T4338] usb 2-1: USB disconnect, device number 3
[  347.751615][ T7023] XFS (loop3): Ending clean mount
[  347.793641][ T4193] XFS (loop3): Unmounting Filesystem
[  347.885423][ T4278] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x22, skipping
[  348.073378][ T4278] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  348.094253][ T4278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.132928][ T4278] usb 5-1: Product: syz
[  348.152174][ T4278] usb 5-1: Manufacturer: syz
[  348.207299][ T4278] usb 5-1: SerialNumber: syz
[  348.329852][ T4278] usb 5-1: config 0 descriptor??
[  348.438588][ T4278] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  348.628932][ T4278] usb 5-1: USB disconnect, device number 11
[  355.473362][ T4199] Bluetooth: hci5: link tx timeout
[  355.480245][ T4199] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  356.948064][ T7138] loop3: detected capacity change from 0 to 32768
[  357.129974][ T7138] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  357.138814][ T7138] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  357.148232][ T7138] BTRFS info (device loop3): use zstd compression, level 3
[  357.155606][ T7138] BTRFS info (device loop3): force clearing of disk cache
[  357.162735][ T7138] BTRFS info (device loop3): enabling disk space caching
[  357.170688][ T7138] BTRFS info (device loop3): disk space caching is enabled
[  357.178076][ T7138] BTRFS info (device loop3): has skinny extents
[  357.985619][ T4978] Bluetooth: hci5: command 0x0406 tx timeout
[  360.710945][ T7138] BTRFS error (device loop3): open_ctree failed: -12
[  360.891591][ T7144] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by udevd (7144)
[  360.958392][ T7179] loop2: detected capacity change from 0 to 2
[  361.020635][ T7142] Dev loop2: unable to read RDB block 2
[  361.026610][ T7142]  loop2: unable to read partition table
[  361.078450][ T7142] loop2: partition table beyond EOD, truncated
[  361.102494][ T7179] Dev loop2: unable to read RDB block 2
[  361.123064][ T7179]  loop2: unable to read partition table
[  361.128938][ T7179] loop2: partition table beyond EOD, truncated
[  361.173093][ T7179] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5)
[  362.015498][ T7195] sctp: [Deprecated]: syz.6.562 (pid 7195) Use of struct sctp_assoc_value in delayed_ack socket option.
[  362.015498][ T7195] Use struct sctp_sack_info instead
[  363.623413][ T4199] Bluetooth: hci5: link tx timeout
[  363.628591][ T4199] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  363.637081][ T4199] Bluetooth: hci5: link tx timeout
[  363.642228][ T4199] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  367.359836][ T5867] Bluetooth: hci5: command 0x0406 tx timeout
[  372.980094][ T7289] loop5: detected capacity change from 0 to 32768
[  373.040494][ T7289] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  373.050215][ T7289] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  373.059664][ T7289] BTRFS info (device loop5): use zstd compression, level 3
[  373.066929][ T7289] BTRFS info (device loop5): force clearing of disk cache
[  373.074095][ T7289] BTRFS info (device loop5): enabling disk space caching
[  373.081129][ T7289] BTRFS info (device loop5): disk space caching is enabled
[  373.088378][ T7289] BTRFS info (device loop5): has skinny extents
[  373.352098][ T7289] BTRFS info (device loop5): enabling ssd optimizations
[  373.361687][ T7289] BTRFS info (device loop5): clearing free space tree
[  373.368743][ T7289] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  373.378602][ T7289] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  376.077872][ T6238] Bluetooth: hci5: command 0x0405 tx timeout
[  377.734971][ T7340] loop6: detected capacity change from 0 to 1024
[  377.754844][ T7340] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  377.762267][ T7340] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  378.285037][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.291459][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  379.028480][ T7340] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  379.049578][ T7340] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.081022][ T7340] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.587: bg 0: block 112: padding at end of block bitmap is not set
[  379.098483][ T7340] EXT4-fs (loop6): Remounting filesystem read-only
[  379.347238][ T7261] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop5 scanned by udevd (7261)
[  384.853258][ T7406] loop4: detected capacity change from 0 to 32768
[  386.970294][ T7415] autofs4:pid:7415:autofs_fill_super: called with bogus options
[  389.676715][   T26] audit: type=1800 audit(1793788018.520:3): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.604" name=08 dev="sda1" ino=2049 res=0 errno=0
[  391.433886][ T7457] loop4: detected capacity change from 0 to 32768
[  391.653014][ T4338] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  392.022912][ T4338] usb 4-1: Using ep0 maxpacket: 8
[  392.153136][ T4338] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  392.181860][ T4338] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  392.266391][ T4338] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  392.360541][ T4338] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  393.722806][ T4338] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  393.722857][ T4338] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  393.722883][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.752971][ T4338] usb 4-1: can't set config #16, error -71
[  393.754203][ T4338] usb 4-1: USB disconnect, device number 14
[  398.757384][ T7524] loop1: detected capacity change from 0 to 32768
[  399.292256][ T7531] ip_tables: iptables: counters copy to user failed while replacing table
[  402.111676][ T7558] jffs2: notice: (7558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  406.904340][ T7598] autofs4:pid:7598:autofs_fill_super: called with bogus options
[  408.918956][ T7617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.650'.
[  408.940176][ T7618] loop5: detected capacity change from 0 to 512
[  409.058391][ T7618] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback.
[  409.073033][ T7618] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  409.350819][ T7626] loop6: detected capacity change from 0 to 512
[  409.419683][ T7626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  409.454844][ T7626] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  409.703519][ T7626] EXT4-fs (loop6): 1 truncate cleaned up
[  409.709223][ T7626] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  410.288663][ T7626] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.653: bg 0: block 290: padding at end of block bitmap is not set
[  411.842826][ T4976] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  412.071295][ T7645] loop4: detected capacity change from 0 to 8
[  412.092920][ T4976] usb 6-1: Using ep0 maxpacket: 8
[  413.553165][ T4976] usb 6-1: unable to get BOS descriptor or descriptor too short
[  413.632912][ T4976] usb 6-1: unable to read config index 0 descriptor/start: -71
[  413.650746][ T4976] usb 6-1: can't read configurations, error -71
[  414.381650][ T7652] SQUASHFS error: Unable to read directory block [631:26]
[  414.499869][   T26] audit: type=1800 audit(1793788043.260:4): pid=7652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.660" name="file1" dev="loop4" ino=5 res=0 errno=0
[  415.296980][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.663'.
[  416.967829][ T4199] Bluetooth: hci0: unexpected event for opcode 0x2003
[  421.151359][ T7701] loop1: detected capacity change from 0 to 164
[  422.914950][ T7719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.673'.
[  423.156312][   T26] audit: type=1800 audit(1793788052.000:5): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.670" name="UDC" dev="configfs" ino=41582 res=0 errno=0
[  423.188434][ T7723] Config c/1 of g1 needs at least one function.
[  423.219035][ T7723] udc dummy_udc.0: failed to start g1: -22
[  423.655067][ T4199] Bluetooth: hci0: unexpected event for opcode 0x2003
[  424.593219][ T7745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.716383][ T7766] jffs2: notice: (7766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  426.906511][ T7776] loop1: detected capacity change from 0 to 512
[  426.999377][ T7776] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  427.053012][ T7776] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  427.110354][ T7776] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  427.766527][ T7776] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  427.802094][ T7776] System zones: 0-2, 18-18, 34-34
[  429.053113][ T7776] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.684: bad orphan inode 15
[  429.104886][ T7776] ext4_test_bit(bit=14, block=18) = 1
[  429.110318][ T7776] is_bad_inode(inode)=0
[  429.139598][ T7776] NEXT_ORPHAN(inode)=2264924160
[  429.164748][ T7776] max_ino=32
[  429.178271][ T7776] i_nlink=0
[  429.217664][ T7776] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2928: inode #15: comm syz.1.684: corrupted xattr block 19
[  429.326101][ T7776] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117)
[  429.343083][ T7776] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  429.519433][ T7776] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none.
[  430.321072][ T7802] loop4: detected capacity change from 0 to 32768
[  431.487156][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'.
[  431.539735][ T7822] jffs2: notice: (7822) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  434.645372][ T7848] loop6: detected capacity change from 0 to 32768
[  435.779298][ T7854] jffs2: notice: (7854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  435.806202][ T7845] loop5: detected capacity change from 0 to 32768
[  436.015063][ T7845] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.702 (7845)
[  436.046570][ T7861] jffs2: notice: (7861) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  436.088599][ T7845] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  436.118728][ T7845] BTRFS info (device loop5): setting nodatasum
[  436.152893][ T7845] BTRFS info (device loop5): force zlib compression, level 3
[  436.195986][ T7845] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  436.242777][ T7845] BTRFS info (device loop5): use lzo compression, level 0
[  436.265643][ T7845] BTRFS info (device loop5): turning on flush-on-commit
[  436.279361][ T7845] BTRFS info (device loop5): enabling auto defrag
[  436.300638][ T7845] BTRFS info (device loop5): max_inline at 4096
[  436.315251][ T7845] BTRFS info (device loop5): using free space tree
[  436.321797][ T7845] BTRFS info (device loop5): has skinny extents
[  438.631931][ T7845] BTRFS error (device loop5): open_ctree failed: -12
[  438.749387][ T7779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (7779)
[  439.458493][ T7900] loop5: detected capacity change from 0 to 32768
[  439.576603][ T7900] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.714 (7900)
[  439.598832][ T7900] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  439.608090][ T7900] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  439.617558][ T7900] BTRFS info (device loop5): use zstd compression, level 3
[  439.624826][ T7900] BTRFS info (device loop5): force clearing of disk cache
[  439.631965][ T7900] BTRFS info (device loop5): enabling disk space caching
[  439.639291][ T7900] BTRFS info (device loop5): disk space caching is enabled
[  439.647261][ T7900] BTRFS info (device loop5): has skinny extents
[  439.760167][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  439.766534][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  439.905562][ T7900] BTRFS info (device loop5): enabling ssd optimizations
[  439.918194][ T7900] BTRFS info (device loop5): clearing free space tree
[  439.925309][ T7900] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  439.935037][ T7900] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  440.508838][ T7925] FAULT_INJECTION: forcing a failure.
[  440.508838][ T7925] name failslab, interval 1, probability 0, space 0, times 0
[  440.583067][ T7925] CPU: 0 PID: 7925 Comm: syz.4.715 Not tainted syzkaller #0
[  440.590408][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  440.600485][ T7925] Call Trace:
[  440.603782][ T7925]  <TASK>
[  440.606733][ T7925]  dump_stack_lvl+0x188/0x250
[  440.611445][ T7925]  ? show_regs_print_info+0x20/0x20
[  440.616684][ T7925]  ? load_image+0x410/0x410
[  440.621218][ T7925]  ? __might_sleep+0xf0/0xf0
[  440.625828][ T7925]  ? __lock_acquire+0x7d40/0x7d40
[  440.630883][ T7925]  should_fail+0x383/0x4b0
[  440.635343][ T7925]  should_failslab+0x5/0x20
[  440.639867][ T7925]  slab_pre_alloc_hook+0x51/0xc0
[  440.644833][ T7925]  kmem_cache_alloc_trace+0x47/0x290
[  440.650154][ T7925]  ? legacy_init_fs_context+0x4d/0xb0
[  440.655556][ T7925]  ? __raw_spin_lock_init+0x41/0x100
[  440.660882][ T7925]  legacy_init_fs_context+0x4d/0xb0
[  440.666125][ T7925]  alloc_fs_context+0x628/0x7d0
[  440.671027][ T7925]  __se_sys_fsopen+0x111/0x320
[  440.675816][ T7925]  do_syscall_64+0x4c/0xa0
[  440.680253][ T7925]  ? clear_bhb_loop+0x30/0x80
[  440.684951][ T7925]  ? clear_bhb_loop+0x30/0x80
[  440.689655][ T7925]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  440.695571][ T7925] RIP: 0033:0x7f2b25757b19
[  440.700004][ T7925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.719763][ T7925] RSP: 002b:00007f2b239ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  440.728206][ T7925] RAX: ffffffffffffffda RBX: 00007f2b259ddfa0 RCX: 00007f2b25757b19
[  440.736202][ T7925] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000440
[  440.744201][ T7925] RBP: 00007f2b257efb70 R08: 0000000000000000 R09: 0000000000000000
[  440.752212][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  440.760210][ T7925] R13: 00007f2b259de038 R14: 00007f2b259ddfa0 R15: 00007ffd76521198
[  440.768270][ T7925]  </TASK>
[  441.143494][ T7779] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop5 scanned by udevd (7779)
[  443.085124][ T7941] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  443.094447][ T7941] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  443.103648][ T7941] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  443.114066][ T7941] Error parsing options; rc = [-22]
[  443.342376][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.723'.
[  443.767978][ T7949] loop4: detected capacity change from 0 to 32768
[  444.242468][ T7963] loop6: detected capacity change from 0 to 32768
[  445.071957][ T7975] loop1: detected capacity change from 0 to 32768
[  450.618087][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.737'.
[  453.255703][ T8031] loop6: detected capacity change from 0 to 32768
[  454.162247][ T8041] loop4: detected capacity change from 0 to 32768
[  461.994515][ T8084] loop5: detected capacity change from 0 to 32768
[  462.273437][ T8084] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  462.282292][ T8084] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  462.291787][ T8084] BTRFS info (device loop5): use zstd compression, level 3
[  462.299078][ T8084] BTRFS info (device loop5): force clearing of disk cache
[  462.306241][ T8084] BTRFS info (device loop5): enabling disk space caching
[  462.313387][ T8084] BTRFS info (device loop5): disk space caching is enabled
[  462.320631][ T8084] BTRFS info (device loop5): has skinny extents
[  463.427767][ T8093] loop3: detected capacity change from 0 to 1024
[  463.506462][ T8093] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  463.514040][ T8093] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  465.867403][ T8093] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3.
[  466.117863][ T8084] BTRFS error (device loop5): open_ctree failed: -12
[  469.517234][ T8149] netlink: 40 bytes leftover after parsing attributes in process `syz.5.766'.
[  473.569528][ T8178] loop1: detected capacity change from 0 to 1024
[  473.595170][ T8178] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  473.602867][ T8178] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  474.919742][ T8178] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  474.941284][ T8178] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  474.971682][ T8178] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.772: bg 0: block 112: padding at end of block bitmap is not set
[  474.990863][ T8178] EXT4-fs (loop1): Remounting filesystem read-only
[  477.333114][ T8212] loop1: detected capacity change from 0 to 32768
[  477.393016][ T8212] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.778 (8212)
[  478.143371][ T8212] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  478.152371][ T8212] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  478.161835][ T8212] BTRFS info (device loop1): use zstd compression, level 3
[  478.169161][ T8212] BTRFS info (device loop1): force clearing of disk cache
[  478.176359][ T8212] BTRFS info (device loop1): enabling disk space caching
[  478.183512][ T8212] BTRFS info (device loop1): disk space caching is enabled
[  478.191101][ T8212] BTRFS info (device loop1): has skinny extents
[  478.351655][ T8212] BTRFS info (device loop1): enabling ssd optimizations
[  478.362503][ T8212] BTRFS info (device loop1): clearing free space tree
[  478.369589][ T8212] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  478.379326][ T8212] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  480.122725][ T8254] loop3: detected capacity change from 0 to 1024
[  480.152871][ T7939] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  480.187230][ T8254] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  480.195097][ T8254] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  480.340045][ T8254] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  480.362133][ T8254] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.389011][ T8253] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.784: bg 0: block 112: padding at end of block bitmap is not set
[  480.405117][ T8253] EXT4-fs (loop3): Remounting filesystem read-only
[  480.779387][ T7939] usb 6-1: Using ep0 maxpacket: 8
[  481.089619][ T7939] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  481.098098][ T7939] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  481.107900][ T7939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  481.118104][ T7939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  481.128143][ T7939] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  481.141860][ T7939] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  481.170259][ T7939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.013789][ T7939] usb 6-1: can't set config #16, error -71
[  482.020866][ T7939] usb 6-1: USB disconnect, device number 12
[  485.809156][ T8302] loop1: detected capacity change from 0 to 32768
[  485.847891][ T8302] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.795 (8302)
[  486.046231][ T8302] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  486.055099][ T8302] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  486.064586][ T8302] BTRFS info (device loop1): use zstd compression, level 3
[  486.071809][ T8302] BTRFS info (device loop1): force clearing of disk cache
[  486.078984][ T8302] BTRFS info (device loop1): enabling disk space caching
[  486.086060][ T8302] BTRFS info (device loop1): disk space caching is enabled
[  486.093882][ T8302] BTRFS info (device loop1): has skinny extents
[  488.169988][ T8302] BTRFS info (device loop1): enabling ssd optimizations
[  488.182611][ T8302] BTRFS info (device loop1): clearing free space tree
[  488.190552][ T8302] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  488.200584][ T8302] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  489.774543][ T7976] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop1 scanned by udevd (7976)
[  489.918739][ T4497] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  490.282844][ T4497] usb 4-1: Using ep0 maxpacket: 8
[  491.112840][ T4497] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  491.121076][ T4497] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  491.142840][ T4497] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  491.152676][ T4497] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  491.165770][ T4497] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  491.180081][ T4497] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  491.206176][ T8367] jffs2: notice: (8367) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  491.225443][ T4497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.523187][ T4497] usb 4-1: usb_control_msg returned -32
[  491.529156][ T4497] usbtmc 4-1:16.0: can't read capabilities
[  492.554344][ T4497] usb 4-1: USB disconnect, device number 15
[  492.819119][ T8379] loop4: detected capacity change from 0 to 1024
[  494.469882][ T8379] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  494.477599][ T8379] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  495.678206][ T8379] EXT4-fs: error -4 creating inode table initialization thread
[  495.708507][ T8379] EXT4-fs (loop4): mount failed
[  498.854651][ T8405] MTRR 1 not used
[  501.329568][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  501.335932][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  503.597324][ T8442] loop5: detected capacity change from 0 to 1024
[  504.962317][ T8442] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  504.969838][ T8442] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  505.092008][ T8442] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  505.123287][ T8442] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  505.152506][ T8442] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.827: bg 0: block 112: padding at end of block bitmap is not set
[  505.168205][ T8442] EXT4-fs (loop5): Remounting filesystem read-only
[  507.472980][ T8471] MTRR 1 not used
[  520.894958][ T8559] loop6: detected capacity change from 0 to 1024
[  520.972495][ T8559] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  520.980018][ T8559] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  521.142085][ T8559] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  521.163593][ T8559] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  521.189293][ T8559] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.854: bg 0: block 112: padding at end of block bitmap is not set
[  521.204996][ T8559] EXT4-fs (loop6): Remounting filesystem read-only
[  521.798357][ T8565] jffs2: notice: (8565) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  527.984502][ T8616] loop6: detected capacity change from 0 to 1024
[  528.421069][ T8616] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  528.428727][ T8616] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  528.537730][ T8616] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  528.560461][ T8616] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  528.590698][ T8616] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.870: bg 0: block 112: padding at end of block bitmap is not set
[  528.606508][ T8616] EXT4-fs (loop6): Remounting filesystem read-only
[  528.614021][ T8616] EXT4-fs error (device loop6): ext4_xattr_block_set:2199: inode #12: comm syz.6.870: bad block 0
[  528.626240][ T8616] EXT4-fs (loop6): Remounting filesystem read-only
[  530.317253][ T8632] MTRR 1 not used
[  533.956713][ T8664] loop6: detected capacity change from 0 to 1024
[  533.985611][ T8664] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  533.993169][ T8664] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  534.094607][ T8664] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  534.115861][ T8664] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  534.141314][ T8664] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.883: bg 0: block 112: padding at end of block bitmap is not set
[  534.157891][ T8664] EXT4-fs (loop6): Remounting filesystem read-only
[  535.347916][ T8677] MTRR 1 not used
[  543.466714][ T8728] MTRR 1 not used
[  545.345356][ T8746] jffs2: notice: (8746) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  549.694433][ T8784] MTRR 1 not used
[  556.334930][ T8836] MTRR 1 not used
[  558.859343][ T8854] jffs2: notice: (8854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  559.590432][ T4199] Bluetooth: hci0: unexpected event for opcode 0x2003
[  560.617847][ T8869] loop3: detected capacity change from 0 to 1024
[  560.681463][ T8869] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  560.689067][ T8869] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  560.874650][ T8869] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  560.895877][ T8869] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  560.924052][ T8869] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.935: bg 0: block 112: padding at end of block bitmap is not set
[  560.939536][ T8869] EXT4-fs (loop3): Remounting filesystem read-only
[  560.947378][ T8869] EXT4-fs error (device loop3): ext4_xattr_block_set:2199: inode #12: comm syz.3.935: bad block 0
[  560.960893][ T8869] EXT4-fs (loop3): Remounting filesystem read-only
[  562.615151][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  562.621490][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  563.236179][ T8886] MTRR 1 not used
[  571.143421][ T8944] MTRR 1 not used
[  607.588959][ T9192] loop5: detected capacity change from 0 to 1024
[  607.651185][ T9192] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  607.658780][ T9192] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  607.761103][ T9192] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  607.782422][ T9192] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  607.814679][ T9192] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1019: bg 0: block 112: padding at end of block bitmap is not set
[  607.830678][ T9192] EXT4-fs (loop5): Remounting filesystem read-only
[  607.838598][ T9192] EXT4-fs error (device loop5): ext4_xattr_block_set:2199: inode #12: comm syz.5.1019: bad block 0
[  607.851426][ T9192] EXT4-fs (loop5): Remounting filesystem read-only
[  614.142910][ T9245] tmpfs: Unknown parameter 'casefold'
[  615.305659][ T9254] loop4: detected capacity change from 0 to 256
[  615.664932][ T9254] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9f0f4494, utbl_chksum : 0xe619d30d)
[  615.732082][ T9267] loop5: detected capacity change from 0 to 256
[  615.817936][ T9267] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  615.885250][   T26] audit: type=1800 audit(1793788244.730:6): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1040" name="file1" dev="loop5" ino=1048644 res=0 errno=0
[  616.576597][ T9278] MTRR 1 not used
[  617.992439][ T9269] loop1: detected capacity change from 0 to 32768
[  618.151642][ T9269] XFS (loop1): Mounting V5 Filesystem
[  618.290581][ T9269] XFS (loop1): Ending clean mount
[  618.320454][ T9295] loop3: detected capacity change from 0 to 512
[  618.413032][ T9295] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  618.484949][ T9295] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1048: invalid indirect mapped block 256 (level 1)
[  618.572365][ T9295] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1048: invalid indirect mapped block 2683928664 (level 1)
[  618.629485][ T9295] EXT4-fs (loop3): 1 truncate cleaned up
[  618.645617][ T9295] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  618.702122][ T4191] XFS (loop1): Unmounting Filesystem
[  619.866550][ T9295] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.1048: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  622.510958][ T9332] loop3: detected capacity change from 0 to 1024
[  623.992611][ T9332] EXT4-fs (loop3): Ignoring removed bh option
[  624.198650][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  624.205199][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  624.220676][ T9336] loop5: detected capacity change from 0 to 764
[  624.995085][ T9332] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3.
[  625.269071][ T9336] loop5: detected capacity change from 0 to 2048
[  625.308263][ T9336] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  625.319327][ T9336] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  625.394449][ T9349] loop6: detected capacity change from 0 to 512
[  625.414555][ T9349] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  625.444285][ T9349] EXT4-fs error (device loop6): ext4_orphan_get:1436: comm syz.6.1062: bad orphan inode 131083
[  625.617557][ T9349] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.
[  625.944329][ T9365] xt_CT: You must specify a L4 protocol and not use inversions on it
[  628.106937][ T9386] device syzkaller0 entered promiscuous mode
[  629.658717][ T9386] tipc: Started in network mode
[  629.673642][ T9386] tipc: Node identity aecec817779b, cluster identity 4711
[  630.923095][ T9386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.084376][ T9385] tipc: Resetting bearer <eth:syzkaller0>
[  631.181826][ T9385] tipc: Disabling bearer <eth:syzkaller0>
[  634.684237][ T9421] loop5: detected capacity change from 0 to 1024
[  635.101488][ T9421] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  635.108980][ T9421] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  636.149014][ T9421] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  636.170273][ T9421] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  636.197273][ T9421] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1076: bg 0: block 112: padding at end of block bitmap is not set
[  636.214903][ T9421] EXT4-fs (loop5): Remounting filesystem read-only
[  636.222435][ T9421] EXT4-fs error (device loop5): ext4_xattr_block_set:2199: inode #12: comm syz.5.1076: bad block 0
[  636.235219][ T9421] EXT4-fs (loop5): Remounting filesystem read-only
[  638.329073][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1083'.
[  641.019577][ T9465] loop4: detected capacity change from 0 to 8
[  642.311664][ T9463] md/raid1:md1: active with 1 out of 2 mirrors
[  642.353902][ T9463] md1: detected capacity change from 0 to 1024
[  642.524854][ T9477] md1: detected capacity change from 1024 to 0
[  642.572816][ T9477] md: md1 stopped.
[  643.927282][ T9496] loop3: detected capacity change from 0 to 1024
[  644.092233][ T9496] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  644.099895][ T9496] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  644.696369][ T9496] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  644.717705][ T9496] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  644.758588][ T9496] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1093: bg 0: block 112: padding at end of block bitmap is not set
[  644.793465][ T9496] EXT4-fs (loop3): Remounting filesystem read-only
[  645.017340][ T9511] loop1: detected capacity change from 0 to 1024
[  645.268836][ T9518] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  645.382581][   T26] audit: type=1800 audit(1793788274.220:7): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1097" name="file1" dev="loop1" ino=20 res=0 errno=0
[  645.801861][ T9522] loop6: detected capacity change from 0 to 2048
[  646.705574][ T9522] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,. Quota mode: none.
[  646.862818][ T9522] EXT4-fs (loop6): shut down requested (0)
[  648.476060][ T9552] loop6: detected capacity change from 0 to 16
[  648.591235][ T9552] erofs: (device loop6): mounted with root inode @ nid 36.
[  648.775172][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1110'.
[  649.340616][ T9568] loop4: detected capacity change from 0 to 16
[  649.550612][ T9568] erofs: (device loop4): mounted with root inode @ nid 36.
[  652.887721][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'.
[  654.928912][ T9627] loop3: detected capacity change from 0 to 1024
[  654.940046][ T9624] serio: Serial port ptm0
[  654.999010][ T9625] input: syz0 as /devices/virtual/input/input7
[  655.095909][ T9624] serio: Serial port ptm0
[  655.152375][ T9627] EXT4-fs (loop3): Ignoring removed bh option
[  655.413735][ T9627] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,nodioread_nolock,max_batch_time=0x00000000000036b6,nolazytime,journal_ioprio=0x0000000000000000,lazytime,errors=remount-ro,stripe=0x0000000000000006,bh,init_itable,. Quota mode: none.
[  660.773149][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'.
[  661.642240][ T9673] loop3: detected capacity change from 0 to 512
[  665.234696][ T9706] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  666.443087][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1154'.
[  667.523893][ T9728] jffs2: notice: (9728) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  670.754001][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'.
[  675.772201][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1181'.
[  676.296190][ T9797] loop1: detected capacity change from 0 to 40427
[  676.578375][ T9797] F2FS-fs (loop1): invalid crc value
[  676.588240][ T9797] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12)
[  677.587880][ T9832] loop5: detected capacity change from 0 to 1764
[  678.755835][ T9842] capability: warning: `syz.4.1190' uses deprecated v2 capabilities in a way that may be insecure
[  678.860799][ T9844] FAULT_INJECTION: forcing a failure.
[  678.860799][ T9844] name failslab, interval 1, probability 5, space 0, times 10000
[  678.897653][ T9844] CPU: 0 PID: 9844 Comm: syz.1.1189 Not tainted syzkaller #0
[  678.905198][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  678.915301][ T9844] Call Trace:
[  678.918627][ T9844]  <TASK>
[  678.921579][ T9844]  dump_stack_lvl+0x188/0x250
[  678.926375][ T9844]  ? show_regs_print_info+0x20/0x20
[  678.931622][ T9844]  ? load_image+0x410/0x410
[  678.936213][ T9844]  ? prandom_u32+0x217/0x250
[  678.940904][ T9844]  should_fail+0x383/0x4b0
[  678.945443][ T9844]  should_failslab+0x5/0x20
[  678.950036][ T9844]  slab_pre_alloc_hook+0x51/0xc0
[  678.955035][ T9844]  ? __kernfs_new_node+0xe3/0x6b0
[  678.960157][ T9844]  kmem_cache_alloc+0x3d/0x280
[  678.964961][ T9844]  __kernfs_new_node+0xe3/0x6b0
[  678.969842][ T9844]  ? __lock_acquire+0x7d40/0x7d40
[  678.974966][ T9844]  ? kernfs_new_node+0x250/0x250
[  678.979960][ T9844]  ? kernfs_activate+0x1eb/0x210
[  678.984937][ T9844]  kernfs_new_node+0x148/0x250
[  678.989738][ T9844]  __kernfs_create_file+0x47/0x2e0
[  678.994874][ T9844]  sysfs_add_file_mode_ns+0x2d2/0x390
[  679.000275][ T9844]  internal_create_group+0x492/0xd00
[  679.005599][ T9844]  ? kobject_add+0x230/0x230
[  679.010269][ T9844]  ? sysfs_create_group+0x20/0x20
[  679.015327][ T9844]  sysfs_slab_add+0x16e/0x2a0
[  679.020067][ T9844]  __kmem_cache_create+0x51f/0x6c0
[  679.025300][ T9844]  kmem_cache_create_usercopy+0x186/0x310
[  679.031055][ T9844]  kmem_cache_create+0xf/0x20
[  679.035779][ T9844]  bioset_init+0x31c/0x6d0
[  679.040303][ T9844]  dm_alloc_md_mempools+0x19f/0x2c0
[  679.045565][ T9844]  dm_table_complete+0x1c74/0x2210
[  679.050731][ T9844]  ? dm_table_add_target+0x686/0xba0
[  679.056039][ T9844]  ? dm_destroy_keyslot_manager+0x30/0x30
[  679.061792][ T9844]  table_load+0x375/0x760
[  679.066162][ T9844]  ? dev_wait+0x330/0x330
[  679.070524][ T9844]  ? __might_fault+0xb3/0x110
[  679.075285][ T9844]  ? _copy_from_user+0x111/0x170
[  679.080325][ T9844]  dm_ctl_ioctl+0x947/0xd00
[  679.084870][ T9844]  ? dev_wait+0x330/0x330
[  679.089220][ T9844]  ? dm_poll+0x120/0x120
[  679.093530][ T9844]  ? bpf_lsm_file_ioctl+0x5/0x10
[  679.098558][ T9844]  ? security_file_ioctl+0x7c/0xa0
[  679.103772][ T9844]  ? dm_poll+0x120/0x120
[  679.108045][ T9844]  __se_sys_ioctl+0xfa/0x170
[  679.112711][ T9844]  do_syscall_64+0x4c/0xa0
[  679.117203][ T9844]  ? clear_bhb_loop+0x30/0x80
[  679.117443][ T4389] iso9660: Corrupted directory entry in block 2 of inode 1920
[  679.121968][ T9844]  ? clear_bhb_loop+0x30/0x80
[  679.122051][ T9844]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  679.140461][ T9844] RIP: 0033:0x7ff49cf10b19
[  679.144928][ T9844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  679.164566][ T9844] RSP: 002b:00007ff49b167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  679.173000][ T9844] RAX: ffffffffffffffda RBX: 00007ff49d196fa0 RCX: 00007ff49cf10b19
[  679.180995][ T9844] RDX: 0000200000002680 RSI: 00000000c138fd09 RDI: 0000000000000003
[  679.188996][ T9844] RBP: 00007ff49cfa8b70 R08: 0000000000000000 R09: 0000000000000000
[  679.189836][ T4389] iso9660: Corrupted directory entry in block 2 of inode 1920
[  679.196993][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  679.197011][ T9844] R13: 00007ff49d197038 R14: 00007ff49d196fa0 R15: 00007ffc3fecd3e8
[  679.197047][ T9844]  </TASK>
[  679.646198][ T9844] kmem_cache_create_usercopy(bio-304) failed with error -12
[  679.654931][ T9844] CPU: 0 PID: 9844 Comm: syz.1.1189 Not tainted syzkaller #0
[  679.662432][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  679.672504][ T9844] Call Trace:
[  679.675806][ T9844]  <TASK>
[  679.678756][ T9844]  dump_stack_lvl+0x188/0x250
[  679.683466][ T9844]  ? show_regs_print_info+0x20/0x20
[  679.688698][ T9844]  ? load_image+0x410/0x410
[  679.693238][ T9844]  ? kfree+0xef/0x2a0
[  679.697250][ T9844]  kmem_cache_create_usercopy+0x28d/0x310
[  679.702997][ T9844]  kmem_cache_create+0xf/0x20
[  679.707703][ T9844]  bioset_init+0x31c/0x6d0
[  679.712154][ T9844]  dm_alloc_md_mempools+0x19f/0x2c0
[  679.717400][ T9844]  dm_table_complete+0x1c74/0x2210
[  679.722556][ T9844]  ? dm_table_add_target+0x686/0xba0
[  679.727898][ T9844]  ? dm_destroy_keyslot_manager+0x30/0x30
[  679.733657][ T9844]  table_load+0x375/0x760
[  679.738017][ T9844]  ? dev_wait+0x330/0x330
[  679.742366][ T9844]  ? __might_fault+0xb3/0x110
[  679.747072][ T9844]  ? _copy_from_user+0x111/0x170
[  679.752038][ T9844]  dm_ctl_ioctl+0x947/0xd00
[  679.756573][ T9844]  ? dev_wait+0x330/0x330
[  679.760935][ T9844]  ? dm_poll+0x120/0x120
[  679.765252][ T9844]  ? bpf_lsm_file_ioctl+0x5/0x10
[  679.770217][ T9844]  ? security_file_ioctl+0x7c/0xa0
[  679.775358][ T9844]  ? dm_poll+0x120/0x120
[  679.779600][ T9844]  __se_sys_ioctl+0xfa/0x170
[  679.784200][ T9844]  do_syscall_64+0x4c/0xa0
[  679.788615][ T9844]  ? clear_bhb_loop+0x30/0x80
[  679.793298][ T9844]  ? clear_bhb_loop+0x30/0x80
[  679.797993][ T9844]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  679.803890][ T9844] RIP: 0033:0x7ff49cf10b19
[  679.808332][ T9844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  679.827962][ T9844] RSP: 002b:00007ff49b167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  679.836374][ T9844] RAX: ffffffffffffffda RBX: 00007ff49d196fa0 RCX: 00007ff49cf10b19
[  679.844358][ T9844] RDX: 0000200000002680 RSI: 00000000c138fd09 RDI: 0000000000000003
[  679.852347][ T9844] RBP: 00007ff49cfa8b70 R08: 0000000000000000 R09: 0000000000000000
[  679.860312][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  679.868284][ T9844] R13: 00007ff49d197038 R14: 00007ff49d196fa0 R15: 00007ffc3fecd3e8
[  679.876265][ T9844]  </TASK>
[  679.980700][ T9844] device-mapper: table: unable to allocate mempools
[  680.725720][ T4461] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.876828][ T4461] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.961353][ T4461] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.062022][ T4461] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.427308][ T4461] tipc: Left network mode
[  681.701792][ T9875] loop4: detected capacity change from 0 to 32768
[  681.716942][ T9878] rxe_eth0 speed is unknown, defaulting to 1000
[  681.890589][ T9875] JBD2: Ignoring recovery information on journal
[  682.021071][ T9875] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  682.518801][ T9900] tmpfs: Unknown parameter 'casefold'
[  683.324819][ T4189] ocfs2: Unmounting device (7,4) on (node local)
[  683.563019][ T4282] Bluetooth: hci1: command 0x0409 tx timeout
[  684.113554][ T9878] chnl_net:caif_netlink_parms(): no params data found
[  684.465154][ T9910] jffs2: notice: (9910) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  685.009948][ T9878] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.072716][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.114934][ T9878] device bridge_slave_0 entered promiscuous mode
[  685.159891][ T4461] device hsr_slave_0 left promiscuous mode
[  685.170612][ T4461] device hsr_slave_1 left promiscuous mode
[  685.178702][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  685.213865][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  685.400930][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  685.643515][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  685.652866][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  685.659681][ T8349] Bluetooth: hci1: command 0x041b tx timeout
[  686.218659][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  686.319912][ T4461] device bridge_slave_1 left promiscuous mode
[  686.362879][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.401146][ T4461] device bridge_slave_0 left promiscuous mode
[  686.419801][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.482256][ T4461] device veth1_macvtap left promiscuous mode
[  686.780211][ T9953] tmpfs: Unknown parameter 'casefold'
[  686.796478][ T4461] device veth0_macvtap left promiscuous mode
[  687.517478][ T9952] loop1: detected capacity change from 0 to 2048
[  687.582889][ T4461] device veth1_vlan left promiscuous mode
[  687.588751][ T4461] device veth0_vlan left promiscuous mode
[  687.669081][ T9952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  687.986820][ T4461] bond1 (unregistering): Released all slaves
[  688.282816][ T2304] Bluetooth: hci1: command 0x040f tx timeout
[  688.994498][ T4191] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[  689.015201][ T4191] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[  689.817915][ T4461] team0 (unregistering): Port device team_slave_1 removed
[  690.210947][ T4461] team0 (unregistering): Port device team_slave_0 removed
[  690.515670][ T2304] Bluetooth: hci1: command 0x0419 tx timeout
[  690.696528][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  690.878027][ T4461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  690.915265][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1221'.
[  692.260439][ T4461] bond0 (unregistering): Released all slaves
[  692.429715][ T9878] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.445589][ T9878] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.506107][ T9878] device bridge_slave_1 entered promiscuous mode
[  692.548464][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1221'.
[  692.665451][ T9878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  692.730943][ T9878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  692.849196][ T9878] team0: Port device team_slave_0 added
[  692.872242][ T9878] team0: Port device team_slave_1 added
[  692.902283][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  692.915021][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  692.950788][ T9878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  692.969539][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  692.981412][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  693.014669][ T9878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  693.196212][ T9878] device hsr_slave_0 entered promiscuous mode
[  693.268264][ T9878] device hsr_slave_1 entered promiscuous mode
[  694.407235][T10013] rxe_eth0 speed is unknown, defaulting to 1000
[  694.492492][ T9878] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  694.563615][ T9878] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  694.601437][T10019] MTRR 1 not used
[  694.605380][ T9878] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  694.649375][ T9878] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  694.682833][ T8349] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  694.968250][ T8349] usb 4-1: Using ep0 maxpacket: 8
[  695.084279][T10013] chnl_net:caif_netlink_parms(): no params data found
[  695.103921][ T8349] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  695.112259][ T8349] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  695.161740][ T9878] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.172793][ T8349] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  695.182558][ T8349] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  695.202740][ T8349] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  695.215964][ T8349] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  695.225529][ T8349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.260884][ T9878] 8021q: adding VLAN 0 to HW filter on device team0
[  695.274364][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  695.308844][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  695.473442][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  695.486784][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  695.502894][ T8349] usb 4-1: usb_control_msg returned -32
[  695.508736][ T8349] usbtmc 4-1:16.0: can't read capabilities
[  695.533816][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.540918][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state
[  695.618606][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  695.663531][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  695.682947][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.690106][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.733171][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  695.753781][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  695.762501][T10040] udc-core: couldn't find an available UDC or it's busy
[  695.782659][T10040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  695.807795][T10013] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.821815][T10013] bridge0: port 1(bridge_slave_0) entered disabled state
[  695.850782][T10013] device bridge_slave_0 entered promiscuous mode
[  695.888407][T10017] usbtmc 4-1:16.0: usb_control_msg returned -32
[  695.908816][T10040] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90
[  695.947021][    T7] usb 4-1: USB disconnect, device number 16
[  696.072086][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  696.092883][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  696.186854][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  696.305060][T10013] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.329929][T10013] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.372838][ T4364] Bluetooth: hci2: command 0x0409 tx timeout
[  696.456485][T10013] device bridge_slave_1 entered promiscuous mode
[  696.799445][T10013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  696.886354][T10013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  696.917359][T10013] team0: Port device team_slave_0 added
[  696.927894][T10013] team0: Port device team_slave_1 added
[  697.012002][T10013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  697.019317][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  697.046002][T10013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  697.066836][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  697.085565][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  697.538272][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  697.571739][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  697.601984][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  697.686805][T10013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  697.703499][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  697.785205][T10013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  697.824419][T10051] device bridge1 entered promiscuous mode
[  698.111155][T10059] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1234'.
[  698.156192][T10060] tmpfs: Unknown parameter 'casefold'
[  698.233113][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  698.321703][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  698.453430][ T4364] Bluetooth: hci2: command 0x041b tx timeout
[  698.480475][T10013] device hsr_slave_0 entered promiscuous mode
[  698.574686][T10013] device hsr_slave_1 entered promiscuous mode
[  698.734164][T10013] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  698.758851][T10013] Cannot create hsr debugfs directory
[  698.829749][ T9878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  699.368914][T10077] loop6: detected capacity change from 0 to 16
[  699.470038][T10077] erofs: (device loop6): mounted with root inode @ nid 36.
[  699.666447][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  699.749460][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  699.800177][ T9878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  699.836221][T10013] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  699.889868][T10013] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  699.943606][T10013] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  699.973856][T10013] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  700.782771][    T7] Bluetooth: hci2: command 0x040f tx timeout
[  701.103057][T10013] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.933847][ T4461] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.976259][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  701.993889][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  702.021437][T10013] 8021q: adding VLAN 0 to HW filter on device team0
[  702.210415][ T4461] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.944426][ T2304] Bluetooth: hci2: command 0x0419 tx timeout
[  702.954011][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  702.962577][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  704.130843][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.138098][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  704.429103][ T4461] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.468563][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  704.525482][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  704.545394][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  704.578347][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.585573][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state
[  704.630420][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  704.661131][ T4461] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.710794][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  704.751628][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  704.762055][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  704.772306][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  704.784814][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  704.794945][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  704.806193][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  704.847593][ T9878] device veth0_vlan entered promiscuous mode
[  704.866689][T10013] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  704.883195][T10013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  704.901320][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  704.910222][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  704.928746][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  704.941111][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  704.956910][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  704.968664][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  704.978417][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  704.987120][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  704.994895][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  705.003167][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  705.021740][ T9878] device veth1_vlan entered promiscuous mode
[  705.716422][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  705.787233][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  705.941997][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  705.982518][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  706.067962][ T9878] device veth0_macvtap entered promiscuous mode
[  706.275691][ T9878] device veth1_macvtap entered promiscuous mode
[  706.607016][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.709254][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.760196][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.842417][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.910486][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.981666][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.004449][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  707.810315][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  707.824503][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  707.843491][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  707.873133][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.884426][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.885605][T10151] md: md6 stopped.
[  707.942506][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.972432][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  708.002697][ T9878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  708.015826][T10155] MTRR 1 not used
[  708.031335][ T9878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  708.080553][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  708.110708][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  708.172928][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  708.180426][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  708.231791][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  708.596173][ T9878] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  708.607834][ T9878] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  708.616926][ T9878] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  708.628708][ T9878] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  708.641955][T10013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  708.699794][T10166] device-mapper: table: 248:2: crypt: Error allocating crypto tfm
[  708.709124][T10166] device-mapper: ioctl: error adding target to table
[  709.213341][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.221621][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.356325][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  709.478857][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.490764][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.562401][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  709.565424][T10190] jffs2: notice: (10190) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  709.765188][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1198'.
[  709.803147][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  709.817938][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  709.959192][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  709.999443][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  710.141795][T10013] device veth0_vlan entered promiscuous mode
[  710.157144][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  710.172359][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  710.219049][T10013] device veth1_vlan entered promiscuous mode
[  710.318211][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  710.355197][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  710.410159][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  710.460303][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  710.524035][T10013] device veth0_macvtap entered promiscuous mode
[  710.847629][T10013] device veth1_macvtap entered promiscuous mode
[  711.383093][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.608331][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  711.777866][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  711.956607][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  712.035954][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  712.092779][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  712.144990][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  712.221064][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  713.050629][T10013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  713.160027][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  713.227486][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  713.343873][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  713.353797][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  713.381214][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  713.419606][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  713.472660][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  713.507628][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  713.538023][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  713.566880][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  713.595049][T10013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  713.614803][T10013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  713.717780][T10235] jffs2: notice: (10235) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  713.750650][T10013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  713.845032][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  713.944797][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  714.165880][T10013] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  714.298641][T10013] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  714.445307][T10013] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  714.526146][T10013] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  714.761126][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.793163][ T4461] device hsr_slave_0 left promiscuous mode
[  714.811523][ T4461] device hsr_slave_1 left promiscuous mode
[  714.849352][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  714.883809][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.959173][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.061979][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  715.086690][T10248] loop3: detected capacity change from 0 to 128
[  715.132565][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.229022][T10248] EXT4-fs (loop3): Unrecognized mount option "appraise" or missing value
[  715.286047][ T4461] device bridge_slave_1 left promiscuous mode
[  715.361773][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.479084][ T4461] device bridge_slave_0 left promiscuous mode
[  715.602755][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1263'.
[  715.632387][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state
[  715.681796][ T4461] device veth1_macvtap left promiscuous mode
[  715.743046][ T4461] device veth0_macvtap left promiscuous mode
[  715.961729][ T4461] device veth1_vlan left promiscuous mode
[  715.993934][ T4461] device veth0_vlan left promiscuous mode
[  716.441231][T10263] md: md7 stopped.
[  716.461774][T10266] loop6: detected capacity change from 0 to 256
[  716.709274][T10266] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  716.809680][   T26] audit: type=1800 audit(1793788345.650:8): pid=10266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1265" name="file1" dev="loop6" ino=1048707 res=0 errno=0
[  717.675453][ T4461] team0 (unregistering): Port device team_slave_1 removed
[  717.712734][ T4461] team0 (unregistering): Port device team_slave_0 removed
[  717.740540][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  718.060384][ T4461] bond0 (unregistering): Released all slaves
[  718.117353][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  718.229064][ T1492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.243113][ T1492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.305710][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  718.581479][T10298] MTRR 1 not used
[  719.383335][T10305] tmpfs: Unknown parameter 'casefold'
[  720.565549][T10316] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  721.584376][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'.
[  722.332685][T10352] loop6: detected capacity change from 0 to 1024
[  722.349013][T10352] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  722.356783][T10352] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  722.495877][T10352] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback.
[  722.517127][T10352] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  722.542497][T10352] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1280: bg 0: block 112: padding at end of block bitmap is not set
[  722.557946][T10352] EXT4-fs (loop6): Remounting filesystem read-only
[  722.928726][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'.
[  722.952534][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'.
[  724.420792][T10376] 
[  724.423166][T10376] ======================================================
[  724.430200][T10376] WARNING: possible circular locking dependency detected
[  724.437293][T10376] syzkaller #0 Not tainted
[  724.441712][T10376] ------------------------------------------------------
[  724.448719][T10376] syz.8.1287/10376 is trying to acquire lock:
[  724.454772][T10376] ffffffff8d70fc48 (major_names_lock){+.+.}-{3:3}, at: blk_request_module+0x31/0x290
[  724.464301][T10376] 
[  724.464301][T10376] but task is already holding lock:
[  724.471657][T10376] ffff88802bd4c2c0 (&mddev->reconfig_mutex){+.+.}-{3:3}, at: new_dev_store+0x222/0x660
[  724.481310][T10376] 
[  724.481310][T10376] which lock already depends on the new lock.
[  724.481310][T10376] 
[  724.491813][T10376] 
[  724.491813][T10376] the existing dependency chain (in reverse order) is:
[  724.500815][T10376] 
[  724.500815][T10376] -> #4 (&mddev->reconfig_mutex){+.+.}-{3:3}:
[  724.509062][T10376]        __mutex_lock_common+0x1e5/0x2400
[  724.514796][T10376]        mutex_lock_interruptible_nested+0x17/0x20
[  724.521294][T10376]        new_dev_store+0x222/0x660
[  724.526430][T10376]        md_attr_store+0xdd/0x130
[  724.531534][T10376]        kernfs_fop_write_iter+0x3a8/0x500
[  724.537428][T10376]        vfs_write+0x748/0xd70
[  724.542246][T10376]        ksys_write+0x153/0x260
[  724.547087][T10376]        do_syscall_64+0x4c/0xa0
[  724.552021][T10376]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  724.558463][T10376] 
[  724.558463][T10376] -> #3 (kn->active#670){++++}-{0:0}:
[  724.566009][T10376]        __kernfs_remove+0x5da/0xcb0
[  724.571293][T10376]        kernfs_remove+0x1d/0x30
[  724.576222][T10376]        __kobject_del+0xe0/0x2e0
[  724.581239][T10376]        kobject_del+0x41/0x60
[  724.585992][T10376]        mddev_delayed_delete+0x27/0x30
[  724.591561][T10376]        process_one_work+0x867/0xff0
[  724.597004][T10376]        worker_thread+0xad7/0x12a0
[  724.602192][T10376]        kthread+0x42e/0x520
[  724.606811][T10376]        ret_from_fork+0x1f/0x30
[  724.611832][T10376] 
[  724.611832][T10376] -> #2 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}:
[  724.621200][T10376]        process_one_work+0x7ba/0xff0
[  724.626565][T10376]        worker_thread+0xad7/0x12a0
[  724.631778][T10376]        kthread+0x42e/0x520
[  724.636377][T10376]        ret_from_fork+0x1f/0x30
[  724.641334][T10376] 
[  724.641334][T10376] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}:
[  724.649626][T10376]        flush_workqueue+0x16a/0x1390
[  724.654992][T10376]        md_alloc+0x2e/0xc10
[  724.659570][T10376]        blk_request_module+0x26e/0x290
[  724.665118][T10376]        blkdev_get_no_open+0x38/0x1d0
[  724.670597][T10376]        blkdev_get_by_dev+0x77/0xa50
[  724.675967][T10376]        blkdev_open+0x128/0x2c0
[  724.680896][T10376]        do_dentry_open+0x7f7/0xf90
[  724.686081][T10376]        path_openat+0x2718/0x2fb0
[  724.691186][T10376]        do_filp_open+0x1df/0x400
[  724.696203][T10376]        do_sys_openat2+0x14b/0x500
[  724.701388][T10376]        __x64_sys_openat+0x135/0x160
[  724.706762][T10376]        do_syscall_64+0x4c/0xa0
[  724.711731][T10376]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  724.718138][T10376] 
[  724.718138][T10376] -> #0 (major_names_lock){+.+.}-{3:3}:
[  724.725857][T10376]        __lock_acquire+0x38f7/0x7d40
[  724.731251][T10376]        lock_acquire+0x19f/0x400
[  724.736266][T10376]        __mutex_lock_common+0x1e5/0x2400
[  724.741977][T10376]        mutex_lock_nested+0x17/0x20
[  724.747251][T10376]        blk_request_module+0x31/0x290
[  724.752701][T10376]        blkdev_get_no_open+0x38/0x1d0
[  724.758150][T10376]        blkdev_get_by_dev+0x77/0xa50
[  724.763516][T10376]        md_import_device+0x3e2/0x810
[  724.768888][T10376]        new_dev_store+0x38d/0x660
[  724.774110][T10376]        md_attr_store+0xdd/0x130
[  724.779134][T10376]        kernfs_fop_write_iter+0x3a8/0x500
[  724.785030][T10376]        vfs_write+0x748/0xd70
[  724.789799][T10376]        ksys_write+0x153/0x260
[  724.794645][T10376]        do_syscall_64+0x4c/0xa0
[  724.799573][T10376]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  724.805999][T10376] 
[  724.805999][T10376] other info that might help us debug this:
[  724.805999][T10376] 
[  724.816227][T10376] Chain exists of:
[  724.816227][T10376]   major_names_lock --> kn->active#670 --> &mddev->reconfig_mutex
[  724.816227][T10376] 
[  724.829876][T10376]  Possible unsafe locking scenario:
[  724.829876][T10376] 
[  724.837323][T10376]        CPU0                    CPU1
[  724.842681][T10376]        ----                    ----
[  724.848045][T10376]   lock(&mddev->reconfig_mutex);
[  724.853059][T10376]                                lock(kn->active#670);
[  724.859988][T10376]                                lock(&mddev->reconfig_mutex);
[  724.867539][T10376]   lock(major_names_lock);
[  724.872031][T10376] 
[  724.872031][T10376]  *** DEADLOCK ***
[  724.872031][T10376] 
[  724.880164][T10376] 5 locks held by syz.8.1287/10376:
[  724.885378][T10376]  #0: ffff8880782299f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370
[  724.894614][T10376]  #1: ffff88807e99e460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70
[  724.903482][T10376]  #2: ffff88805fd5cc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500
[  724.913216][T10376]  #3: ffff8880600fb0f0 (kn->active#670){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500
[  724.923425][T10376]  #4: ffff88802bd4c2c0 (&mddev->reconfig_mutex){+.+.}-{3:3}, at: new_dev_store+0x222/0x660
[  724.934112][T10376] 
[  724.934112][T10376] stack backtrace:
[  724.939986][T10376] CPU: 1 PID: 10376 Comm: syz.8.1287 Not tainted syzkaller #0
[  724.947433][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  724.957479][T10376] Call Trace:
[  724.960752][T10376]  <TASK>
[  724.963682][T10376]  dump_stack_lvl+0x188/0x250
[  724.968365][T10376]  ? load_image+0x410/0x410
[  724.972873][T10376]  ? show_regs_print_info+0x20/0x20
[  724.978118][T10376]  ? print_circular_bug+0x12b/0x1a0
[  724.983319][T10376]  check_noncircular+0x2f8/0x400
[  724.988270][T10376]  ? print_deadlock_bug+0x5d0/0x5d0
[  724.993459][T10376]  ? lockdep_lock+0xf1/0x1f0
[  724.998045][T10376]  ? is_bpf_text_address+0x254/0x270
[  725.003383][T10376]  ? mark_lock+0x94/0x320
[  725.007702][T10376]  ? _find_first_zero_bit+0xd1/0xf0
[  725.012932][T10376]  __lock_acquire+0x38f7/0x7d40
[  725.017898][T10376]  ? arch_stack_walk+0xf2/0x140
[  725.022770][T10376]  ? stack_trace_snprint+0xe0/0xe0
[  725.027957][T10376]  ? verify_lock_unused+0x140/0x140
[  725.033245][T10376]  ? mark_lock+0x94/0x320
[  725.037593][T10376]  ? __lock_acquire+0x13b3/0x7d40
[  725.042629][T10376]  ? __lock_acquire+0x12df/0x7d40
[  725.047675][T10376]  lock_acquire+0x19f/0x400
[  725.052172][T10376]  ? blk_request_module+0x31/0x290
[  725.057278][T10376]  ? __might_sleep+0xf0/0xf0
[  725.061914][T10376]  ? get_page_from_freelist+0x24f6/0x2670
[  725.067640][T10376]  ? read_lock_is_recursive+0x10/0x10
[  725.073004][T10376]  ? verify_lock_unused+0x140/0x140
[  725.078232][T10376]  __mutex_lock_common+0x1e5/0x2400
[  725.083434][T10376]  ? blk_request_module+0x31/0x290
[  725.088538][T10376]  ? blk_request_module+0x31/0x290
[  725.093749][T10376]  ? ilookup+0x9c/0x220
[  725.097898][T10376]  ? mutex_lock_io_nested+0x60/0x60
[  725.103098][T10376]  ? __rwlock_init+0x140/0x140
[  725.107862][T10376]  ? do_raw_spin_unlock+0x11d/0x230
[  725.113094][T10376]  mutex_lock_nested+0x17/0x20
[  725.117848][T10376]  blk_request_module+0x31/0x290
[  725.122866][T10376]  blkdev_get_no_open+0x38/0x1d0
[  725.127796][T10376]  blkdev_get_by_dev+0x77/0xa50
[  725.132727][T10376]  ? alloc_pages+0x452/0x560
[  725.137339][T10376]  md_import_device+0x3e2/0x810
[  725.142188][T10376]  ? md_add_new_disk+0x1960/0x1960
[  725.147315][T10376]  new_dev_store+0x38d/0x660
[  725.151919][T10376]  ? __lock_acquire+0x7d40/0x7d40
[  725.156942][T10376]  ? metadata_store+0x9b0/0x9b0
[  725.161786][T10376]  ? do_raw_spin_unlock+0x11d/0x230
[  725.166994][T10376]  md_attr_store+0xdd/0x130
[  725.171491][T10376]  ? sysfs_kf_read+0x350/0x350
[  725.176247][T10376]  kernfs_fop_write_iter+0x3a8/0x500
[  725.181532][T10376]  vfs_write+0x748/0xd70
[  725.185783][T10376]  ? file_end_write+0x250/0x250
[  725.190632][T10376]  ? mutex_lock_nested+0x17/0x20
[  725.195566][T10376]  ? __fdget_pos+0x2bf/0x370
[  725.200167][T10376]  ? ksys_write+0x70/0x260
[  725.204576][T10376]  ksys_write+0x153/0x260
[  725.208899][T10376]  ? __ia32_sys_read+0x80/0x80
[  725.213702][T10376]  ? lockdep_hardirqs_on+0x94/0x140
[  725.218890][T10376]  do_syscall_64+0x4c/0xa0
[  725.223295][T10376]  ? clear_bhb_loop+0x30/0x80
[  725.228171][T10376]  ? clear_bhb_loop+0x30/0x80
[  725.232869][T10376]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  725.238781][T10376] RIP: 0033:0x7f3cad6e4b19
[  725.243190][T10376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  725.262804][T10376] RSP: 002b:00007f3cab93b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  725.271401][T10376] RAX: ffffffffffffffda RBX: 00007f3cad96afa0 RCX: 00007f3cad6e4b19
[  725.279371][T10376] RDX: 0000000000000016 RSI: 00002000000002c0 RDI: 0000000000000007
[  725.287428][T10376] RBP: 00007f3cad77cb70 R08: 0000000000000000 R09: 0000000000000000
[  725.295396][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  725.303355][T10376] R13: 00007f3cad96b038 R14: 00007f3cad96afa0 R15: 00007ffdee7b5f98
[  725.311342][T10376]  </TASK>
[  725.410989][T10381] loop7: detected capacity change from 0 to 512
[  725.458445][T10381] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  725.485547][T10376] block device autoloading is deprecated and will be removed.
[  725.512389][T10381] EXT4-fs error (device loop7): ext4_orphan_get:1436: comm syz.7.1286: bad orphan inode 131083
[  725.563452][T10381] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.