last executing test programs:

22m48.606799813s ago: executing program 32 (id=71):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000000))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x80, 0x0, &(0x7f00000001c0)=[@register_looper, @free_buffer, @decrefs, @increfs_done={0x40106308, 0x2}, @increfs, @release={0x40046306, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x2, 0x0, 0x2d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x1000, 0x0, &(0x7f0000000540)="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"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000240)=@arm64={0x7f, 0x5c, 0x6})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"])

22m45.791320227s ago: executing program 33 (id=42):
socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$eJzs3E1sVNUeAPD/nc70Ax6PPh6PJ4hJEY2NxhYKCgs3GE1caGLEhS6bthCkUENrIoRISQwuDYl749ItC7fqzrgycYsLFyaGhBgSA7gac2funU7no5/TjjC/XzKdc+49955z7rnn3jP3zDSAnjWS/kki/hURtyNidzW6PMFI9e3BvatTD+9dnYrFcvn0H0kl3f00nilk7zuzfY4WIgqfJg07rJq/fOX85OzszKUsPr5w4cPx+ctXXjx3YfLszNmZixMnTx4/dvTEyxMvrb9SLfJL63X/wCdzB/e/8f7Nt6aK+fLB7L2+Hp0yEiP1RblVX6xnO51Zl+2qCyfFLhaEdUnbLW2uUqX/746+0HjQK8rlcnmg/erFcqPrTUuAR1YSbVYMZpcH4DGV3+jTz7/5q3b3H9ry4UfX3T1V/QCU1vtB9qquKdaeZ5QaPt920khEvLf415fpK1Z6DvHrFhUAAOg5353KR4KN479C7KtL9+9sDmU4Iv4TEXsi4r8RsTci/hdRSfv/iHiiMYMkorxC/nsb4s3jn8KdzdRvNen475Vsbmv5+C8f/cVwXxbblX4eri6bOZIdk9EoDZw5NztzdIU8vn/t58/brasf/6WvNP98LJiV406x4QHd9OTC5IYr3ODu9YgDxcb6J8W04fKZgCQi9kfEgXXsd7gufO75rw/WIqXl6Vavf0W5xZRedGKqovxVxHPV9l+MZe2/lGOy8vzk+GDMzhwZT8+CIy3z+PGnG2+3y3/V+n/zW+Mmr5/49vRmq12Ttv+OuvM/8vnbpfoPJxFJbb52fv153Pjls8p+Rw43r9vo+d+fvFsJ92fLPp5cWLh0NKI/ebN5+cTStnk8T5/Wf/Rw6/6/J9smPRJPRkR6Ej9VdwKnZT8UEU9HRIuq1fzw6jMftFu3xvN/y6T1n25x/bu2vP2X5us3EOg7f+j2wzYXj7W1//FKaDRb0vr6lyy7RKy1gB05iAAAAPAPV4jKd/8LY7VwoTA2Vn0GtDd2FGbn5hdeODP30cXp6m8EhqNUyJ90VZ8Hl5L8+edwXXyiIX4se278Rd9QJT42NTc73e3KQ4/bWenzSVP/T/3e1+3SAVvOT36gd63W//fd3KaCANvO/R96V13/X2yTZNE3ZeDx5P4PvatV/7+2gW2AR0tZX4aepv9D7yrGO7VwoaslAbab+z/0pM38rn/1QHmgYclANTAYzYljcGuKMdQirxaBg1t2EPJAOrJa51Z/9kdsPvehjWyV/zeFtmmisL4dDkTzqr7o9HEuxRqO2Nl9HT/5y9l35Tt92tzaln7aKtCVyxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDH/R0AAP//b9HZQw==")
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ed}, [], {0x14, 0x3ed}}, 0x28}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, 0x0, 0x18)

21m59.744494011s ago: executing program 34 (id=175):
r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='/\x00', &(0x7f0000000580), 0x0)

21m3.89597762s ago: executing program 35 (id=315):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904002001020d64000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300051410270904010000020d0000589ba59c0878ad89076ee66adcbf0904010102020d000009058202"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000200)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@check_relaxed}, {@mode={'mode', 0x3d, 0x6}}, {@uid}, {@session={'session', 0x3d, 0x9}}, {@check_strict}, {}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@unhide}, {@cruft}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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")
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902"], 0x0)
r2 = syz_clone(0x88180, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', <r4=>0x0, 0x1, 0x7800, 0x8, 0x4, {{0x19, 0x4, 0x2, 0x10, 0x64, 0x64, 0x0, 0x4, 0x29, 0x0, @loopback, @remote, {[@timestamp_prespec={0x44, 0x24, 0x1f, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x401}, {@private=0xa010102, 0x3}, {@local, 0xf}]}, @timestamp_addr={0x44, 0x2c, 0xc9, 0x1, 0x3, [{@empty, 0x3ff}, {@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9}]}]}}}}})
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@deltfilter={0x460, 0x2d, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0x10}, {0x8, 0x5}, {0x9, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x414, 0x2, [@TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xef80, 0x1, 0xffff0001, 0x0, 0xffff, 0x5, 0xbdf6, 0x3, 0xbf, 0x1, 0x10, 0xce, 0x5a, 0x2, 0x8, 0x6, 0x1ff, 0x9832, 0xd, 0x5b0, 0x1, 0x8, 0x2, 0xfffffff8, 0x8f, 0x3, 0x4, 0x7, 0xa, 0x4c6, 0x4, 0x5, 0x9, 0x8, 0x1, 0x6, 0x4, 0xfffffffc, 0x2, 0x3, 0x6, 0x1cdf, 0x4000, 0x68d6, 0x2, 0x7, 0x10000, 0x262, 0x1, 0x1, 0xb2aa, 0x3, 0x6, 0x6, 0x766a4a17, 0x9, 0x3, 0x5, 0x9, 0x6, 0x7, 0x0, 0x17c, 0x3ff, 0xffffffff, 0xdb87, 0x10, 0x5, 0xc, 0x20, 0xffffffff, 0x3ff, 0x9, 0xa, 0xfffffffc, 0x9, 0x3, 0x7, 0x2, 0x5, 0x2fc5, 0x0, 0x1, 0x7, 0x0, 0x3ff, 0x1, 0x5, 0x2, 0x2, 0x6, 0x7, 0xffffffff, 0x4, 0x8, 0x7, 0x5adb, 0x3, 0xbd, 0xa, 0x7, 0x100, 0x40, 0x7, 0x5, 0x401, 0xf, 0x0, 0x9, 0x7, 0x80, 0x8123, 0x2, 0x92, 0x8, 0x7f, 0x529, 0x4, 0x9, 0x5e, 0x2, 0x3, 0xa7ef, 0x401, 0xf, 0x8, 0x0, 0x5, 0x3, 0x1000, 0x5, 0x5d74, 0xe, 0x9, 0x7, 0x3, 0x80000000, 0x200, 0xf, 0x7, 0x8, 0x2, 0x514, 0x0, 0xa, 0x1, 0xc, 0x2, 0x5, 0x3, 0x5, 0x3, 0x40, 0x9, 0x638, 0x7, 0x7f, 0xffff0001, 0xb, 0x7, 0x6, 0xfff, 0x800000, 0xd84, 0x9, 0x2, 0x100, 0xc, 0x7, 0x3ff, 0xfffffffc, 0x8, 0xa6f, 0x5, 0xc, 0x4, 0x3ff, 0x2, 0xff, 0x9, 0x9, 0x3, 0x3ff, 0x0, 0x1aa35354, 0x3, 0x3a7, 0x1000000, 0x8, 0x7, 0x101, 0xd4, 0x10, 0x5, 0x6, 0xd4f, 0xb8, 0xb3b, 0x78, 0x8, 0x6, 0x1, 0x1, 0xffffffff, 0x8, 0x5, 0x10000, 0x7fff, 0x6, 0x5, 0x3ff, 0x0, 0x4, 0x35, 0x6, 0x0, 0x0, 0x8, 0x8000, 0x9, 0x50, 0xffffffc0, 0x6, 0xf, 0x74, 0x9, 0x100, 0x0, 0x40, 0x8d, 0x2c16, 0x55b08d29, 0x9, 0x9, 0xfffffffa, 0x6, 0x0, 0x101, 0x4, 0x1, 0x551, 0x10000, 0x5, 0x8000, 0x80000001, 0x6, 0x8, 0x80000000, 0x1, 0x400, 0x800, 0x102ebf25, 0x0, 0xfffffffd, 0x7ff, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff}]}]}}, @TCA_RATE={0x6, 0x5, {0x77, 0x7}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}]}}]}, 0x460}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0xd7, 0x4)
socket$kcm(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r6, 0x0, 0x0, 0x3})
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

20m21.321843397s ago: executing program 36 (id=420):
quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6)
read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)

20m14.153517521s ago: executing program 37 (id=436):
syz_usb_connect$uac1(0x0, 0x9d, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x40, 0xc0, 0xb8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2}, [@feature_unit={0xb, 0x24, 0x6, 0x3, 0x1, 0x2, [0x8, 0x3], 0xb3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x5, 0x3, "4701"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x9, 0x0, {0x7, 0x25, 0x1, 0x81, 0x8, 0x89f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x2, 0x4, 0x2, "9d1f7bfb38796d"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x0, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x2, 0xf9, {0x7, 0x25, 0x1, 0x3, 0x5, 0x101}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) (async)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) (async)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r1, 0x82000000) (async)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r1, 0x82000000)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x20b) (async)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x20b)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000001c40)=@known='system.posix_acl_default\x00', &(0x7f0000000080)='{\x00', 0x2, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x1, 0x60b, &(0x7f0000002080)="$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")
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x4f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0xa)
llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000240)=0x5, 0x4)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r4, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) (async)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0)
getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f0000000ac0)=""/4096, &(0x7f0000000000)=0x1000)
syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'xfrm0\x00', 0x2}, 0x18) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'xfrm0\x00', 0x2}, 0x18)
pipe(&(0x7f0000000540))
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001e00)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6572726f72733d72656d6f756e08000000000000006861727365743d6b6f69382d722c6572726f72733d636f6e74696e75652c6e616d65636173653d312c756d61736b3d30303030303031303030303030303030303030303030372c756d61736b3d30303030303030303030303030303030303030313737372c636f6465706167653d69736f383835392d322c00bfe4b5989a74fab3312666bfe9d9c3b58af2320b3a2b57356a4d4299b7d90a47c1ffc8a6624766b8a2691ecbf3b8346b26d3aff86315afa7ee5f681cc6fb7c514dddbab808519130c8cde50c21bb2eeaa432d01ff8359492c0c0faf4c68865e11222243cd19c1c5a62df22dfdc6b0093a142a7d922f628d5582617c38a238988c9cfba48630c33387062a1db"], 0x1, 0x1534, &(0x7f0000000380)="$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") (async)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001e00)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,gid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x1534, &(0x7f0000000380)="$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")
mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001c80), 0x16a000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f0000001cc0)) (async)
ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f0000001cc0))
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000000001"], 0x1c}}, 0x0)
syz_usb_connect$uac1(0x3, 0xdb, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x7, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0xb0, "6f8395", "ca"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0x0, 0xb, "569752", 'w'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5b4c, 0x401, 0x5, "ac"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff7, 0x9, 0x81, "2cae08ef0c"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x1, 0xb, 0x1, 'n', "a4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x6, 0x3, {0x7, 0x25, 0x1, 0x3, 0xcd, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa, 0x9, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x101, 0x9, 0xfe, "90020acd"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x9, 0x38}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x8, 0x3, "4671b5"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xf, 0x8, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x8, 0x3, 0x5d, 0x8, 0x1}, 0x29, &(0x7f0000000400)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0xdf, 0x7800, 0x7, [0xfe4030, 0x30, 0x0, 0xff0000, 0xffc000, 0xff30]}]}, 0x2, [{0x56, &(0x7f0000000440)=@string={0x56, 0x3, "85d4396ee333eb239f0066e23577e86d25bc29f74c3d01f10387b6644fded539fec638dc355b59f1de09287484247b3a230766e2c61e8e11612805e268ccd195b4302782dfb115f8056282a0dfb92274cc27726a"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x440a}}]})

19m50.408905678s ago: executing program 38 (id=483):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x32, 0x2, 0x0, "444900e1b0faa9b0071c937f7f00002e0c0000ff070000ff0f0000c39b00"})
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d020000000000000001000005ff07"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x7ff, 0x0, @void, @value}, 0x28)

18m15.593406836s ago: executing program 39 (id=709):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @empty, 0x200}, 0xfffffffffffffca7)
listen(r1, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x32080c6, &(0x7f00000005c0)={[{@bh}, {@data_err_abort}, {@bh}, {@prjquota}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@jqfmt_vfsv1}, {@grpquota}, {@nobh}, {@data_journal}, {@min_batch_time}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x111301, 0x35)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f000000c440)=[{{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000fc0)="5b02fc472b3e3e3dbbc257e5cff3d263be00926a571765952876097bebba52d804a3d1da97d8f24d6986639159368728e1b20a9cea0bb3ee5b532ecea89a2361cc4746d701d1dfc0f4f310b0a506d225950e7909875c794ae5f9960286a34afee4c76258a44ed1766830fc561278cacd720a71da2a1394488b5b710d5589588b82008deaea92c13ff8250024e9fa33f7d1c2609770a6d87722739a054ee2a1045c3d5b8974f27c489730de4893716904a4368a4d0b11cb27763867d7ff15b96ec60a834da0a5648e3a99f50018ceada9904f76a6ca9089888d45068d905f309b08398d1be4f120f2b2d0f14cf147893348cf6ca1eff86b9784eb045288d7555ad740897a465775b37a92e44e7a49bb3fc20a57331ff0f1e2a313f743cd76979481a1bdeeb53ef722516b39bd9ff5276b6b865671fe55ba421578895e1f5359ec5dbb3a31b98492b140c18eab7a4c172c0505a7b90ba4575def12ef81008ae672ea3d6d79011222bcaeb6e069c96cd62bd5d7e6a6dcd2d914bcc603aee539e363e6bf4e6fc489308926edba764a7c052c256129640f0cca458a171e4435ea99e507cb31d8e6bb0b3548dd13c7bbda36d5ad26454f4352cf7b03733de535e4586e8468781454885fa4599bbb8150d1ac9911f4c9a8c9056274c9f3b8b4bfda9f5fa427334fda3a1eb58c21292c143908f7dea0d51f97d6aa4bd1cb041a2b09ccefd5b61b11f3d50e29416cafe6aa88bf8ae7795a0031b2332b6b567eeed1296a250a5da34f0988fea5121a83f5d0048f0ae5e846d60adb785955375874fef05acb24f86125a296c0d7b6374b80559f7921f908190f63ef9e75734e4403a069c8722f024cd2f84ae1131f47f7bf75d2eea5727ca8c49167a74b33b831cb231b44dacfa7b17e7ece1f429b20585de46d61c416f05c387b78788bdc55bc62106eddd2736b392b36efcdbf389bc8c34a07102ff481d5b8345f06f12fdee0996b06d91a9d107eea9d15c937ac00c94f5d00b1cb79f543a228e8d1eb00cba9110aa95d2e999fdfb43b8a455b99c917a1aff3d2712105bfa4f6b3b141292727770fb53d64353a2a4a11131f427cb014978c950d702660042723befd8561a944aefc64f785946bc6faa595406dc5615696bc7ed2fb7480046edf93108beb18a7145501a0974372042ac72bce2a2a478449bb8723a39b9199511e0d2d44c3bb8ad458aafa506282836067d9a21908589cbe4d5ca88b7d87366cc2ea2d8526178ac5350d676f46306a5d038889f8b76d75d1c14b87b0612519afd4391034bb247f78b03e5abf80512215bd0e2ab94d6b0036af279be3d81a2545cf8e4dbdd1281cc94e3079fa6c61fbd6ca571cb5a71047a9054131aff184b65bbc772a86feb0aeaf894063978ac765072c5872f7d8ba41f38e10d58390c303efc105d0cf72b70d4d8c48d8d93c53dda56001e9f91f3ceee251458beb8a7b896e9de08f22b5ba954a7be40392d99f7559b0826357201d2a9480a8fd08795e138f00080909607d1516715cdd7723a8cfdfa8fe499dad1445bc4d5df97f3819929b017277a0f62e62af538777f95ab6a28d262c376fb172a2355c1735e2c9bc83b5129a040e6f87466ee7b781b2e921d640f4c18f3f9faa0c5bc9c4174d588d0774397be2df300fe173c11c16aba8c34bbb469410c76c07a4d417295f53c8996085055c849d07916fa19f789acae624ed1d90b0a16c04c9e7929b3cd6ec7614268c3d71a34f6dd8db6bc54a1c0056a3023529dcb9c5a6560d931deb057a87e700e07fa4e44f4c941d51626ce249eec9ee3ade8fc5086a3b7b58559d77cc5b120b120566f219d700d65ae82b6029fb0865278466183c237f0af34a2daf7c871c419d42816d6322ca2f343eded697a859134e1a4563a3d3781fc40a43cdff7ce24dc692594072c4d48b54718bc12eb96364a3af20b4f3500bc6ee4461f89d595edec54c24b19818f5219e99549cc94d90b7284a5307ca6fc61e03edbab3f633ed8fb5d3054d7b5847bf625c6a5c5bc05db8cea008a60d27b4599cfbe5bfb13c421469c873d9d482f6dbfc7e117ac1d64cfac75fa8758cf6a350bcfd470317511c90b007bd36c7838e8e1c9f03ac1d1de1722a15c76a5abce3aa9cb64dfa7d266f53d66e3a1075ea25cebdd277ab85cba9fdbdeeaa5d31ba4dcbcc79fd4fba64140fbdc82b4c97308704ca89cf98e42e56e8d669211b99291faadc9b1ada52adb264229eafec16ecd22e9433adc43a43ed246ef6b478461d63bebd441361665aab48d454ea15d65ae1c6ac0de31d0a525a88adc77b525faeb3b7dd9afd774baa43d101843f4369aee65542d348f3d13cceb78e48af7bd2b6428aa246965c16286120b731545d684884dd9060cb32d69e03cd37b41ca2fa8f9d030dbf55e9957552f8b94017a89d3c8964ac2472de1968dfcf3b95ffe28a46242b3814b3f3447d59020d6263b6e5143c1237747ffaed38285c857197fcd67290ea58e1b65105aa2456aba6f8a79a6a9d576bb8cdf8a341712a996a7f017d7c8ff9e5e731cb741e2c2f021a724764c32aef6a4413c736df51319f6e699850601819a0075fbc0ef855e326480c718872048b6f26b71b30f5afe78dfe5875936cf9654c7f38284c2143cda312da03c5db3ab52029275c503049e526641af37f11d63a1b4a84af791c5e6c8d13b9952a5f840da008fa267254106a55679c7b66e8b8d99f6f82c47bed7e6cf90fb6129d9ce577c8811c2e046f3cb03afc94f831e16849e8d42dcaafb8ebc95f91f48e66cf1bf175998184a3f8d9f6a8daf50af8a90278a90d1c10387846a51b604798fa7f68c2c58cb07d41d434824d60692e26ac3240fff227752edac8de308bbe12541d31f346c23e11116262f3f6b34c05ce4fc33a5250787e35e556daf30c43538373588c78f762f2a2c019f48eaa90ff3d0813e6ecb1482b19527001395ca5311cdfef35b8a4b47cd9f06b7ff8eeb2672e6c1da141bc2135419f488656c80fcd5fb83ab737c32abdf3f51f01bc4d700cbe13a6072e1d79e2c0644006ae52b0b1240716a0c3eae269ded00535d5ae2f53be4a0960a8bae34cd424b832080454b26839174c0c4d34bd086811ec62ae88fd30015aa3bcdce28389b0b7100425126a5313a71456cbf2381d09409891dbe4543d1986f88b7210cd2ee6c9da7ae71e5eb9defe454bf200ee4d072fd5edcadb1a4f3d0a0b095be9c6a6a3f4ecb4a1bed276ab8ac2a0ca24fd1331a700924d2db9a2f2213eb29bacd387635b1c340d5cea4157b4705ec52f92e714b59270f3efce9aa89f90a02ceba670fcc32656f26175137a1a4b5a6cac356441aff573d0597ba3adc947166ff5b926fe461625f1954dd1cbc3885a0eb5c477b3cae2f0d5c98c49eeb2209f698f9fdc1f25211b2f95d5d0e802104b42e5afc21296df7418eb01123c20b6a722a6f16233b42c7ee220b8c6c3d5798760d51341830c46316179e71f629e63cc457580df4c36b5ff3db14ed86bb67bcce43833b3d296de741e18927c294dc25edb7b6b557c75ceac4b700fb4c2272601869982213e501f421662854772b89eb5ceb67cdccb7329e5a4dd79b635b4d38c268aee36e2532fe8489aefb3def47296ce94d3b6fffb079187dc9488bde396d7331f50cb605903f72918549344cf5e7d7bd5670a2eb9d0f2b78cea4e036a641d50a92d7aa57e1087c020882246ba193d81e1da102c20df8031e3ae99d5a0100a5481061b89f23cca72f7649d950615d9d28deba9cd8dbeee34294d00a17b2a18015c3160f614b4ccab2fd3dee3ceefc2946dfe023213cf3c194908e10171d95a5b9e80e1cdb3ac1a314a4e24e3641636a89617b38a09630e412ed9a05a19d627f7036976fe4df303704a70617e72e59845c6f997f4d8453125d03c9992ca10ac4144593c5ab14b7ddc9e2f59be23cfe1e4d26da7da71592397c9cbbe5ebfc4ebe98bbfe4eeb8d5d86da10d7a11d871af6fa9139feef35854fbb3ed035af34b3d8807b2dcf7988ce376db19ae0eb56f09e7014e36953bd4ea1588d133928a1b507e69226e3a03a79bcdd1db27580e73c0061750d06f9133b245929733ad095be4617ff50cb82cb22caeeb85a0ba1353abb728086a77a52649265c38bc520564da086474005f5ffeb1de03c4f5a0321b5604a8cc2d231c6aa62e21434df92f295b6ec9d140b128869f9695edb5ab4987484f15c57f27e3d89eb07e1b1ae76cbf25ec6d0dca7e6cfa39d8cd78c8527bb93fb696df889b1f692299451a59648fbe277df5890c2dd34d5d1d26e278ba4972325332a68df087302e9d9465f22e37ab30b7f814f0b421a2bb9d7fe82d5dc18b09616a6a0c1ba4b81389bc7979318ca455e8a25de636cd68776d8d3016501c5227b9f45c2e52c544d7548590dcd535b7f5a26a228c87b47eeb4d9bcf43eb303fe907fa45eee164e84b78468810dc2b9b994bf54e32239f7a7b4c35457628209f29783535f407bfbe3a084373428451eb86cb07f368c47a9c50627bf07d8cb083e0b0706fa3ba2f52b53ec851c760044f6c00312372ac33a42ac7b6448908136caa3d49dafe6090a9b882442ec355bb54dcc956314e7164ae4b95141cb120fd4592b3d817da583c5b2f6226ce1a437c93bb9ce8f6d69c50ec15526c24fd27535152947cf7bb20fc1067a72508e3ea93a4ced1d31374409da16178ebb84857456e53c6ceab9efa172fe3e9761f434734e9830dcae0695a0ea7285dfa1ef8eb1625ea1ce13a51be7bfe8d47a926c3e061c9936b1230b7e09e42207683de4effa5179bc80f12fdfee1d815b419592e03b01c2875c7df34a7b73c56ed86c19ae94ddb0a435e943c257bf4752f3938a069745e28302b122d8c94a2351522f282f8f45ad3871a3e89a49865b2d933af8307a7010249d2dea9a662cb20871af0aad6d4c5568450019304dfe5eabc5fe9f29264f7ce2a3255922b13bd57a308e5e9d7a8670b04d2c0a8f498aed4a8ced06eb785d74ef628d8763a56ed3932261b6e4d5ed3976468151af307f61a3795ba1d2c51aec01c66bca8e3a69ca6fd95dbb32c71dcf3e397523b57193b52df9406a0b5176b5bc0d398290bf55108b1623e71be01749f19ec537c89c331416e77538287aa3ea2e0a5ee67250cd81cb42922e10c53941dc512a0203e10cde0b5dc760d86aad6ce94dc00c71ea09c75949d46b7f08eba7e93e0d3fad860cac61366fff2278ea3c3aca044ca098ef26103604f89bdbc9b171d8d5a64f3d16cf6baa6fec8b8b0eafc3daaa7c53d2283b34ea9779bb4479009fd8fc1c00d8fae44660f2accd6716d104bd28325327e5b322002d51212328e700360275d51e94dc69b174b6a3ac22f3313f83b842391e9104f984b5c1f3a6588bf66cb93a58d0c2c0284ee7c739dcbd4c987dbc24d9731bed17b1fc33099fcec0af6641d398c5f1feb2b58316e814ea64a15e6c49f0665d067fc46269dfba91e33d7aef1666625b32e7f7d81ee51bc108710c3f0cc75d983ae93757bd5d9fdd31ed7600e6435747f42bc0d0c75b02165f1d986e1bde07145cc6d24cd53f4fe9d9c3f7bfbdf4e8485ebb3e08debd911c74973492d09808827c0315feb084c78bfa5e6f20345081b3a0a292330ea864f062a4d453a0336f2e37a99f4fe6ecf4bb20b50a8a5a6153738cca8d77a4bd07005d0dcc369784ae69bca28aa131ab17bb16fe00fa9a126f48b6b58a23f86705bbf9b168db4f1f41e63e88e99435e9495b74d5182df1d8944c244ff1b5304203cae5b9d0f72", 0x1000}, {&(0x7f0000000500)="9346f22ec45038f34f24ca1adfa23382ee1dbb6db1272768261f5f898f30f7e40327d0152fdad68c53780abdda5c4dda0d9f376afdab7449a0470c4de94754a057da4aeecae0c2e920799d2ab6f7c390101969b0a1cc849a1939db8044b501dc71151d6f397d51a405fc4414defbf93251dad20ddae5be4fbf71356987f0305736e829259f8f5f782bb49cefd2f13ac1f79f14b3e69547ef5864934e17101e25cf632c0a2f837ea41519ca6e83", 0xad}], 0x2, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x20, 0x1, 0x1, [r8, r5, r7, r3]}}, @rights={{0x1c, 0x1, 0x1, [r1, r3, r8]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0xe0, 0x400c051}}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000000a00)="6adce9c82e6f1d9c09bb5473f3cc96", 0xf}, {&(0x7f00000041c0)="4606c2c2d7344957c2873c31748cde0e7293954002b4d2ac3f55819c8eb3acc0acb088c3664f5d5e79aaf122694fed0d880d820405d3150def0b693e7201245ba1e7072761459db15a84d519c0ab40253390c7357f0178002bd3b593c8b4c3ad175d01f411a794655ee57158dda7328280df0cfae04b77cd49a60c3e6c9a1160b3969174245f6fddd885", 0x8a}, {&(0x7f0000004280)="9ebd31607f2035badd897a1d5d6959ebc54a2889e1995c33beb541a59e71379ec0f3e8a579dcb71119e57b0a834a3221c18a81156199f087db977078df1dee1ce8c98d6445b3eeb55687d9f974e035f1b2d842c80841102021c631016fd3d0271d419b15b00a9bcbe7038d46cb597b2ef3cc7c52b577f4fae463ec9561c4c3903762f0f864b0ac46af8e0922d48b7fd5e71a9462290599f6eebabc8a55d201efc8e644630b7ac427b81c3116632326783570fffdbfd296e6ae26a19277b2a5545d", 0xc1}, {&(0x7f0000004380)="7dcd0a157f96e06ad99a11957412642e30b9aca831633dc83520bfe35bcf02b5a062227fb778dd6afe98ac47ac402a123d3233fb62d861103060d57c6f6485a22173dab9c525af44f66f38f86009d09300812f1a00a6d91a1604665d4d579ed84e9d9c16ece62313e7190561fe98de44b8116623398c3541ad0a5d518802f8b8c3139d68bcf4e6ab8ba4d75c4c868755dc238a2aeff0b1d4f8cf2c42f12a88f313f894794e69a90da30d9347bf2fdd8064449a2054bc17b0313bd3769fb907561ee8369de199140afd8df5b5027186c748bc3a42dbb1f1d0db674dd3018df1501f99ce851e64f342fd", 0xe9}, {&(0x7f0000004480)="e9600b93433d591054d35af01e0adf35e2125ac72b2ff032f0697a15854349a97ce8c5b2ac3fa43f5ed75968a70a0f9e748284f7c370bb607adea3934ad1af73901c7bb33e63c972dc16f1875b2101fb34b9c838954138061070c86d7a6fd3d6a0ca056ca949d51f56768033190f2fe338863c615a3600319301d2add0aacc1b20fa6efcda42af44ab5245088540f7ad948018bd50b2f1b19b06d6dc4eec77f862e9b58f493837fcd79acd6c6f1266751a7ee6077511dd68b3", 0xb9}, {&(0x7f00000020c0)="3d51bbf28d19b36a87702c532f900e", 0xf}], 0x6, &(0x7f00000045c0)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r5, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}], 0x58, 0x4000014}}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000004640)="adfc5d67aa1b3768f8654bc1775ad480872d028b818e0d2c54ab8299376c34b7880a2b28e62db2033f201fc330544db48339b45e54b636e159ce2ba4a4f69cb46c1a06de3294d1c908cd8f8d28eb23b00e5efcc166bc88bc43a03187a3edbf9356f083ad548afd17073c2368e65ce88bd70323f1fd2287dec3dba70ac67feb11e688a52cde0f8d842413a4af08492bf201072986193a52a3f661843caaeb19ec8d68c23f8f413b1174a559b6e597fad9937c8c772c061afd9c98ff49f76406e6b1ef056161817c89a435dd534929333769f125aa0759f55e0a70a9157277d905da0038ff", 0xe4}, {&(0x7f0000004740)="924c601e11d98c0ab584f875bd0b6daae7fd69cfffd7f2923529e59e9b6205c037d49541fae184aa590446", 0x2b}], 0x2}}, {{&(0x7f00000047c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000004c40)=[{&(0x7f0000004840)="55e9fe4b5f8bb77c4ac6fbe3b8fa5e1850a8c7898369c94019190061c3ddf4bc2b0f9e8864ddca19267a9478ddd6675810386513d97d021e4467d6ee72276e9e7dad101864a22cbc5db6f72997288abec5526a91760ff909b162553521d8434874a2bbf8d20b8b434dbc4c6c1d89d6bfdfe13a54cee0c0d002b728cc44b76e326c7f5b29365831d02b04d73c405a74db9617175f611c5119ce4d8922ccb4894fc6d3866caffe7564754a0d5cc3cd6d14ca8f8bc7f6f0d0e063dd9dc3d91e78d997673ddce41cfd4f1a4c3062f656ed052cc4c68db0bdb312f95c73a5936887", 0xdf}, {&(0x7f0000004940)="9e0fe914ad7e67c75eb060572f6617b026e8e5ed41a625daa3ea3400ba2fd675728f3438d901304e2105a2cdc826c16f0e48e6995ebadbafd63a03e1cff4f45084a1d357ead5adfa4264ba4931c224253d92b044d483220b2891d6448083907930ca5e9bf45cf3c4ee04f0fda9fdabaa02bb9bfeda99f0143e0255bf0fb870", 0x7f}, {&(0x7f00000049c0)="b1393f4e5666e58ee97f2dfa7e56fc892477af81df01296772fbbc6b91a8e908e45c08abf3b3c686c9061e2abb29c2fb5abefc1f8fbf5ac7c0eeaffed8ad1e5382c903ae0159248c46bdb2abd6a5966113b9c5f54f86319601f0ab7da24eb39f6ca5f81a0c55dea5ed6037b22c3b5e9e6121c7e96806da992536e62e413d396be666a24a0cd3eff0320b", 0x8a}, {&(0x7f0000004a80)="591c370f320b12854d794eb6", 0xc}, {&(0x7f0000004ac0)="e2a0555bc639376ada5c44950fde081325347fe33849ab50da3629223ea22ac65253bb6f67f772ebc49133ceb0c1ed3c9edc4ded71d22edd68e223280256ab37835cfad2d4ab26592e7b106f5cb9ca8f9209e0b65b6446cdc25b88b38b03ddfee6aaf56146527a245fecf7f6fcb3d86060385214f47a79596757c7a86cde3c59091ddf6067ee90d5fc747a063dda54cda3f6bcc385e77a4d12caa138ae38a49bd8cb42269e877b59d587e9f2ef4aad7450", 0xb1}, {&(0x7f0000004b80)="637cd3b511568e45658a06274e919e696c9efc13b19cf24e20d8b08a5edca381802c75fbd23522235c5b92a331876495f793f1f3ed40431bf39a117c46589d9a883880709795f5bba5bc5a5b6193c6cb368496805d93aa3c1b24d683406e684b4c961a9b4878201db488b8a07b621164003599c69d0a9920792ba8578b18e16b2d1a096c473737c63638b349bb3deb36021f5195a4", 0x95}], 0x6, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r8, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r4, r5]}}], 0x80, 0x20}}, {{&(0x7f0000004d40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005280), 0x0, &(0x7f0000005300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r8]}}, @cred={{0x1c}}], 0x98, 0x9080}}, {{&(0x7f00000062c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006400)=[{&(0x7f000000a2c0)="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", 0x1000}, {&(0x7f0000006340)="5dd5888aa81001020a902d14e48c113161fba75f7c12b485eee5e5a242af3c236b4c91841d7ed09e363513c83863689f878e37", 0x33}, {&(0x7f0000006380)="744a77c0abbc5f22aed6a989aba38859ee0146ad24cf440503b9eedf34ccfb9bce52c3b38cf0237351a951cd44a4c0c7fee6843b9afb2a004bf7fb307c259eeae0c76df3b9b0949efcdd4fb2dba15958d17610ce66", 0x55}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff}}}], 0x80, 0x20000800}}, {{&(0x7f0000006540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006c40)=[{&(0x7f00000065c0)="ddf6c63aedcb7f4db82bb515044c37c82eea43ce702b009f4618f46cd1f4da57557653de34f9e18cc3b16efb77a5610204140b304a00a70e28e3d91bee5bdfb5b3de4aaf1af34611d50882a6f76f57f650d053f2853843b48a4b300d80726840cd6638021b02a98696be385d9b6bd2c08536929209b8d3f038e0031d7c1b026882a53d09cd78df27d9576a7207f7b94cb0aa49e994f571b9ce80da92af042b82034e7cf8f61409d080a3", 0xaa}, {&(0x7f0000006680)="d2bc0a423592fc84d4b97e97e4a354265f3a70ad014180301943163cbdddd6db9340a1ad030087eabc2038a01517f41b7d5fd9a3acb9a5396e22cbdfabc2650333a1372b1c73835953c2b9ffd910adb5ad48043fb962743f792393af1ef9fd9979d8e3fa5ee2826c4e6f4a28f504028a37fe22a570626ca8d33d95cd512a417bd24d1925ee5c0785f3b339df4016dd25d157ae1c33f6aef3b415eaa00e060665b8d5eed400e296121382c37dc89f021f2196d673a08abe1aef2800675aae8d8321af627685ce936eb7dbcdd32b1bd3e3f3636e2d53122229e7dd92e8df6b8a5eb51d87b3930ea2842cc2", 0xea}, {&(0x7f0000006840)="50d9c030e9ee932fdd810f0ad6ed3cc048d36326a417ddd017a70d79108e39376a1be7a3523d031d82d78fd4c5dc6741dc211466e2f5d49abb175c8b1ced86ab85a9a5cb0054d1b46c97fbc17ec3eb1a889d3a86536a936bc8a59e4c9158d01459dafb16315850d585f7937b69ca5fe5f7dec7990157233e817a00c981d372ce7612508c98bc144527605790681f0507fbd27c30c7a0df881e0e1a22c4e2ff52be0156f70ca765bc72d8bf88d65c5c92a60e8cbc37c35a81fd837f90582387e20524082b63b2e49a3bcf6291613bef33dea3", 0xd2}, {&(0x7f000000b2c0)="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", 0x1000}, {&(0x7f0000006940)="ab789d3d1cc4d8f136fc0ae51ef380f556858f559b3f2f4d9ef494030ffcfea36fcb5f32413e7f9f965c2e79a8595cfa8f04ab171acea76dbf75a2ab859856c6473db80386700a723b78d1d816ac", 0x4e}, {&(0x7f00000069c0)="3de18510c23c6540a42d2063f1b68a26b0da6565fe9c01be1e93f80a1c31b4442a400ab9", 0x24}, {&(0x7f0000006a00)="2acfad8d56fdff330c17ea5b1b5c8d6875d467ed82920abe4303eae916f2ce6150ea7c1681cd25c0c2269cc2af1693090db2298270f1eff97541103b6b2da116746810e3af545fa556f7844ab8e46ff2087d623cf8c21aaf9b850ac6fa99382f4f54f594101291818e8b5abb6c3353d7ce32502ab8799521ee5270aeb9b968aac486caa73de39d472f89c9fa6b2b57860f611a78c85ad973cc12661edb372d09ac570938497b568202676752cbb5c26ea9c4c5609180efac5d277f97f5e826d3a4b89cbb082863fd79652a4c6f", 0xcd}, {&(0x7f0000006b00)="0d25d3b1f9c98c77cda7", 0xa}, {&(0x7f0000006b40)="73f8621cbbbb97825306871b2fac22ee34fc0e5045e748163e84d62b8aa377353e0588ad511a3ec9b6f2bc654fb82f9b76e386f0", 0x34}, {&(0x7f0000006b80)="cb0e67b6291a221e2f676e00de3830c8ec4a1934a4f8780393a4912c12199b723ceebaba81b7522298e0deda64ea2d1f5a0d797d32af6decc97f19e00f4a66f2acfbe0ed15824f4b69da950f80f0ba98ef3a7be1232de621b543dd4b54f68728faa350c4c33ca3e8abb437f0d7b4b36792b76ae27abaf730c25bd9ef20507dca8814564c59c17ca9163adbc52e2710356510cd6d980b", 0x96}], 0xa, &(0x7f000000c380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r5, r8, 0xffffffffffffffff, r4, r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8, 0x4}}], 0x7, 0x4000000)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r9, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0)
r10 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYRESHEX=r9], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
socket$inet(0x2, 0x0, 0x6)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000280)=0x20)

10m36.651734257s ago: executing program 8 (id=1893):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x62)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
setfsgid(0xee01)
setfsgid(0xee01)
r3 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000003c0)=[{{&(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001680), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES16=r1, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRESDEC=r5, @ANYRES32=r5, @ANYBLOB="c1961c09ff095e144a3360dfff59f7ab59a6fc2069506df6b0c9ccbc4cac447e94034804d4315777a3e23e2379251853ac74786f430a760ba831ceb23eb6f76bfa65c4bbdf1d046d08235ec24025519796258694bcf230f978b1e8aea5fa2c209fea2510bb022c3dba43c30f9c9d4bcd93ff2a7a92128c9e96a4306a1071d47b0915b690ffe604f283a09567a6ee41d65fe21d557a042d"], 0x50, 0x40010}}], 0x1, 0x24048005)
accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, 0x0, 0x80000)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f00000001c0)={{0xfffffffffffffffc}, {0x91f, 0x462}, 0x871, 0xffffffff})
ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d10, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xff, 0x1222, &(0x7f0000003700)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001000)='./bus\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
connect$unix(r5, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x141842, 0x19)
r8 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r8, 0x0, 0x21)
sendfile(r8, r7, 0x0, 0x40001)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r9, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, &(0x7f0000000100)={0x3, 0xffffffff, 0x0, 0x4ffffd, 0x0, 0x2})
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f000000cec0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e27, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)='xfrm0\x00', 0x6, 0x5ac, 0xffff})

10m33.231866287s ago: executing program 8 (id=1902):
prlimit64(0x0, 0x5, &(0x7f0000000140)={0x7, 0x400000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, <r0=>0x0, 0x0, <r1=>0x0}, 0x2020)
ioprio_set$uid(0x3, r0, 0x4004)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x571b, &(0x7f00000021c0)={0x0, 0x1228, 0x1, 0x3}, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0xe)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x10400000bcc)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = syz_open_dev$cec(&(0x7f0000002280), 0x0, 0x2448c0)
eventfd(0x101)
ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f00000022c0)={0x283, 0x3, 0x0, 0x8f7a, 0x40, 0x7, "c92449c399730b3c566a802b90b871b6", 0x68, 0x81, 0xa, 0x3, 0x3, 0x3, 0x4})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000300)=0xf)
r7 = fcntl$dupfd(r6, 0x0, 0xffffffffffffffff)
ioctl$TCFLSH(r6, 0x400455c8, 0x2)
ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xc0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)

10m32.379475117s ago: executing program 8 (id=1905):
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500"], 0x15)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000001500000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0)

10m32.223078465s ago: executing program 8 (id=1906):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
statx(r0, &(0x7f0000000080)='./file2\x00', 0x1000, 0x100, &(0x7f0000000240))
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000250001002bbd7000fbdbdf25020000003e350318d08d11f3f04acf14ead765c83682fd9d9eba349e3c8bb1cae6d38b3b9b86a8a80f7355b353c40fd40945384fcd5a311f5572a7c438f7da9fca33f6ba279cee7f8a5f3e24a78d9390d6459536e8dad6adeda442eadb26c0b06f6416f4783fb9afb5f4ae1579845e91cc591b645b1b3a8bd632ee41"], 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f0000000480)=ANY=[], 0x11, 0x221, &(0x7f0000000680)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, 0x0, 0x0, 0x80700a, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd"], 0x1c}, 0x1, 0x0, 0x0, 0xc880}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

10m30.975626427s ago: executing program 8 (id=1909):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0xffff, 0x4000000000002}, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x6, &(0x7f0000000b80)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f000000c400)=[{{&(0x7f00000005c0)=@file={0xc4b14bfea898191c, './file1\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000640)="15df557cd81d0da3c1e04fc8ff1d3672fc9ad0a55b6632cb6c832c48c55dfddb97cf4eeb019b46f0c74240125f02afa94f13b29a5d8c", 0x36}], 0x1, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r2]}}], 0x20, 0x4040}}, {{&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000780)="776b8611de79e57bca1f85a20865b466fad67e581f86d5cd8ebcdcfc6b371675eacae186beebc55b53f10d73e699ab11bced32a429cc8859bf377c79887f5e870813dc3c3886c42946da933dcf5bfd029c3b6a7d9cd8b1786ecfa1d262a64caa7e0ccdfd9519bcf0f6766d6656629f0dc04c62fe7498be878ab28da66cbe7f6984c6dfe63440faaa3b21fa1b559a10e259866a373a2d0700902f00fe08319d9ae8e8587188e8c079da8775b6367b3429c86ea4bfc24d135ef8cc3da1998b7112261ec2e5706a60bfc1160113bd6cca36056c9a70823320d9ceb3dd8e0d48", 0xde}, {&(0x7f0000000880)="89e4a279df75d8fe5134fc428e0d67de63e30deed12a866445c1d9424b1d0d574ef1841b04c07758fba5fc95c879ab9eb004bb324c782c571af40a913ed5ed50ac704f7f8f22d298f3072661a4d67d3f2061d6a5529a2c695b1d96bd2fa7916ca9bd95e34b90138df066943749b5f6d56bbb7815933d", 0x76}, {&(0x7f0000000900)="3e52a30ababc3fadd29af98ceb426f47cd63e4def0c4c54c6e03efe416a66f435548875bc82573358c87d3b8dc1f93bb040f80dd26b39d72542ea2cf684dfaf07c24b50ee1e9b5e34e117eb84e825807deee8ce0d89488ca612ac9493a6f5cdfeb46ea1baec2d6d2f568b4ed46fbde94916c15ec9416640103aa1a73087c60f0a29cc6ef6e1f7c275a86775de666ef56c8fd45142a367bedf2e2d8d8755515afd54132576d62e3b781f0b0b0b2794e6462f74b3ee6edb2b2b523508888edc01d58a3d82c98c896a04c4babf98eb93fb71ca3b3e0518888ae39419a7e97ab2ac520fdf1f1154a0b2d", 0xe8}, {&(0x7f0000000a00)="8d24c777c23f94bce87d8f51eba78511af58237928aa515a19272c625c7d9af2fb0f07d4fa8a46b85870b592bd05f120cf597afe4b43389afa53da8ea7d22cefb4406a987cb73ce1336d8512a6d9b6535b119b5710348d8fdf652fc679af8db567f8af278e2d4b80b2107e241f60ebe93030bd52fad94195d88a57a055c7f744863a31e5ca4542a98a286f0f39d169017374d0ae6c3bfd2b945618dc44e838ea141e449e5b0cf837d6d2c8a6e75e95b47e5e7796ef55d02fe3ae131ed35f7bca98514fdd8b660bbd668136d18876433ec40fab458c05fb82bd510c0b7498258db1474904c1301510a2629d343110ce7eccd35c6c1c4529ecfc", 0xf9}, {&(0x7f0000000b00)="6c50b321105695fd5ec1628cfe59f4aeee3a", 0x12}, {&(0x7f0000000b40)="14890c389c81e0d9f5d4dd4270c289d127b01e1f254019d4c4c6dd6618afe66a286622", 0x23}, {&(0x7f0000000b80)}], 0x7, &(0x7f0000000ec0)=[@rights={{0x2c, 0x1, 0x1, [r4, r1, r4, r4, r1, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x30, 0x1, 0x1, [r4, r2, r5, r2, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r5, r5, r2, r4, 0xffffffffffffffff, r4]}}, @rights={{0x24, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x1c, 0x1, 0x1, [r5, r5, r4]}}], 0x138, 0x84}}, {{&(0x7f0000001000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001080), 0x0, &(0x7f00000013c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0xb8, 0x4000804}}, {{&(0x7f0000001480)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001500)="d9fd06413406b20f94cd21bda7de1324a6209376fe4358d7c5513a22a6e36d391e00d5bb92d10169ac676dc58155e5f0879cb95c0bbd05b7462ac0b2f447ee72f2f6455525d7371c0a1ed0a028", 0x4d}, {&(0x7f0000000c40)="fb2d2fd5408b0966992266ea1e2d58cb4ed9f8804a49521341d5432b22e0703aee97c1874feee6e247820c6882983fa7353aa3ea64a49998b2c894558e9608f75a6b41d97f9e5c6902cf17723c8741927db81cb9458a7fa45e0e17a51171b10afd2cae1569ae721ffe75e3095854eb9ade0aa8cddbe39ca553bf09048d3023a02f69f2f4aa4707ccce792d5892ce8ae34dfafc268eebdc130e9dec63bc6629c73d4a7368fd542246ee1840d99316bb220cc5feb984efddb9d0290224e14c", 0xbe}], 0x2, 0x0, 0x0, 0x800}}, {{&(0x7f0000001680)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001700)="3d402a211874187d3a5c4413d5ced43d31389d9be32e6e3f0be783ce8912985da55b3459679728fd666033165e4db87421ed9536d56b55621fef6b8ce4", 0x3d}, {&(0x7f0000001740)="0d605f18ce219228f42fa2466089cd25c2b92aefeb9af9e0aafa80160862210a079d85950978619b40ade6395615627196d5f8f1f52ecbdacf4c9b0e7a4023f7385776172b351ecda76afb08f504df44db9fda8ecbd4518eef2d91f1325c852f2fbc611145bb46f716392647996330c59ea058d62e54b8b8ccfa8ce00cce70d6b681f29e606d35e39b", 0x89}, {&(0x7f0000001800)="4dd40811c4e49b355ffa72f01ee80d73c88cbb0b600ae595a16de2ecc31b919891bd405b3af4297da02206249bbda280011c0824675f7ff55dc9994605e560e84e19fd0d00dfc71309a1e6dad98a471ba529ad5e6593a37ebeb4821fcfa36db95dbd1c44b33919d2a641942e3e9b67e526f21bda31c8cca95a7b8ce8d91e32c363aa8cbaacb444cd51ec2267e48600a4b00df13aeb440f0fdf7337b23db5b886ce4f8de1bcfbe47407fb6fa6f165841e5561333212bf2f48b0f15bfaaf0fd7a575136289e15684cfe27a0f164ef1b34d1c36d9226ffd804bc8b96c12163e1b78d37adf9198b1", 0xe6}, {&(0x7f0000001900)="7af6eae27bdec0df4c2bc41b2c3661cd89bffa914b98e94a0f9d8749f2083331dd26519ce0ae238aace21fb6d6564d405c27210587978093c7029f15b85fd12f80778bb99eff2d3ee57d495fc7254d1ed08bf8194604a94dd096367cfa2d09d8abc4956d93d13dfc5cb6ea71bd46f1da46ec5943d7de6a619441ed38f9a95ea1ca7a80d854924b722de71e68948523b10081f370c8420bc8628e62b586b9b27d77e90c2a93391aad85e7cafad7d55c426a695cc4289ad67284", 0xb9}, {&(0x7f00000019c0)="88dff23d4db24299c183419967ac323df0554c0b30f9d507257be26b0ed55520a8f504b306547bea1a9bbce0f49d70ea416e52f075a20345f13814d7e95c9bdb99ec6be5c29a160c975524dbf484e62f1d475d1a1a163797c8b435d541bdc29a131e2c8f98638e462d5a13296e06d6debf09", 0x72}], 0x5, &(0x7f0000001b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0x120, 0x20048005}}], 0x5, 0x4048001)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000d00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, 'contention_end\x00'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5})
r6 = creat(&(0x7f00000004c0)='./bus\x00', 0x40)
write$cgroup_int(r6, &(0x7f00000003c0)=0xd9d, 0x12)
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x11}, 0x2, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = add_key$user(&(0x7f0000000100), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="1af4e31620ffced933b511d51d1e404266aa743b75b91c5e8f03aacf9db912513bbef39858a3", 0x26, 0xfffffffffffffff8)
keyctl$assume_authority(0x10, r8)
syz_io_uring_setup(0x419f, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, r7}, &(0x7f0000000240)=<r9=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4)

10m25.498165072s ago: executing program 9 (id=1920):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x4, 0x4})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x6, 0x80000001, 0xb, 0x2000, 0x1})

10m25.047984972s ago: executing program 9 (id=1923):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7660)

10m24.211979535s ago: executing program 8 (id=1925):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000840)=[{0x0, 0x60}, {&(0x7f0000000640)="c32b6b", 0x3}], 0x2}, 0x0) (async)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) (async, rerun: 64)
close_range(r2, r0, 0x0) (rerun: 64)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async)
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) (async)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9})
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000380)={{@my=0x1}, 0x8199, 0x2, 0x1, 0xfffffffe})

10m22.479792469s ago: executing program 40 (id=1925):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000840)=[{0x0, 0x60}, {&(0x7f0000000640)="c32b6b", 0x3}], 0x2}, 0x0) (async)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) (async, rerun: 64)
close_range(r2, r0, 0x0) (rerun: 64)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async)
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000180)=0x28) (async)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9})
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000380)={{@my=0x1}, 0x8199, 0x2, 0x1, 0xfffffffe})

10m21.692040787s ago: executing program 9 (id=1928):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e21, @private=0xa010102}}) (fail_nth: 8)

10m19.947608352s ago: executing program 9 (id=1932):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
statx(r0, &(0x7f0000000080)='./file2\x00', 0x1000, 0x100, &(0x7f0000000240))
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000250001002bbd7000fbdbdf25020000003e350318d08d11f3f04acf14ead765c83682fd9d9eba349e3c8bb1cae6d38b3b9b86a8a80f7355b353c40fd40945384fcd5a311f5572a7c438f7da9fca33f6ba279cee7f8a5f3e24a78d9390d6459536e8dad6adeda442eadb26c0b06f6416f4783fb9afb5f4ae1579845e91cc591b645b1b3a8bd632ee41"], 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f0000000480)=ANY=[], 0x11, 0x221, &(0x7f0000000680)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, 0x0, 0x0, 0x80700a, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd"], 0x1c}, 0x1, 0x0, 0x0, 0xc880}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)

10m19.71415588s ago: executing program 9 (id=1934):
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0xd8, 0x1403, 0x400, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040895}, 0x40800)
recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2}, 0x40)

10m14.821782822s ago: executing program 9 (id=1990):
r0 = socket(0x18, 0x3, 0x0)
setuid(0xee01)
setsockopt(r0, 0x1000000029, 0x3c, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4)

10m14.274046485s ago: executing program 41 (id=1990):
r0 = socket(0x18, 0x3, 0x0)
setuid(0xee01)
setsockopt(r0, 0x1000000029, 0x3c, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4)

7m55.695393698s ago: executing program 4 (id=2317):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$eJzs3c1vHGcdB/DvrNeuN1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeIit0LgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmftXXv9lthrBz6faDzPM8/L/OaZZ2a866w2wP+t6xfSfJgi1y+8sVzm11Zn22ursy/Uxe0kZbqRNLurFHeT4lEyV5YXfUv61lt8vHjtrc8er33ezTXrpao/tlO7IYbUXamXTNf9TQ9tOb7XXazU4eXFJDfq9aCJvfY1ULEctPP1Go5cZ4uV/TTfz3ULHDO9p1PRfW5uMZWcSDJZ/x6Q+u7QGF2Eh2NfdzkAAAB4Tn1676gjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdP/f3/Rb006nWmU/S+/3+it61OH0Nze6758FDjAAAAAAAAAIDR+PqTPMlyTvbynaL6m/+5KnM6X3SSL+X9PMhC7udiljOfpSzlfi4nmerraGJ5fmnp/uX1lqXhLa8MbXllVEcMAAAAAAAAAP+TfpnWxt//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOCiSse6qWk7X60yl0cxGWVaSfyaZOOp496EYtvHh6OMAAACAZzL5FG2+/CRPspyTvXynqF7zf6V6vTyZ93M3S1nMUtpZyM36NXT5qr+xtjrbXludvVMuZX6w3+//e19hTNQ9jFW5YXs+W9Vo5VYWqy0Xc6MK5mYa3X2fT8724umLq89HZUzF92p7jKxZD2u5s99v9y7CgRh8K6KxQ83WRnDJ+ojM1LGVLU91R6Co3qhJNo/ErmenOZCbqnodX9/T5TTW3/k5fQhjfqJel8fzm0Md8/1aH4lGqpG40pt95TWz80gk3/jrn96+3b777u1bDy4cn0Paxdg22zfPidm+kXjluR6J5j7rz1QjcWY9fz0/yk9yIdN5M/ezmJ9mPktZSKcun6/nc/lzaueRmhvIvblbJBP1eemes73ENJ0fVqn5nKvansxiitzLzSzk9erflVzOt3M1V3Ot7wyf2Tbu6tiqq76x+arvnem/DQ3+/DfrRHl3++3GXW5upyPebnYelO69vxzXU33j2p31j9drneq7Dmb6Ruml3uiMD+38ae6Nza/WiXIfv9rlOTFaU/VIlBdQ7ynRi+7l7kg0q2fR1nn+h07ZLu27nc7t+fe26X9lU/61el1Oq9Wv7Va7Z/ipOFjlfHkpk/WdZHB2lGUvr99l+so6G3O5Wzb4xC3bnanKiqJ3pf4496oJsPVKnah/h9va05Wq7JWhZbNV2dm+soHft3Iv7dwcwfgB8DT+8fZ6cionJlr/an3a+qT169bt1huTP3jhOy+8OpHxv49/tzkz9lrj1eIv+SQ/33j9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPL0HH3z47ny7vXB/eKKxfdFAopXNW3breVOiqL/QZ3+tjm9iMsnAlup7jkYeRmtzGFsSnV8kIx+f3pcIDq/zuzLR3DKjhiXmBrb8eWuHH+0zwmJv18UhJhoZ7U7HMnwCHOFNCRiJS0t33rv04IMPv7V4Z/6dhXcW7o5fvXpt5trV12cv3VpsL8x0fx51lMBh2HjoH3UkAAAAAAAAAAAAwF4N+2DAuRd3+9DInj7j4X8WAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfi+oU0H6bI5ZmLM2V+bXW2XS699EbNZpJGIyl+lhSPkrl0l0z1dVfkj4/SGbKfjxevvfXZ47XPN/pqdusnjXq9vZ1Lk6zUS6aTjNXrZzDQ341n7q/4T+8YygH7otPpzD1bfHAw/hsAAP//msX1EQ==")
r0 = getpid()
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
modify_ldt$write2(0x11, &(0x7f0000000140)={0xc60, 0x0, 0xffffffffffffbfff, 0x1, 0x3, 0x1, 0x1, 0x1}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0000001})
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f0000000040)={r2, r1, 0x10001})
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x3)

7m55.371704543s ago: executing program 4 (id=2320):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f0000000200)=ANY=[@ANYBLOB='namecase=1,discard,errors=continue,uid=', @ANYRESDEC=0x0, @ANYBLOB=',=', @ANYRESDEC, @ANYRESDEC, @ANYBLOB="f32be912e474ad5bd8cc0a19c9d7610b52abc6d5058fd8ecb25b45c12a91c16c105e53a45c82", @ANYRES64], 0x80, 0x1511, &(0x7f0000001ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x28, r0, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a18100400000", 0x17}], 0x1}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100), 0x4)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000140), &(0x7f0000000040)=@udp, 0x3}, 0x20)
open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)

7m53.556504358s ago: executing program 4 (id=2324):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10)
r2 = socket$inet6(0xa, 0x400000000001, 0xfffffffe)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000001880)=@ethtool_stats})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x25, "4372071e845c1497c855383000000002000000352a72ee4d37968b26680000000055965737"}})

7m52.70384879s ago: executing program 4 (id=2328):
r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000046, &(0x7f0000000cc0)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@noload}, {@delalloc}, {@noload}, {@resuid}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
r2 = open$dir(&(0x7f0000000100)='./file1\x00', 0x2000, 0x40)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000d40)={0x8d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x81, "3814387ac43b69"})
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001d40)={{r4, 0x1, 0x1ff, 0x101, 0x9, 0x3, 0xb54, 0x80, 0x6, 0x8000, 0x7, 0x9, 0x1, 0x3, 0xd40}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2600, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_IOAS_MAP(r10, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r11, 0x0, &(0x7f0000000000)='T', 0x1, 0x3})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r11, 0x0, 0xffffffffffffffff, 0x1})
r12 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x440800, 0x0)
r13 = syz_clone(0x400, &(0x7f0000000bc0)="58cf1e6aa0bc832bd4827e3c4d986182982b991e040d49bafdf31529347454025d2e60c89319a57522ca092d1d3803d462267002337a7e8c4c5f95fcbafc969901714f348b3f801cee0d4f667209fd5e5c581f1293d5c6e66b3d9720a2379017069f7fca3414fdbbd2f6741dc760d18859ca33f37e66c5", 0x77, &(0x7f0000000580), &(0x7f0000000680), &(0x7f0000003200)="5df1387c5389e6c86c8defd7848fdc256475d49ad6f86ffa5ee353f6284a094f52439d29697f0e3a86ce53711d41380b3beebbbc502ae2de6c6bc554d8a843c2f5fa282752f39f8fee817c85fe840aee671a0f210cdc1982e917afa8838fe7f82cdd760cf7bb11e884f3f914d131f3d064959b7773c90e06a95da89316479d6b3dae7cf9a358486ac48ddb82f349c87d3345143a35146aee12f6aef6bb6317dee651040b68f0c238505edc2296789bf2ca7a692ef356d5d9d13f7e89a005a150f1a5d376edb9665f27e899a087094bf0828a8aa21b539e5f8073801c8044400dd760")
lstat(&(0x7f0000000c40)='./file1\x00', &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, <r15=>0x0}, &(0x7f0000003380)=0xc)
read$FUSE(r1, &(0x7f00000033c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}, 0x2020)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000005400)=<r17=>0x0)
sendmsg$netlink(r1, &(0x7f0000005600)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000300)={0x58, 0x16, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x26, 0x0, 0x0, @pid}, @typed={0x4, 0xc7}, @nested={0x31, 0xdc, 0x0, 0x1, [@generic="8f50a2f54d06454804b20d2b3c4363ea61d4a4cab00346a88f695d1148bd91", @generic="5168c93c7c916f706997eb523d1e"]}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x81}]}, 0x58}, {&(0x7f0000002d40)={0x49c, 0x2e, 0x400, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0xa7, 0x0, 0x0, @uid}, @nested={0x105, 0x27, 0x0, 0x1, [@generic="e3653a0844bf417d1e79030c74ece2e9a548556cebea8b611772a972c28bc5d4ee01ce2142e5ec4c56e18cc67dba5f032790e635fbfa13b595647f0ae41bba04fb560a67e404bbe9c52c2f74e78c4e07d1104db06dbac56e82f14f7a36df43c33d3c97051a855784f578528cd058f0766d2b5b965f62b96691c9f8565a204d7746e66c3c4869d115c3012475a7e78eef87085711dda4fde47492ceda7572137ed6e4f54651db25c830082ec10956b29c18eee49d3ca0ece310144eb5d2e2cb9e53436dda0309b56eb191d24d8134dde6459f7f3b7f40fda2df52c322f973e76e4b", @typed={0x19, 0x8d, 0x0, 0x0, @str='#{-%$(&[\x7f+]/+]!\xf5(\\@*\x00'}, @nested={0x4, 0x2}]}, @generic="be3697256bef590fab9f647757a16718bdff7cd3e39352504bdabda48572758bd79b0cfbdcc609f3fc8351b4272c00058b0b6bcd101bd90128c0f01b5a6af9b1d68699eab0322bd85b2afa64c3ca6cef9c375ad66d8c8dbd52e81a68fd70e5f05db8135b73c1942ebf137da0b2717fb1b2d107ade4eed5b490c14140f144832dd7fc11e9f72bb43e89fbe8ffe8039f65f1aa20e911e758f57b063f4c1859126577173238238fd408dd4dc8fd8e7d5860158bc2b064ffbb3d381f57164ede5510659c489163b5644a15a8a20a234c585979756cb7785ba2726e7f943f3dc402781f842d26ca076bdd60734d", @typed={0x4, 0xc8}, @typed={0x8, 0x147, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="d3424ad83aeb6cdc731ab4e806", @generic="7b5b8b5db748ce5a950b1c3ac2ff7681ffc37ef5a1251c76dee70fb2cc9ad672c716d140bb11eafb440eac3c723bf6bf2e91e59c11401960d4553eb0f9284976d3b7f25ed1c497f5a257a4042e2a9f5ad7e9071a2d830f449c79d8ec22a4c0fae79214caea2185dbce1618c63669970ffe2fed885723864a9eebb54e91b2fcf5bf", @typed={0xc, 0x13d, 0x0, 0x0, @str='^,&{[$#\x00'}, @generic="028f13441f46570d161abb4fe5aa52990186b694851b389b0d2c5b410b0bbbc97c75773403f0ce964ffa5461146b6a87a75da170f0ec97b065f7358b5b1437425f648f37417af81125c65480327a777ac11e3aa9f40eab2bfb56f2422254b9e71d5b405d983542fec47d3fe42c60b918c26f2c479537b845dec025a8fb66c2187ca6d24f1c3aee46474d6bb05b7d524fab62dfe7251c4b27b4f5c5b6518c6b50c50038cd9551614007764f8bd5f22314e3cf5ffb2a76a3b576f6e3e5e4e136760cc7ed2e001923a94c06536024e6c423ad9bbf3173302f1b6d9697199dbb83fce17598507918fda1982d19e86524bdb6a57d594e", @generic="0adb4020ba19e3535ba5f96422fc1ef1d2ff04dd34842f5cfc84c3d1543664ca85e4132ca546105e9022fd6fb67d89ba9d8cb84c4452f264b14583b5c44d5c03340d662c8c85a3407364f4269fff6d45f7c5f0b9e6ef5acf757b7fbba5861fd00976c10fe5e3e8dec1906ac045cd406604a470c3aaba7ef72c569cf0809a5c37bb1d48aa66af33cc977935bc398c827ab50882adee126f3ebae3a32760f60408fde485a5d5dce8c91d5444953c1f766d59faf73f9ef13df847c4dfb421d4a93ae3bc6301ad421ec07da9efeb9abe29ed24b43a74d98609fdac55f3d6a0fb9aef957063d7931c36d1c068bb47fca3af26ef49fe7c34"]}, 0x49c}], 0x2, &(0x7f0000005440)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r7, r6, r2, r6, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r9, r2, r8, r6, r3]}}, @rights={{0x30, 0x1, 0x1, [r6, r8, r7, r5, r6, r9, r7, r2]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, r6]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, r8, r1, r3, r2, r3, r8]}}, @rights={{0x2c, 0x1, 0x1, [r10, r12, r1, r9, r7, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, 0xffffffffffffffff}}}], 0x188, 0x880}, 0x20000004)
getdents64(r3, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000280)={0x7d199583c41019ba, 0x0, [0x6, 0xfffffffffffffffd, 0x3, 0xfffffffffffffff9, 0xc9c2, 0x0, 0x9, 0x7]})
r18 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r18)
ptrace$getregset(0x4204, r18, 0x2, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20})
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x2, 0xb69e, 0xbdd})

7m51.683569742s ago: executing program 4 (id=2330):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff07, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}})
syz_io_uring_setup(0x371d, &(0x7f0000000640)={0x0, 0x0, 0x1, 0x1, 0xffffff}, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
ioctl$KDDISABIO(r5, 0x4b37)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x19, &(0x7f0000000740)=@raw=[@generic={0x7, 0x3, 0x2, 0x6, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, @tail_call, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$unix(0x1, 0x7, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x8000017)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$TCSETS(r7, 0x40384708, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2bbeb000)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r8=>0x0}, &(0x7f0000000300)=0xc)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000200)=0xffffff03)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r10=>r2, {r8, r9}}, './file1\x00'})
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2705c2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r10, 0xc0385720, &(0x7f00000004c0)={0x1})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600), 0x2, 0x4}}, 0x20)
openat$ttyS3(0xffffff9c, &(0x7f0000000380), 0x40600, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
ioctl$KVM_RUN(r11, 0xae80, 0x0)

7m50.633382335s ago: executing program 4 (id=2334):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0xff00}, 0x12060)

7m50.350471458s ago: executing program 42 (id=2334):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0xff00}, 0x12060)

6m25.393914511s ago: executing program 6 (id=2553):
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000109000000000000d7ef962b03000000080006"], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

6m25.099365937s ago: executing program 6 (id=2557):
r0 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)='R', 0x1}], 0x1}, 0x24004819) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000180)={'netdevsim0\x00'}) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r0}) (async)
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x121400, 0x4)
sendto$inet6(r2, &(0x7f0000000680)="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", 0x1000, 0x4040000, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @private2, 0xb4f}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x100, 0x100, 0xd9c, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r3}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70022000000090507"], 0x0)

6m23.33517062s ago: executing program 6 (id=2563):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (fail_nth: 6)

6m22.686493616s ago: executing program 6 (id=2566):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x404, &(0x7f0000000380)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101090, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0)
pivot_root(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r3=>r2, {0x9, 0x5}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xfc, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x71}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1c}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xf025}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x11, 0x9}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12015002cb3a6a202505a0a4bcf40102030109021b0001050600040904da0101fc50fd010905c597"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000600)=0x3)
ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000000080)={0x7f, 0xffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000000000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x7, 0x0, 0x40f00, 0xc, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

6m18.543890164s ago: executing program 6 (id=2582):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800)
close(0xffffffffffffffff)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x50)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x40}}, 0x4804)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="240000002d006bcd9e3f17aa04001b0000010000ffffffff000000000000ff7f00000002", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

6m15.572072164s ago: executing program 6 (id=2588):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
statx(r0, &(0x7f0000000080)='./file2\x00', 0x1000, 0x100, &(0x7f0000000240))
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000250001002bbd7000fbdbdf25020000003e350318d08d11f3f04acf14ead765c83682fd9d9eba349e3c8bb1cae6d38b3b9b86a8a80f7355b353c40fd40945384fcd5a311f5572a7c438f7da9fca33f6ba279cee7f8a5f3e24a78d9390d6459536e8dad6adeda442eadb26c0b06f6416f4783fb9afb5f4ae1579845e91cc591b645b1b3a8bd632ee41"], 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd"], 0x1c}, 0x1, 0x0, 0x0, 0xc880}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

6m15.213039714s ago: executing program 43 (id=2588):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
statx(r0, &(0x7f0000000080)='./file2\x00', 0x1000, 0x100, &(0x7f0000000240))
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000250001002bbd7000fbdbdf25020000003e350318d08d11f3f04acf14ead765c83682fd9d9eba349e3c8bb1cae6d38b3b9b86a8a80f7355b353c40fd40945384fcd5a311f5572a7c438f7da9fca33f6ba279cee7f8a5f3e24a78d9390d6459536e8dad6adeda442eadb26c0b06f6416f4783fb9afb5f4ae1579845e91cc591b645b1b3a8bd632ee41"], 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd"], 0x1c}, 0x1, 0x0, 0x0, 0xc880}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

2m28.756452891s ago: executing program 5 (id=3184):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x1, 0xb7f, 0x4, 0x2}})

2m28.426838046s ago: executing program 5 (id=3187):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x319, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xe0, 0xf8, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0xd5e, 0x4, 0x1, {0x22, 0x79a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x4a, 0x1}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x142, &(0x7f0000000b00)=ANY=[@ANYBLOB="050f420105961003e55c5863952067215898860deb62ee58d8e524d337f23f0eddfbc33cda27a39508e82a2b1fb3e2b31f61a08313f0777e9dec83df7054c212dfc34cafdbe574494b47e776d185fef6ee61fdd6d1d81795172757c2b369b4908a5f31f027c24930ddb6b2036871ad237ef969da343d4a27ff472f144a909eff51a16a4706ecac52a3c4590c981ef94c14100408d76f6cc2d832d0525b2aeed074cd93e678100a0f27030a01bbe459cf87a353799b439c92c4ef6b591da19aa10f2394ebce235a319534e8f7fc2a271b21c6f93495051aee398adcb28a623987092e0900d119d9b475501b46f654"]})

2m26.91762695s ago: executing program 5 (id=3192):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x22}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8091}, 0x24044884)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x20c6}}]}, {0x0, [0x61, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5d67, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x200000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c)
ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0)
ioctl$UI_GET_SYSNAME(r7, 0x8040552c, &(0x7f0000006480))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x10, @empty, 0xe}}, 0x0, 0x9}, 0x90)

2m25.807849324s ago: executing program 5 (id=3199):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="dc8a5164e8889adc02385cd72cdafef02ad1d74bc37450297ff9a79e613f6bd7b9e46916c9c71e2ff810e5ed84e022408d2afbd64a7d9b2f0c601381179d5ff0fcb0238cc164e9ce2d47df40242dbadcdf8507745a1ba2e6a20f1f355b4b27b542b53be88a747228ba1987695b8315957f62581bb49bda69426b1f3aeca6f56d1457c82e", 0x84}, {&(0x7f0000000600)="cafe61392abe66a0d751bcb7e4fa6349b6d2b2e325259108e06d2fa5ec1f0cb83505572989cf03b186a4ab1ed2d5f6b374e0ce3e0b10ad623af803db3d996513c47119cc7006064730498ce2c21100729168429eda99371f51456b097b834ad945a00aa371c7873ef41fc3ddc9e37c00322add1d4b7a2da4c09e7c3ca2af8bdb864620edbd4594e0000000", 0x8b}, {&(0x7f00000010c0)="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", 0x229}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020029bd7000ffdbdf250a000000050033000000000008002b000000000005003000010000000a000910aaaaaaaaaaaa000008000b002f0d0000d5673e45e676ed5185deb0c01408"], 0x40}, 0x1, 0x0, 0x0, 0x2000c084}, 0x4000040)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xd012})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r4, r0, &(0x7f0000000480)=0x3, 0x101)
r5 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0)
sendfile(r2, r1, &(0x7f00000004c0)=0x6d4, 0x7)
ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000480)={0x0, 0x0, {0x2b, 0xfc, 0x3, 0x9}})
getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000200)=""/127, &(0x7f0000000280)=0x7f)
ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000540)={0x35})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000440)={'team0\x00', @multicast})
r6 = socket$kcm(0x2, 0xa, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1be)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff, 0xff, 0xff0000ff], [0xff000000, 0x0, 0xffffff00, 0xff], 'veth0_to_bridge\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x6, 0x2, 0x42}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x141, 0x1c}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}})
mkdir(&(0x7f0000000040)='./file1\x00', 0x211)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

2m25.248549587s ago: executing program 5 (id=3204):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x1, 0xa, 0x3}], 0x10, 0x47ff, @void, @value}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x41a, &(0x7f00000002c0)=ANY=[], 0xff, 0xaec, &(0x7f0000001d00)="$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")
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00')
r4 = fanotify_init(0x0, 0x40000)
r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x54)
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r4, 0x1, 0x40001019, r5, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
getdents(r3, &(0x7f0000000340)=""/183, 0xb7)
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file2\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x1, 0xab5, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x20002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

2m24.779825678s ago: executing program 5 (id=3209):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="980000001c00070c2bbd70000000000007000000", @ANYRES32=r1, @ANYBLOB="8000000a0a000200aaaaaaaaaabb00001400010000000000000000000000ffffe00000020a0001000180c20000000000080007000800000038000e8005000100090000000500010003000000050001007e000000050001000000000004000200050001000300000005000100"], 0x98}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x80, 0x0}, 0x20000804)

2m23.965153717s ago: executing program 44 (id=3209):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="980000001c00070c2bbd70000000000007000000", @ANYRES32=r1, @ANYBLOB="8000000a0a000200aaaaaaaaaabb00001400010000000000000000000000ffffe00000020a0001000180c20000000000080007000800000038000e8005000100090000000500010003000000050001007e000000050001000000000004000200050001000300000005000100"], 0x98}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x80, 0x0}, 0x20000804)

8.055669645s ago: executing program 2 (id=3644):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e22, 0x4, @loopback, 0x8}, @ib={0x1b, 0x0, 0x8, {"7d0300"}, 0x80000000, 0x0, 0x6}}}, 0x118)

7.714764573s ago: executing program 2 (id=3649):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x2, 0x1, 0x2a}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

3.610022057s ago: executing program 0 (id=3688):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)}, {&(0x7f0000000fc0)="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", 0x46e}], 0x2}, 0x8400)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x27, 0x1, 0x0, "3a8e00000034b52ba75066c27891ca55e21f0000000000b2b678d200", 0x32344d59})
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, &(0x7f0000002000))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
readv(r1, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/47, 0x2f}], 0x1)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x4080)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @loopback}, 0x0)
sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)='L', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)="160e9339f0e8ce495f8727b821020d6f269522d78620ec8160cee3de61db14a8ff163a1b53dbdb4c6c5047d0a31403", 0x2f}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8090)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)

3.363799503s ago: executing program 0 (id=3691):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082)
r0 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)

3.171198375s ago: executing program 0 (id=3694):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000002080500000e0000000000000a000007090001"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050)

3.031896792s ago: executing program 0 (id=3696):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000006d00)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x8840)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.08720101s ago: executing program 0 (id=3705):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

1.815533936s ago: executing program 0 (id=3708):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(cast6-generic)\x00'}, 0x58)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000006113958f819d8b714d53ed127782b500fb4aac7e061a39ffc3fabb241fb834c010224c0740281ecf113c7a736536c84af6e9a83725b30dfbe0a35861582f2046e64f7ca0ef13968d1a7af5e2331f76cd9ec288ac347224118f9db367dec3f424c19adbca831e5ec322e15de04fff057dd45a3272651cffb5e52c7c5a05bacc2e900e1ab6ad46f7a6f555104d46b85c547267d98078bf1927722d664fbdcaba5c5af90bff93b887c06b17c0ecfac1e2bcbe1a22f2d32faa365a373d01fef608683a297bfb27e36d7f5878a3c2053c729f84ebe79af0e188a7239ca1909ee43cafb3f1014edfc1c865b5854ca00000000000000000000362d811d8115befdf57f772f9c0a6e06c012593551efca2c8e81b306d9c5f7f2f63d80865222c2c6d3db5c9d7d4d47a316652115bbaa03b00907e1760cdcfc92220990bc987ba771ac68f10430432f1a44a228774886f5bf2edc2f93ad454e182f535c87654b7af0f0cd63486025f33dea9ba9fc8e813e6bb5d7dbe8ec919171641d5d9cc73aa41f527da6aa45a8621ca0a23e4a6afc754dd9a6cef267e8087a41e4720fd5e86c03e0d39b433e2cdb57bd2486372d3978f0793d65fec52e0ab463806c2caf1e4ea1e8e154"], 0x2c}}, 0x24004045)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r3, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xc0, 0x0, &(0x7f00000000c0)="414478da2d713ea896b4eb12f8732c7b6e78fa26e8f769682175fb4f7310adda83b431628003233c7e8ba8f9839b0b147259bd2011c5e13d1e29f3581571486653fac0e30448a9cf6c81653de7a1fe0712ada1048f8e8cb6142211b14cf9165ac0fc1d831d3cda593379e9d993b5f6720f6d34178b1cd76ce595197d1d2d154bba0d38506dc43440d376aba67c40b33b46f16a6019177d3eedad1d944102ee7a37e6ab2d40fc6d84900a3f7524cc3106ef15b5b35b12b555b4cff175ca6c81a0", 0x0, 0x8, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)="6b63147ca0f3a7f35cf8ed1435587e439954cac302b7ec8ca47d552e8dc3efbfbf1e43100f04659e2886f0a9b01c07b5ddc4b2e7fc5069b301dba3f7f163afe3c272cb3cf25b4f0ad48d1311e91ab1027063264a6af3cc16d1aa34c28249ed82cafea0e2b58ce0a903c2eef6c4d1cbd721d33c1ca6d711b73f153283c88f0fb4ace2b8a838bffe3208015643f1663c1c77bafb33caa44f93700f29c3f64c1d180f986eae47ee8f66acf080f04b8fe251722d2946549f44adf394069c076344af", 0x2, 0x0, 0xa}, 0x50)

1.623821693s ago: executing program 1 (id=3710):
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x5, {0x6, 0x0, 0x7, 0x4, 0x40000, 0x6, {0x1, 0x0, 0x1000000000c4, 0xfffffffffffffc00, 0xe82, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x6000, 0x0, r2, 0x0, 0x800, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x100, 0x0, 0x0, 0x20, 0x7}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x800, 0x0)
ioctl$FIBMAP(r3, 0x401870cb, &(0x7f0000000040))

1.552551112s ago: executing program 7 (id=3711):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
syz_io_uring_setup(0x24f9, &(0x7f0000000200)={0x0, 0x4, 0x10100, 0x1, 0x32}, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080))

1.174256147s ago: executing program 1 (id=3714):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

1.16532758s ago: executing program 7 (id=3715):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x3, 0xffff, @vifc_lcl_addr=@local, @local}, 0x10)

1.083097589s ago: executing program 2 (id=3649):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x2, 0x1, 0x2a}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

945.840414ms ago: executing program 3 (id=3716):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r0, &(0x7f0000010140)={0x2020}, 0x2036)

868.400989ms ago: executing program 1 (id=3717):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000008c0)="8457", 0x2}], 0x2}}], 0x1, 0x4400c800)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)

850.324603ms ago: executing program 7 (id=3718):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
lchown(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)

811.274122ms ago: executing program 2 (id=3719):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

692.000388ms ago: executing program 3 (id=3720):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x12, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

620.957838ms ago: executing program 1 (id=3721):
socket$inet6(0xa, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000002840)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x1, 0x2019}}}, 0x7)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)

602.055027ms ago: executing program 7 (id=3722):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x2, &(0x7f0000000200)={'trans=virtio,', {[{@ignoreqv}]}})
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

540.119582ms ago: executing program 3 (id=3723):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file1\x00'})

490.355867ms ago: executing program 2 (id=3724):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x1, 0x106)
socket(0x2000000015, 0x80005, 0x0)
r1 = syz_io_uring_setup(0x2de0, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x0, 0x1000224}, 0x0, 0x0)
r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x1943, 0x10100, 0x2002, 0x4000000, 0x0, r1}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x1, r0, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0)

451.153606ms ago: executing program 3 (id=3725):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xaa940)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
ioctl$NBD_DO_IT(r0, 0xab03)

311.947132ms ago: executing program 1 (id=3726):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x240008c0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64410100, @rand_addr=0x64010100}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}, 0x2, {0x0, 0x2}}}}}}}}, 0x0)

310.075383ms ago: executing program 3 (id=3727):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffe0}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0x7, 0x8, 0x94}]}, @TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x6}, {0xfffffff7, 0x3, 0xf, 0x7}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)

255.462292ms ago: executing program 7 (id=3728):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x80700a, 0x0)

96.854259ms ago: executing program 1 (id=3729):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e8162120960001", 0xe5}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a", 0x36}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e", 0xe7}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d0916", 0x2e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)="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", 0x16a}], 0x1}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

50.60453ms ago: executing program 2 (id=3730):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
pread64(r0, &(0x7f0000000080)=""/196, 0xc4, 0x3)

49.982567ms ago: executing program 3 (id=3731):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

0s ago: executing program 7 (id=3732):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

346.799237][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1346.813852][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1347.635266][T19630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3220'.
[ 1347.661081][T19630] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1347.791541][T19634] loop2: detected capacity change from 0 to 128
[ 1347.812279][T19634] udf: Unknown parameter '×ÙPCv2'
[ 1347.837119][T19634] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3222'.
[ 1347.855957][T19634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'.
[ 1348.189629][   T30] audit: type=1326 audit(1748199648.928:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19620 comm="syz.3.3218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5170b8e969 code=0x0
[ 1348.789040][ T5845] Bluetooth: hci0: command tx timeout
[ 1348.877586][T17405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1348.889972][T17405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1348.900807][T17405] bond0 (unregistering): Released all slaves
[ 1348.938743][T19627] 
: renamed from bond0 (while UP)
[ 1348.977721][T19644] FAULT_INJECTION: forcing a failure.
[ 1348.977721][T19644] name failslab, interval 1, probability 0, space 0, times 0
[ 1349.041381][T19644] CPU: 1 UID: 0 PID: 19644 Comm: syz.2.3225 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1349.041414][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1349.041428][T19644] Call Trace:
[ 1349.041438][T19644]  <TASK>
[ 1349.041458][T19644]  dump_stack_lvl+0x189/0x250
[ 1349.041486][T19644]  ? __pfx____ratelimit+0x10/0x10
[ 1349.041512][T19644]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1349.041534][T19644]  ? __pfx__printk+0x10/0x10
[ 1349.041575][T19644]  should_fail_ex+0x414/0x560
[ 1349.041605][T19644]  should_failslab+0xa8/0x100
[ 1349.041632][T19644]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1349.041655][T19644]  ? skb_clone+0x212/0x3a0
[ 1349.041684][T19644]  skb_clone+0x212/0x3a0
[ 1349.041712][T19644]  __netlink_deliver_tap+0x404/0x850
[ 1349.041760][T19644]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1349.041797][T19644]  netlink_deliver_tap+0x19c/0x1b0
[ 1349.041833][T19644]  netlink_sendskb+0x68/0x140
[ 1349.041866][T19644]  netlink_rcv_skb+0x28c/0x470
[ 1349.041901][T19644]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1349.041935][T19644]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1349.041980][T19644]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1349.042013][T19644]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1349.042054][T19644]  netlink_unicast+0x75b/0x8d0
[ 1349.042097][T19644]  netlink_sendmsg+0x805/0xb30
[ 1349.042143][T19644]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1349.042181][T19644]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1349.042204][T19644]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1349.042236][T19644]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1349.042271][T19644]  __sock_sendmsg+0x219/0x270
[ 1349.042304][T19644]  ____sys_sendmsg+0x505/0x830
[ 1349.042334][T19644]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1349.042368][T19644]  ? import_iovec+0x74/0xa0
[ 1349.042403][T19644]  ___sys_sendmsg+0x21f/0x2a0
[ 1349.042429][T19644]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1349.042505][T19644]  ? __fget_files+0x2a/0x420
[ 1349.042530][T19644]  ? __fget_files+0x3a0/0x420
[ 1349.042569][T19644]  __x64_sys_sendmsg+0x19b/0x260
[ 1349.042595][T19644]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1349.042629][T19644]  ? __pfx_ksys_write+0x10/0x10
[ 1349.042658][T19644]  ? do_syscall_64+0xbe/0x3b0
[ 1349.042690][T19644]  do_syscall_64+0xfa/0x3b0
[ 1349.042716][T19644]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1349.042740][T19644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1349.042763][T19644]  ? clear_bhb_loop+0x60/0xb0
[ 1349.042789][T19644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1349.042810][T19644] RIP: 0033:0x7fc1c318e969
[ 1349.042830][T19644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1349.042850][T19644] RSP: 002b:00007fc1c3f12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1349.042873][T19644] RAX: ffffffffffffffda RBX: 00007fc1c33b6080 RCX: 00007fc1c318e969
[ 1349.042890][T19644] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1349.042904][T19644] RBP: 00007fc1c3f12090 R08: 0000000000000000 R09: 0000000000000000
[ 1349.042918][T19644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1349.042931][T19644] R13: 0000000000000001 R14: 00007fc1c33b6080 R15: 00007ffc1b0c70b8
[ 1349.042967][T19644]  </TASK>
[ 1349.141529][T19650] loop7: detected capacity change from 0 to 2048
[ 1349.377885][T19650] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1349.436251][T19654] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1349.756890][T19669] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3232'.
[ 1349.766450][T19669] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1350.166283][T19676] loop2: detected capacity change from 0 to 1764
[ 1350.196967][T17405] hsr_slave_0: left promiscuous mode
[ 1350.221985][T19679] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1350.245173][T17405] hsr_slave_1: left promiscuous mode
[ 1350.251432][T17405] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1350.265012][T17405] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1350.409152][T19678] loop7: detected capacity change from 0 to 4096
[ 1350.428351][T17405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1350.477737][T17405] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1350.510595][T19683] xt_CT: No such helper "snmp"
[ 1350.641140][T17405] veth1_to_batadv: left promiscuous mode
[ 1350.662673][T17405] veth1_macvtap: left promiscuous mode
[ 1350.681220][T17405] veth0_macvtap: left promiscuous mode
[ 1350.912767][ T5845] Bluetooth: hci0: command tx timeout
[ 1350.925460][T19686] netlink: 'syz.0.3238': attribute type 4 has an invalid length.
[ 1350.929418][T19688] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1351.085885][T19689] netlink: 'syz.0.3238': attribute type 4 has an invalid length.
[ 1351.140114][T17405] veth1_vlan: left promiscuous mode
[ 1351.216658][T17405] veth0_vlan: left promiscuous mode
[ 1351.854226][T19703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1352.959044][ T5845] Bluetooth: hci0: command tx timeout
[ 1353.237390][T19718] loop2: detected capacity change from 0 to 256
[ 1353.260466][T19718] FAT-fs (loop2): Directory bread(block 64) failed
[ 1353.267942][T19718] FAT-fs (loop2): Directory bread(block 65) failed
[ 1353.274745][T19718] FAT-fs (loop2): Directory bread(block 66) failed
[ 1353.281983][T19718] FAT-fs (loop2): Directory bread(block 67) failed
[ 1353.288882][T19718] FAT-fs (loop2): Directory bread(block 68) failed
[ 1353.295642][T19718] FAT-fs (loop2): Directory bread(block 69) failed
[ 1353.302362][T19718] FAT-fs (loop2): Directory bread(block 70) failed
[ 1353.309102][T19718] FAT-fs (loop2): Directory bread(block 71) failed
[ 1353.315867][T19718] FAT-fs (loop2): Directory bread(block 72) failed
[ 1353.322847][T19718] FAT-fs (loop2): Directory bread(block 73) failed
[ 1354.373590][T17405] team0 (unregistering): Port device team_slave_1 removed
[ 1354.436171][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1354.517071][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1354.588658][T17405] team0 (unregistering): Port device team_slave_0 removed
[ 1354.858519][T19739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1354.884260][ T5845] Bluetooth: hci0: command tx timeout
[ 1355.127870][T19743] FAULT_INJECTION: forcing a failure.
[ 1355.127870][T19743] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1355.167574][T19743] CPU: 1 UID: 0 PID: 19743 Comm: syz.7.3257 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1355.167602][T19743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1355.167614][T19743] Call Trace:
[ 1355.167622][T19743]  <TASK>
[ 1355.167630][T19743]  dump_stack_lvl+0x189/0x250
[ 1355.167653][T19743]  ? __pfx____ratelimit+0x10/0x10
[ 1355.167675][T19743]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1355.167692][T19743]  ? __pfx__printk+0x10/0x10
[ 1355.167724][T19743]  should_fail_ex+0x414/0x560
[ 1355.167748][T19743]  _copy_to_user+0x31/0xb0
[ 1355.167775][T19743]  simple_read_from_buffer+0xe1/0x170
[ 1355.167799][T19743]  proc_fail_nth_read+0x1df/0x250
[ 1355.167826][T19743]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1355.167852][T19743]  ? rw_verify_area+0x258/0x650
[ 1355.167879][T19743]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1355.167904][T19743]  vfs_read+0x200/0x980
[ 1355.167925][T19743]  ? __pfx___mutex_lock+0x10/0x10
[ 1355.167949][T19743]  ? __pfx_vfs_read+0x10/0x10
[ 1355.167969][T19743]  ? __fget_files+0x2a/0x420
[ 1355.167995][T19743]  ? __fget_files+0x3a0/0x420
[ 1355.168014][T19743]  ? __fget_files+0x2a/0x420
[ 1355.168043][T19743]  ksys_read+0x145/0x250
[ 1355.168062][T19743]  ? __pfx_ksys_read+0x10/0x10
[ 1355.168076][T19743]  ? rcu_is_watching+0x15/0xb0
[ 1355.168099][T19743]  ? do_syscall_64+0xbe/0x3b0
[ 1355.168125][T19743]  do_syscall_64+0xfa/0x3b0
[ 1355.168145][T19743]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1355.168165][T19743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1355.168183][T19743]  ? clear_bhb_loop+0x60/0xb0
[ 1355.168212][T19743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1355.168229][T19743] RIP: 0033:0x7f6c0ed8d37c
[ 1355.168246][T19743] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1355.168262][T19743] RSP: 002b:00007f6c0fb96030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1355.168282][T19743] RAX: ffffffffffffffda RBX: 00007f6c0efb5fa0 RCX: 00007f6c0ed8d37c
[ 1355.168295][T19743] RDX: 000000000000000f RSI: 00007f6c0fb960a0 RDI: 0000000000000004
[ 1355.168307][T19743] RBP: 00007f6c0fb96090 R08: 0000000000000000 R09: 0000000000000000
[ 1355.168318][T19743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1355.168329][T19743] R13: 0000000000000000 R14: 00007f6c0efb5fa0 R15: 00007ffeb8b6d3d8
[ 1355.168358][T19743]  </TASK>
[ 1355.401239][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1355.483139][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1355.764824][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 1355.771693][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 1356.640138][T19751] loop7: detected capacity change from 0 to 2048
[ 1356.703711][T19751] EXT4-fs: inline encryption not supported
[ 1356.791888][T19751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1357.264316][T19742] loop2: detected capacity change from 0 to 32768
[ 1357.282856][T19742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3256 (19742)
[ 1357.558104][T19742] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1357.577039][T19742] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[ 1357.591474][T19742] BTRFS info (device loop2): using free-space-tree
[ 1358.141056][T19742] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[ 1358.147624][T19742] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[ 1358.177487][T19742] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1358.227818][T19742] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1358.420165][T19742] BTRFS error (device loop2): open_ctree failed: -12
[ 1358.948496][T19783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1359.224775][T14745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1361.088464][T19612] chnl_net:caif_netlink_parms(): no params data found
[ 1361.312557][T19822] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1361.644100][T19612] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1361.661947][T19612] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1361.683988][T19612] bridge_slave_0: entered allmulticast mode
[ 1361.706843][T19612] bridge_slave_0: entered promiscuous mode
[ 1361.766993][T19612] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1361.786090][T19612] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1361.805018][T19612] bridge_slave_1: entered allmulticast mode
[ 1361.829688][T19612] bridge_slave_1: entered promiscuous mode
[ 1361.996150][T19612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1362.298209][T19612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1363.314282][T19827] loop2: detected capacity change from 0 to 32768
[ 1363.368484][T19827] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3277 (19827)
[ 1363.461154][T19612] team0: Port device team_slave_0 added
[ 1363.479850][T19827] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1363.502178][T19827] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[ 1363.518694][T19827] BTRFS info (device loop2): disk space caching is enabled
[ 1363.527075][T19612] team0: Port device team_slave_1 added
[ 1363.538369][T19827] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1363.544293][T19839] binder: BINDER_SET_CONTEXT_MGR already set
[ 1363.569189][T19839] binder: 19838:19839 ioctl 4018620d 2000000000c0 returned -16
[ 1363.607191][T19839] binder: 19838:19839 ioctl c018620c 2000000004c0 returned -1
[ 1363.716424][T19612] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1363.736896][T19612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1363.830376][T19612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1363.887972][T19612] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1363.909061][T19612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1363.958183][T19612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1364.092741][T19612] hsr_slave_0: entered promiscuous mode
[ 1364.103551][T19827] BTRFS info (device loop2): rebuilding free space tree
[ 1364.125954][T19612] hsr_slave_1: entered promiscuous mode
[ 1364.153158][T19612] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1364.169089][T19827] BTRFS info (device loop2): disabling free space tree
[ 1364.176564][T19827] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1364.187858][T19827] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1364.189925][T19612] Cannot create hsr debugfs directory
[ 1364.233703][T19827] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1364.321269][T19870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1366.352443][T19888] loop2: detected capacity change from 0 to 256
[ 1366.383180][T19888] FAT-fs (loop2): Directory bread(block 64) failed
[ 1366.391492][T19888] FAT-fs (loop2): Directory bread(block 65) failed
[ 1366.398086][T19888] FAT-fs (loop2): Directory bread(block 66) failed
[ 1366.405131][T19888] FAT-fs (loop2): Directory bread(block 67) failed
[ 1366.411919][T19888] FAT-fs (loop2): Directory bread(block 68) failed
[ 1366.420391][T19888] FAT-fs (loop2): Directory bread(block 69) failed
[ 1366.426986][T19888] FAT-fs (loop2): Directory bread(block 70) failed
[ 1366.433964][T19888] FAT-fs (loop2): Directory bread(block 71) failed
[ 1366.440637][T19888] FAT-fs (loop2): Directory bread(block 72) failed
[ 1366.447701][T19888] FAT-fs (loop2): Directory bread(block 73) failed
[ 1367.409275][T19612] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1367.429729][T19900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1367.449950][T19612] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1367.498028][T19612] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1367.526363][T19612] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1367.942048][ T5923] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1368.085825][ T5923] usb 3-1: too many configurations: 122, using maximum allowed: 8
[ 1368.096351][T19612] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1368.123120][ T5923] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1368.141210][ T5923] usb 3-1: can't read configurations, error -61
[ 1368.188828][T19612] 8021q: adding VLAN 0 to HW filter on device team0
[ 1368.239387][T17419] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1368.246592][T17419] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1368.271186][T19913] fuse: Bad value for 'fd'
[ 1368.332631][ T5923] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1368.597164][ T5923] usb 3-1: too many configurations: 122, using maximum allowed: 8
[ 1368.689596][T17407] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1368.697227][T17407] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1368.723323][ T5923] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1368.783566][ T5923] usb 3-1: can't read configurations, error -61
[ 1368.905048][ T5923] usb usb3-port1: attempt power cycle
[ 1369.184483][T19920] loop7: detected capacity change from 0 to 1024
[ 1369.219412][T19920] EXT4-fs: Ignoring removed orlov option
[ 1369.246575][ T5923] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1369.280545][ T5923] usb 3-1: too many configurations: 122, using maximum allowed: 8
[ 1369.368094][T19920] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1369.636944][ T5936] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1369.855508][ T5923] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1369.974966][ T5923] usb 3-1: can't read configurations, error -61
[ 1370.152191][ T5936] usb 4-1: Using ep0 maxpacket: 32
[ 1370.209275][ T5923] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1370.249840][ T5936] usb 4-1: no configurations
[ 1370.397347][ T5936] usb 4-1: can't read configurations, error -22
[ 1370.560912][ T5936] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1370.585932][ T5923] usb 3-1: device descriptor read/8, error -71
[ 1370.621609][T19612] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1370.951928][ T5923] usb usb3-port1: unable to enumerate USB device
[ 1370.960969][ T5936] usb 4-1: Using ep0 maxpacket: 32
[ 1370.994752][ T5936] usb 4-1: no configurations
[ 1371.002545][ T5936] usb 4-1: can't read configurations, error -22
[ 1371.028764][ T5936] usb usb4-port1: attempt power cycle
[ 1371.044098][T19612] veth0_vlan: entered promiscuous mode
[ 1371.070749][T19941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3309'.
[ 1371.093351][T19612] veth1_vlan: entered promiscuous mode
[ 1371.101379][T19941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1371.190371][T19612] veth0_macvtap: entered promiscuous mode
[ 1371.204291][T14745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1371.237913][T19612] veth1_macvtap: entered promiscuous mode
[ 1371.326296][T19945] loop2: detected capacity change from 0 to 256
[ 1371.365144][T19945] vfat: Unknown parameter 's	3:+Do?zd;õ*dhortname'
[ 1371.379416][T19612] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1371.380399][ T5936] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1371.449747][ T5936] usb 4-1: Using ep0 maxpacket: 32
[ 1371.603068][ T5936] usb 4-1: no configurations
[ 1371.608429][ T5936] usb 4-1: can't read configurations, error -22
[ 1371.856888][T19612] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1371.998900][T19612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.019093][T19612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.066243][T19612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.094634][ T5936] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1372.112501][T19612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1372.161224][T19954] netlink: 'syz.7.3311': attribute type 12 has an invalid length.
[ 1372.200189][ T5936] usb 4-1: device descriptor read/8, error -71
[ 1372.304500][ T5936] usb usb4-port1: unable to enumerate USB device
[ 1372.477002][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1372.486402][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1372.525712][T19963] netlink: 'syz.2.3315': attribute type 30 has an invalid length.
[ 1372.543345][T19961] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3315'.
[ 1372.553589][T19961] tipc: Invalid UDP bearer configuration
[ 1372.553657][T19961] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1372.584562][T17404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1372.615935][T17404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1372.642800][T19965] binder: 19964:19965 ioctl c018620c 200000000240 returned -1
[ 1372.688179][T19965] loop7: detected capacity change from 0 to 1024
[ 1372.746421][T19965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1372.801617][T19972] loop1: detected capacity change from 0 to 8
[ 1372.992864][T19972] squashfs: Unknown parameter '000000000000000000000030x000000000000000300000000000000000003'
[ 1373.189753][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3316'.
[ 1373.513790][  T980] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1373.710079][  T980] usb 3-1: Using ep0 maxpacket: 8
[ 1373.779516][T19987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3322'.
[ 1373.856047][T19987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3322'.
[ 1373.875634][  T980] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[ 1373.898115][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1374.104664][  T980] usb 3-1: Product: syz
[ 1374.108899][  T980] usb 3-1: Manufacturer: syz
[ 1374.113532][  T980] usb 3-1: SerialNumber: syz
[ 1374.140058][  T980] usb 3-1: config 0 descriptor??
[ 1374.153507][T14745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1374.374735][T19978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1374.399511][T19978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1374.532399][T19971] loop1: detected capacity change from 0 to 32768
[ 1374.616963][T19993] loop7: detected capacity change from 0 to 1024
[ 1374.637367][T19990] xt_HMARK: spi-set and port-set can't be combined
[ 1374.647879][T19993] hfsplus: Unknown parameter 'GPL'
[ 1374.648212][  T980] gspca_main: sunplus-2.14.0 probing 04a5:3003
[ 1374.767777][  T980] gspca_sunplus: reg_w_riv err -71
[ 1375.533014][  T980] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[ 1375.647512][  T980] usb 3-1: USB disconnect, device number 39
[ 1375.700199][T19998] loop2: detected capacity change from 0 to 1024
[ 1375.874547][T19998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1375.918313][T19998] Bluetooth: MGMT ver 1.23
[ 1376.039152][T17236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1376.259709][T20006] program syz.3.3328 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1376.379897][T20013] macsec0: entered promiscuous mode
[ 1376.418216][T20013] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[ 1376.462620][T20013] macsec0: entered allmulticast mode
[ 1376.506515][T20013] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode
[ 1376.672155][T20019] loop2: detected capacity change from 0 to 2048
[ 1376.688465][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3332'.
[ 1376.697217][T20019] EXT4-fs: inline encryption not supported
[ 1376.732336][T20019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1376.831367][T20025] loop1: detected capacity change from 0 to 4096
[ 1376.845104][T20025] ntfs3: Unknown parameter ''
[ 1376.954482][T20030] xt_CT: No such helper "snmp"
[ 1377.067828][ T1213] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1377.240302][ T1213] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04
[ 1377.255326][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.276035][ T1213] usb 4-1: config 0 descriptor??
[ 1377.294145][ T1213] go7007 4-1:0.0: probe with driver go7007 failed with error -12
[ 1377.575972][ T1213] usb 4-1: USB disconnect, device number 74
[ 1377.988078][T17236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1378.107371][T20025] loop1: detected capacity change from 0 to 32768
[ 1378.145866][T20025] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1378.170149][T20025] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1378.204462][T20025] gfs2: fsid=syz:syz.0: journal 0 mapped with 23 extents in 0ms
[ 1378.232188][ T1213] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1378.239763][ T1213] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1378.377477][ T1213] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 144ms
[ 1378.419864][ T1213] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1378.430207][T20025] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1379.004172][T20061] loop1: detected capacity change from 0 to 256
[ 1379.027872][T20061] vfat: Unknown parameter 's	3:+Do?zd;õ*dhortname'
[ 1380.122568][T20073] loop1: detected capacity change from 0 to 1024
[ 1380.172554][T20073] EXT4-fs: Ignoring removed orlov option
[ 1380.199063][T20072] netlink: 'syz.0.3344': attribute type 1 has an invalid length.
[ 1380.274367][T20073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1384.919032][T20113] netlink: 'syz.3.3353': attribute type 4 has an invalid length.
[ 1385.069072][T20115] netlink: 'syz.3.3353': attribute type 4 has an invalid length.
[ 1387.620342][T20072] dvmrp5: entered allmulticast mode
[ 1387.820436][T19612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1387.854103][T20124] loop7: detected capacity change from 0 to 256
[ 1387.896663][T20124] vfat: Unknown parameter 's	3:+Do?zd;õ*dhortname'
[ 1388.099826][  T977] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1388.390497][  T977] usb 4-1: Using ep0 maxpacket: 32
[ 1388.676682][  T977] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1388.686315][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1388.696742][  T977] usb 4-1: config 0 descriptor??
[ 1388.701218][  T977] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1388.760834][T20130] loop1: detected capacity change from 0 to 2048
[ 1388.869287][T20130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1388.971669][ T5896] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1389.006280][T20130] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[ 1389.038823][T20130] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[ 1389.068866][T20130] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1389.068866][T20130] 
[ 1389.083880][T20140] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1389.095467][T20130] EXT4-fs (loop1): Total free blocks count 0
[ 1389.114469][T20130] EXT4-fs (loop1): Free/Dirty block details
[ 1389.120535][T20130] EXT4-fs (loop1): free_blocks=66060288
[ 1389.172006][T20140] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1389.172006][T20140] 
[ 1389.197699][T20130] EXT4-fs (loop1): dirty_blocks=32
[ 1389.206807][T20130] EXT4-fs (loop1): Block reservation details
[ 1389.214041][ T5896] usb 3-1: Using ep0 maxpacket: 16
[ 1389.237266][ T5896] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1389.252822][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1389.270837][ T5896] usb 3-1: Product: syz
[ 1389.281317][ T5896] usb 3-1: Manufacturer: syz
[ 1389.292283][ T5896] usb 3-1: SerialNumber: syz
[ 1389.311817][ T5896] usb 3-1: config 0 descriptor??
[ 1389.390465][  T977] gspca_nw80x: reg_r err -110
[ 1389.397003][  T977] nw80x 4-1:0.0: probe with driver nw80x failed with error -110
[ 1389.492103][  T977] usb 4-1: USB disconnect, device number 75
[ 1389.500198][T20147] loop1: detected capacity change from 0 to 1024
[ 1389.549665][T20147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1389.615486][T19612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1389.738193][ T5896] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1389.763475][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1389.787668][ T5896] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1389.805997][ T5896] usb 3-1: media controller created
[ 1389.847018][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1390.018160][T20158] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3364'.
[ 1390.030220][T20158] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3364'.
[ 1390.083838][T20158] loop7: detected capacity change from 0 to 2048
[ 1390.168467][T20158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1390.241168][T20158] UDF-fs: incorrect filename length (10)
[ 1391.064561][ T5896] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1391.087042][ T5896] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1391.095098][ T5896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1391.124084][T20135] dtv5100: wlen = 45, aborting.
[ 1391.134082][T20166] loop1: detected capacity change from 0 to 512
[ 1391.415057][T20166] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1391.752837][T20166] EXT4-fs (loop1): blocks per group (64) and clusters per group (32768) inconsistent
[ 1391.787076][T19147] usb 3-1: USB disconnect, device number 40
[ 1392.639945][T20175] xt_CT: No such helper "snmp"
[ 1393.023595][T19147] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1393.841208][T20181] loop2: detected capacity change from 0 to 256
[ 1393.877412][T20181] vfat: Unknown parameter 's	3:+Do?zd;õ*dhortname'
[ 1395.063050][T20191] loop7: detected capacity change from 0 to 32768
[ 1395.213453][T16744] Bluetooth: hci0: command 0x0405 tx timeout
[ 1395.244423][T20191] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1395.473776][T20197] loop1: detected capacity change from 0 to 1024
[ 1395.895111][T14745] ocfs2: Unmounting device (7,7) on (node local)
[ 1395.906316][T20197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1396.297146][T19612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1399.200366][T19147] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1399.396947][T20220] loop1: detected capacity change from 0 to 40427
[ 1399.486014][T20220] F2FS-fs (loop1): build fault injection rate: 690
[ 1399.492999][T20220] F2FS-fs (loop1): Image doesn't support compression
[ 1399.500858][T20220] F2FS-fs (loop1): Image doesn't support compression
[ 1399.513790][T20220] F2FS-fs (loop1): invalid crc value
[ 1399.764745][T20243] xt_CT: No such helper "snmp"
[ 1399.889594][T19147] usb 3-1: Using ep0 maxpacket: 16
[ 1399.896853][T19147] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[ 1399.906663][T19147] usb 3-1: config 0 has no interface number 0
[ 1399.912830][T19147] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1399.922995][T19147] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1399.936326][T19147] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1399.945493][T19147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1399.956319][T19147] usb 3-1: Product: syz
[ 1399.960540][T19147] usb 3-1: Manufacturer: syz
[ 1399.979828][T19147] usb 3-1: SerialNumber: syz
[ 1400.062271][T20220] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1400.117611][T19147] usb 3-1: config 0 descriptor??
[ 1400.123739][T20230] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1400.131735][T20230] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1400.343470][T20230] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1400.363698][T20230] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1400.600735][T19959] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1400.702709][T20265] loop1: detected capacity change from 0 to 256
[ 1400.714595][T20265] vfat: Unknown parameter 's	3:+Do?zd;õ*dhortname'
[ 1400.765851][T19959] usb 4-1: Using ep0 maxpacket: 8
[ 1400.808220][T19959] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[ 1400.859481][T19959] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[ 1400.933680][T19959] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[ 1400.959159][T19959] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[ 1400.966475][T19147] asix 3-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x89
[ 1401.062000][T19959] usb 4-1: config 250 has no interface number 0
[ 1401.202254][T19959] usb 4-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1401.215028][T19147] usb 3-1: USB disconnect, device number 41
[ 1401.216164][T19959] usb 4-1: config 250 interface 228 has no altsetting 0
[ 1401.488762][T19959] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[ 1401.504376][T19959] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[ 1401.519529][T19959] usb 4-1: Product: syz
[ 1401.523747][T19959] usb 4-1: SerialNumber: syz
[ 1401.566273][T19959] hub 4-1:250.228: bad descriptor, ignoring hub
[ 1401.585701][T19959] hub 4-1:250.228: probe with driver hub failed with error -5
[ 1401.749579][T20272] loop1: detected capacity change from 0 to 1024
[ 1401.787623][T20272] EXT4-fs: Ignoring removed orlov option
[ 1401.833149][T20259] netlink: 'syz.3.3386': attribute type 7 has an invalid length.
[ 1401.865045][T20259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1401.881815][T20274] FAULT_INJECTION: forcing a failure.
[ 1401.881815][T20274] name failslab, interval 1, probability 0, space 0, times 0
[ 1401.896219][T20274] CPU: 1 UID: 0 PID: 20274 Comm: syz.2.3391 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1401.896250][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1401.896265][T20274] Call Trace:
[ 1401.896275][T20274]  <TASK>
[ 1401.896285][T20274]  dump_stack_lvl+0x189/0x250
[ 1401.896313][T20274]  ? __pfx____ratelimit+0x10/0x10
[ 1401.896340][T20274]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1401.896362][T20274]  ? __pfx__printk+0x10/0x10
[ 1401.896395][T20274]  ? atomic_notifier_call_chain+0x26/0x180
[ 1401.896415][T20274]  ? atomic_notifier_call_chain+0x26/0x180
[ 1401.896441][T20274]  should_fail_ex+0x414/0x560
[ 1401.896471][T20274]  should_failslab+0xa8/0x100
[ 1401.896498][T20274]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1401.896522][T20274]  ? __alloc_skb+0x112/0x2d0
[ 1401.896561][T20274]  __alloc_skb+0x112/0x2d0
[ 1401.896599][T20274]  fdb_notify+0xa6/0x160
[ 1401.896628][T20274]  __br_fdb_add+0xbb7/0xcb0
[ 1401.896662][T20274]  br_fdb_add+0x87e/0xc20
[ 1401.896697][T20274]  ? __pfx_br_fdb_add+0x10/0x10
[ 1401.896730][T20274]  ? __nla_parse+0x40/0x60
[ 1401.896758][T20274]  ? __pfx_br_fdb_add+0x10/0x10
[ 1401.896782][T20274]  rtnl_fdb_add+0x6a6/0xa50
[ 1401.896829][T20274]  ? __pfx_rtnl_fdb_add+0x10/0x10
[ 1401.896897][T20274]  ? __pfx_rtnl_fdb_add+0x10/0x10
[ 1401.896929][T20274]  rtnetlink_rcv_msg+0x779/0xb70
[ 1401.896965][T20274]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1401.896996][T20274]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1401.897025][T20274]  ? ref_tracker_free+0x63a/0x7d0
[ 1401.897047][T20274]  ? __copy_skb_header+0xa7/0x550
[ 1401.897072][T20274]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1401.897106][T20274]  ? __skb_clone+0x63/0x7a0
[ 1401.897138][T20274]  netlink_rcv_skb+0x208/0x470
[ 1401.897175][T20274]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1401.897208][T20274]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1401.897258][T20274]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1401.897290][T20274]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1401.897330][T20274]  netlink_unicast+0x75b/0x8d0
[ 1401.897374][T20274]  netlink_sendmsg+0x805/0xb30
[ 1401.897420][T20274]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1401.897459][T20274]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1401.897482][T20274]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1401.897514][T20274]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1401.897549][T20274]  __sock_sendmsg+0x219/0x270
[ 1401.897582][T20274]  ____sys_sendmsg+0x505/0x830
[ 1401.897611][T20274]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1401.897646][T20274]  ? import_iovec+0x74/0xa0
[ 1401.897682][T20274]  ___sys_sendmsg+0x21f/0x2a0
[ 1401.897708][T20274]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1401.897773][T20274]  ? __fget_files+0x2a/0x420
[ 1401.897799][T20274]  ? __fget_files+0x3a0/0x420
[ 1401.897837][T20274]  __x64_sys_sendmsg+0x19b/0x260
[ 1401.897864][T20274]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1401.897898][T20274]  ? __pfx_ksys_write+0x10/0x10
[ 1401.897917][T20274]  ? rcu_is_watching+0x15/0xb0
[ 1401.897945][T20274]  ? do_syscall_64+0xbe/0x3b0
[ 1401.897976][T20274]  do_syscall_64+0xfa/0x3b0
[ 1401.898001][T20274]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1401.898025][T20274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1401.898048][T20274]  ? clear_bhb_loop+0x60/0xb0
[ 1401.898075][T20274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1401.898104][T20274] RIP: 0033:0x7fc1c318e969
[ 1401.898125][T20274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1401.898144][T20274] RSP: 002b:00007fc1c3f33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1401.898167][T20274] RAX: ffffffffffffffda RBX: 00007fc1c33b5fa0 RCX: 00007fc1c318e969
[ 1401.898184][T20274] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[ 1401.898198][T20274] RBP: 00007fc1c3f33090 R08: 0000000000000000 R09: 0000000000000000
[ 1401.898212][T20274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1401.898225][T20274] R13: 0000000000000000 R14: 00007fc1c33b5fa0 R15: 00007ffc1b0c70b8
[ 1401.898259][T20274]  </TASK>
[ 1401.900583][T20272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1401.970164][T20259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1403.362410][ T5936] usb 4-1: USB disconnect, device number 76
[ 1403.552119][T19612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1403.764422][ T5936] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1403.836231][T20293] loop1: detected capacity change from 0 to 512
[ 1403.849187][T20293] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1403.859007][T20293] EXT4-fs (loop1): blocks per group (64) and clusters per group (32768) inconsistent
[ 1403.896189][ T5936] usb 4-1: device descriptor read/64, error -71
[ 1404.428691][ T5936] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1404.521672][T20294] xt_CT: No such helper "snmp"
[ 1404.547414][T20298] netlink: 'syz.3.3396': attribute type 1 has an invalid length.
[ 1404.556295][T20298] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3396'.
[ 1404.880145][T20305] loop1: detected capacity change from 0 to 1024
[ 1404.903118][T20305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1404.983479][T19612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1405.066416][T20311] loop1: detected capacity change from 0 to 256
[ 1405.074501][T20311] vfat: Unknown parameter 's	3:+Do?zd;õ*dhortname'
[ 1405.784504][ T5936] usb 4-1: device descriptor read/64, error -71
[ 1406.287341][ T5936] usb usb4-port1: attempt power cycle
[ 1406.294225][T20316] FAULT_INJECTION: forcing a failure.
[ 1406.294225][T20316] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1406.350813][T20316] CPU: 1 UID: 0 PID: 20316 Comm: syz.0.3401 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1406.350849][T20316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1406.350864][T20316] Call Trace:
[ 1406.350874][T20316]  <TASK>
[ 1406.350885][T20316]  dump_stack_lvl+0x189/0x250
[ 1406.350913][T20316]  ? __pfx____ratelimit+0x10/0x10
[ 1406.350942][T20316]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1406.350964][T20316]  ? __pfx__printk+0x10/0x10
[ 1406.351007][T20316]  should_fail_ex+0x414/0x560
[ 1406.351038][T20316]  _copy_to_user+0x31/0xb0
[ 1406.351073][T20316]  simple_read_from_buffer+0xe1/0x170
[ 1406.351105][T20316]  proc_fail_nth_read+0x1df/0x250
[ 1406.351141][T20316]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1406.351175][T20316]  ? rw_verify_area+0x258/0x650
[ 1406.351210][T20316]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1406.351242][T20316]  vfs_read+0x200/0x980
[ 1406.351272][T20316]  ? __pfx___mutex_lock+0x10/0x10
[ 1406.351302][T20316]  ? __pfx_vfs_read+0x10/0x10
[ 1406.351327][T20316]  ? __fget_files+0x2a/0x420
[ 1406.351372][T20316]  ? __fget_files+0x3a0/0x420
[ 1406.351396][T20316]  ? __fget_files+0x2a/0x420
[ 1406.351432][T20316]  ksys_read+0x145/0x250
[ 1406.351456][T20316]  ? __pfx_ksys_read+0x10/0x10
[ 1406.351483][T20316]  ? do_syscall_64+0xbe/0x3b0
[ 1406.351514][T20316]  do_syscall_64+0xfa/0x3b0
[ 1406.351539][T20316]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1406.351563][T20316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1406.351586][T20316]  ? clear_bhb_loop+0x60/0xb0
[ 1406.351612][T20316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1406.351632][T20316] RIP: 0033:0x7fd971d8d37c
[ 1406.351653][T20316] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1406.351681][T20316] RSP: 002b:00007fd972bb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1406.351704][T20316] RAX: ffffffffffffffda RBX: 00007fd971fb5fa0 RCX: 00007fd971d8d37c
[ 1406.351721][T20316] RDX: 000000000000000f RSI: 00007fd972bb40a0 RDI: 0000000000000004
[ 1406.351736][T20316] RBP: 00007fd972bb4090 R08: 0000000000000000 R09: 0000000000000000
[ 1406.351749][T20316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1406.351762][T20316] R13: 0000000000000000 R14: 00007fd971fb5fa0 R15: 00007fffb4059508
[ 1406.351798][T20316]  </TASK>
[ 1406.638748][ T5936] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1406.667912][ T5936] usb 4-1: Using ep0 maxpacket: 16
[ 1406.696412][ T5936] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1406.728977][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.783707][ T5936] usb 4-1: Product: syz
[ 1406.791159][ T5936] usb 4-1: Manufacturer: syz
[ 1406.814263][ T5936] usb 4-1: SerialNumber: syz
[ 1406.832269][ T5936] usb 4-1: config 0 descriptor??
[ 1406.878798][T20326] loop7: detected capacity change from 0 to 8
[ 1407.112226][T20320] loop2: detected capacity change from 0 to 32768
[ 1407.122281][T20320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3403 (20320)
[ 1407.187467][T20320] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1407.231725][T20320] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[ 1407.309319][T20320] BTRFS info (device loop2): using free-space-tree
[ 1407.434833][ T5936] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1407.519206][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1407.581944][ T5936] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1407.623688][ T5936] usb 4-1: media controller created
[ 1407.633529][T20309] dtv5100: wlen = 45, aborting.
[ 1407.723420][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1407.763012][ T5936] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1407.770466][ T5936] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1407.786608][ T5936] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1407.803603][ T5936] usb 4-1: USB disconnect, device number 79
[ 1407.840349][ T5936] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1408.044851][T17236] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1408.833542][T20367] loop1: detected capacity change from 0 to 256
[ 1408.864313][T20367] vfat: Unknown parameter 's	3:+Do?zd;õ*dhortname'
[ 1409.620562][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1410.147154][T20378] loop2: detected capacity change from 0 to 1024
[ 1410.290385][T17415] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1410.329207][T20378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1410.510858][T20391] FAULT_INJECTION: forcing a failure.
[ 1410.510858][T20391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1410.543718][T20391] CPU: 1 UID: 0 PID: 20391 Comm: syz.1.3418 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1410.543760][T20391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1410.543775][T20391] Call Trace:
[ 1410.543786][T20391]  <TASK>
[ 1410.543799][T20391]  dump_stack_lvl+0x189/0x250
[ 1410.543829][T20391]  ? __pfx____ratelimit+0x10/0x10
[ 1410.543857][T20391]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1410.543880][T20391]  ? __pfx__printk+0x10/0x10
[ 1410.543908][T20391]  ? __might_fault+0xb0/0x130
[ 1410.543945][T20391]  should_fail_ex+0x414/0x560
[ 1410.543976][T20391]  _copy_from_user+0x2d/0xb0
[ 1410.544011][T20391]  drm_ioctl+0x58a/0xb10
[ 1410.544042][T20391]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[ 1410.544077][T20391]  ? __pfx_drm_ioctl+0x10/0x10
[ 1410.544118][T20391]  ? __fget_files+0x2a/0x420
[ 1410.544150][T20391]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1410.544187][T20391]  ? __pfx_drm_ioctl+0x10/0x10
[ 1410.544212][T20391]  __se_sys_ioctl+0xfc/0x170
[ 1410.544251][T20391]  do_syscall_64+0xfa/0x3b0
[ 1410.544279][T20391]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1410.544305][T20391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1410.544327][T20391]  ? clear_bhb_loop+0x60/0xb0
[ 1410.544357][T20391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1410.544380][T20391] RIP: 0033:0x7f4c8ab8e969
[ 1410.544402][T20391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1410.544423][T20391] RSP: 002b:00007f4c8b94e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1410.544448][T20391] RAX: ffffffffffffffda RBX: 00007f4c8adb6080 RCX: 00007f4c8ab8e969
[ 1410.544467][T20391] RDX: 0000200000000140 RSI: 00000000c01864c6 RDI: 0000000000000005
[ 1410.544483][T20391] RBP: 00007f4c8b94e090 R08: 0000000000000000 R09: 0000000000000000
[ 1410.544498][T20391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1410.544512][T20391] R13: 0000000000000000 R14: 00007f4c8adb6080 R15: 00007ffc11386318
[ 1410.544548][T20391]  </TASK>
[ 1410.776609][T17236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1410.858831][T16744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1410.887123][T16744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1410.900091][T16744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1410.943854][T16744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1410.956125][T16744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1411.037571][T17415] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1411.116682][T20397] loop2: detected capacity change from 0 to 251
[ 1411.179923][T17415] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1411.357826][T17415] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1411.810822][T17415] bridge_slave_1: left allmulticast mode
[ 1411.846661][T17415] bridge_slave_1: left promiscuous mode
[ 1411.858395][T17415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1411.892552][T17415] bridge_slave_0: left allmulticast mode
[ 1412.473323][T20424] loop7: detected capacity change from 0 to 256
[ 1412.499464][T20424] vfat: Unknown parameter 's	3:+Do?zd;õ*dhortname'
[ 1412.870303][T17415] bridge_slave_0: left promiscuous mode
[ 1412.876213][T17415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1412.944253][T20002] Bluetooth: hci2: command tx timeout
[ 1413.711407][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 1413.717980][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 1414.048364][T20429] loop2: detected capacity change from 0 to 512
[ 1414.094631][T20409] loop1: detected capacity change from 0 to 32768
[ 1414.113652][T20429] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1414.158745][T20429] EXT4-fs (loop2): blocks per group (64) and clusters per group (32768) inconsistent
[ 1414.176487][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1414.322982][T20433] loop7: detected capacity change from 0 to 1024
[ 1414.341740][T20409] JBD2: journal reset failed
[ 1414.350668][T20409] (syz.1.3423,20409,0):ocfs2_journal_load:1167 ERROR: Failed to load journal!
[ 1414.361034][T20433] EXT4-fs: Ignoring removed orlov option
[ 1414.384458][T20409] (syz.1.3423,20409,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4
[ 1414.408813][T20433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1414.471526][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1414.927113][T20438] xt_CT: No such helper "snmp"
[ 1415.086992][T20002] Bluetooth: hci2: command tx timeout
[ 1415.240839][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1415.611561][T20444] loop2: detected capacity change from 0 to 40427
[ 1415.658530][T20444] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1415.666304][T20444] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1415.685369][T20444] F2FS-fs (loop2): invalid crc value
[ 1415.855504][T20444] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1415.862785][T20444] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1416.127711][T20451] FAULT_INJECTION: forcing a failure.
[ 1416.127711][T20451] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1416.142554][T20451] CPU: 1 UID: 0 PID: 20451 Comm: syz.2.3430 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1416.142586][T20451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1416.142600][T20451] Call Trace:
[ 1416.142610][T20451]  <TASK>
[ 1416.142620][T20451]  dump_stack_lvl+0x189/0x250
[ 1416.142648][T20451]  ? __pfx____ratelimit+0x10/0x10
[ 1416.142674][T20451]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1416.142697][T20451]  ? __pfx__printk+0x10/0x10
[ 1416.142725][T20451]  ? fs_reclaim_acquire+0x7d/0x100
[ 1416.142764][T20451]  should_fail_ex+0x414/0x560
[ 1416.142794][T20451]  prepare_alloc_pages+0x213/0x610
[ 1416.142833][T20451]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1416.142872][T20451]  ? rcu_is_watching+0x15/0xb0
[ 1416.142896][T20451]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1416.142925][T20451]  ? preempt_schedule_irq+0xde/0x150
[ 1416.142962][T20451]  ? irqentry_exit+0x74/0x90
[ 1416.142987][T20451]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1416.143016][T20451]  alloc_pages_mpol+0x232/0x4a0
[ 1416.143048][T20451]  alloc_pages_noprof+0xa9/0x190
[ 1416.143076][T20451]  folio_alloc_noprof+0x1e/0x30
[ 1416.143100][T20451]  filemap_alloc_folio_noprof+0xdf/0x470
[ 1416.143126][T20451]  ? filemap_get_entry+0xad/0x2f0
[ 1416.143151][T20451]  ? filemap_get_entry+0xad/0x2f0
[ 1416.143180][T20451]  ? filemap_get_entry+0x28f/0x2f0
[ 1416.143207][T20451]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[ 1416.143246][T20451]  ? __filemap_get_folio+0x9a6/0xaf0
[ 1416.143273][T20451]  ? rcu_is_watching+0x15/0xb0
[ 1416.143300][T20451]  __filemap_get_folio+0x3f2/0xaf0
[ 1416.143339][T20451]  f2fs_new_node_folio+0x131/0xa40
[ 1416.143361][T20451]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1416.143399][T20451]  f2fs_new_inode_folio+0xe0/0x140
[ 1416.143423][T20451]  ? __pfx_f2fs_new_inode_folio+0x10/0x10
[ 1416.143471][T20451]  f2fs_init_inode_metadata+0x10f/0xf70
[ 1416.143505][T20451]  ? __pfx_down_write_nested+0x10/0x10
[ 1416.143538][T20451]  ? f2fs_room_for_filename+0x87/0xb0
[ 1416.143575][T20451]  f2fs_add_inline_entry+0x428/0x880
[ 1416.143616][T20451]  ? __pfx_f2fs_add_inline_entry+0x10/0x10
[ 1416.143659][T20451]  ? down_read+0x1ad/0x2e0
[ 1416.143692][T20451]  f2fs_add_dentry+0xa5/0x1d0
[ 1416.143732][T20451]  f2fs_do_add_link+0x20f/0x3b0
[ 1416.143768][T20451]  ? __pfx_f2fs_do_add_link+0x10/0x10
[ 1416.143821][T20451]  ? __pfx_f2fs_new_inode+0x10/0x10
[ 1416.143866][T20451]  ? down_read+0x1ad/0x2e0
[ 1416.143899][T20451]  f2fs_mknod+0x30d/0x5d0
[ 1416.143932][T20451]  ? bpf_lsm_inode_mknod+0x9/0x20
[ 1416.143968][T20451]  vfs_mknod+0x37c/0x3c0
[ 1416.144011][T20451]  do_mknodat+0x385/0x4d0
[ 1416.144048][T20451]  ? __pfx_do_mknodat+0x10/0x10
[ 1416.144082][T20451]  ? getname_flags+0x1e5/0x540
[ 1416.144114][T20451]  __x64_sys_mknodat+0xa7/0xc0
[ 1416.144151][T20451]  do_syscall_64+0xfa/0x3b0
[ 1416.144178][T20451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1416.144198][T20451]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1416.144217][T20451]  ? clear_bhb_loop+0x60/0xb0
[ 1416.144245][T20451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1416.144268][T20451] RIP: 0033:0x7fc1c318e969
[ 1416.144288][T20451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1416.144309][T20451] RSP: 002b:00007fc1c0ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 1416.144332][T20451] RAX: ffffffffffffffda RBX: 00007fc1c33b6160 RCX: 00007fc1c318e969
[ 1416.144349][T20451] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 1416.144365][T20451] RBP: 00007fc1c0ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1416.144379][T20451] R10: 0000000000000705 R11: 0000000000000246 R12: 0000000000000001
[ 1416.144393][T20451] R13: 0000000000000000 R14: 00007fc1c33b6160 R15: 00007ffc1b0c70b8
[ 1416.144431][T20451]  </TASK>
[ 1417.180970][T20002] Bluetooth: hci2: command tx timeout
[ 1417.520567][   T30] audit: type=1326 audit(1748199721.732:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20457 comm="syz.1.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8ab8e969 code=0x7ffc0000
[ 1417.546812][T17415] 
 (unregistering): (slave bridge0): Releasing backup interface
[ 1417.562659][   T30] audit: type=1326 audit(1748199721.764:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20457 comm="syz.1.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8ab8e969 code=0x7ffc0000
[ 1417.589380][   T30] audit: type=1326 audit(1748199721.774:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20457 comm="syz.1.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c8ab8e969 code=0x7ffc0000
[ 1417.661359][   T30] audit: type=1326 audit(1748199721.774:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20457 comm="syz.1.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8ab8e969 code=0x7ffc0000
[ 1417.685124][   T30] audit: type=1326 audit(1748199721.774:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20457 comm="syz.1.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4c8ab8e969 code=0x7ffc0000
[ 1417.707874][   T30] audit: type=1326 audit(1748199721.774:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20457 comm="syz.1.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8ab8e969 code=0x7ffc0000
[ 1417.770913][T20463] loop1: detected capacity change from 0 to 64
[ 1417.843000][T20463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1418.392932][   T30] audit: type=1326 audit(1748199721.774:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20457 comm="syz.1.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f4c8ab8e969 code=0x7ffc0000
[ 1418.415653][   T30] audit: type=1326 audit(1748199721.774:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20457 comm="syz.1.3434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8ab8e969 code=0x7ffc0000
[ 1418.741062][T17415] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1418.756720][T17415] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1418.770516][T17415] 
 (unregistering): Released all slaves
[ 1418.815424][T20392] chnl_net:caif_netlink_parms(): no params data found
[ 1418.820247][  T977] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1419.116063][T20002] Bluetooth: hci2: command tx timeout
[ 1419.601142][  T977] usb 3-1: device descriptor read/64, error -71
[ 1419.672454][T14745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1419.946852][  T977] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1419.950639][T20392] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1419.961997][T20392] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1419.972188][T20392] bridge_slave_0: entered allmulticast mode
[ 1419.980582][T20392] bridge_slave_0: entered promiscuous mode
[ 1420.057939][T20392] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1420.076265][T20392] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1420.086149][T20392] bridge_slave_1: entered allmulticast mode
[ 1420.104013][T20392] bridge_slave_1: entered promiscuous mode
[ 1420.513369][T20392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1420.548802][T20392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1420.601409][T17415] hsr_slave_0: left promiscuous mode
[ 1420.617242][T17415] hsr_slave_1: left promiscuous mode
[ 1420.637561][T17415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1420.670332][T17415] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1420.696365][T20479] loop1: detected capacity change from 0 to 32768
[ 1420.732722][T17415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1420.772624][T17415] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1420.780486][T20479] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3439 (20479)
[ 1420.895324][T17415] veth1_macvtap: left promiscuous mode
[ 1420.909393][T17415] veth0_macvtap: left promiscuous mode
[ 1420.924325][T17415] veth1_vlan: left promiscuous mode
[ 1420.939309][T17415] veth0_vlan: left promiscuous mode
[ 1421.042402][  T977] usb 3-1: device descriptor read/64, error -71
[ 1421.045631][T20479] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1421.081810][T20479] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[ 1421.124602][T20479] BTRFS info (device loop1): using free-space-tree
[ 1421.144939][  T977] usb usb3-port1: attempt power cycle
[ 1421.179092][T20483] loop7: detected capacity change from 0 to 131072
[ 1421.289255][T20479] BTRFS info (device loop1): rebuilding free space tree
[ 1421.373150][T20483] F2FS-fs (loop7): Mounted with checkpoint version = 1b41e955
[ 1421.409941][T20483] F2FS-fs (loop7): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903
[ 1421.467464][T20512] F2FS-fs (loop7): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903
[ 1421.520994][  T977] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1421.572006][T17404] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[ 1421.744488][  T977] usb 3-1: device not accepting address 44, error -71
[ 1422.948975][T17415] team0 (unregistering): Port device team_slave_1 removed
[ 1423.083954][T17415] team0 (unregistering): Port device team_slave_0 removed
[ 1423.213553][T20524] loop7: detected capacity change from 0 to 64
[ 1423.259381][T20524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1423.698760][T19612] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1424.070416][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3449'.
[ 1424.088051][T20529] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3449'.
[ 1426.742273][T20392] team0: Port device team_slave_0 added
[ 1426.827685][T20541] loop2: detected capacity change from 0 to 32768
[ 1426.920850][T20545] loop1: detected capacity change from 0 to 16
[ 1426.971900][T20541] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[ 1427.026483][T20547] loop7: detected capacity change from 0 to 1024
[ 1427.037532][T20545] erofs (device loop1): mounted with root inode @ nid 36.
[ 1427.070235][T20541] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,wide_macs,journal_flush_disabled,norecovery,nojournal_transaction_names
[ 1427.070235][T20541]   allowing incompatible features above 0.0: (unknown version)
[ 1427.070235][T20541]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1427.111553][T20541] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[ 1427.123324][T20541] bcachefs (loop2): Version upgrade required:
[ 1427.123324][T20541] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[ 1427.123324][T20541] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[ 1427.123324][T20541]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[ 1427.178268][T20392] team0: Port device team_slave_1 added
[ 1427.219963][T20547] EXT4-fs (loop7): Can't support bigalloc feature without extents feature
[ 1427.219963][T20547] 
[ 1427.242698][T20547] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[ 1427.288755][T20541] bcachefs (loop2): accounting_read... done
[ 1427.305184][T20541] bcachefs (loop2): alloc_read... done
[ 1427.311357][T20541] bcachefs (loop2): snapshots_read... done
[ 1427.318522][T20541] bcachefs (loop2): check_allocations...
[ 1427.329075][T20541] bcachefs (loop2): bucket 0:26 data type btree ptr gen 0 missing in alloc btree
[ 1427.329130][T20541]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[ 1427.541901][T20550] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1428.504238][T20550] erofs (device loop1): read error -117 @ 43 of nid 36
[ 1428.511480][T20555] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1428.520118][T20555] erofs (device loop1): read error -117 @ 43 of nid 36
[ 1428.527941][T20550] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1428.536481][T20550] erofs (device loop1): read error -117 @ 43 of nid 36
[ 1428.592628][T20550] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1428.601166][T20550] erofs (device loop1): read error -117 @ 43 of nid 36
[ 1428.781594][T20551] loop7: detected capacity change from 0 to 32768
[ 1428.792829][T20541] bcachefs (loop2): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[ 1428.792853][T20541]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[ 1428.821697][T20541] bcachefs (loop2): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[ 1428.821721][T20541]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 1428.847996][T20541] bcachefs (loop2): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[ 1428.848019][T20541]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[ 1428.879566][T20541] bcachefs (loop2): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[ 1428.879590][T20541]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 1428.905671][T20541] bcachefs (loop2): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
[ 1428.915819][T20541] bcachefs (loop2): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 1428.931550][T20541] bcachefs (loop2): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
[ 1428.944830][T20541] bcachefs (loop2): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 1428.956767][T20541] bcachefs (loop2): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
[ 1428.968094][T20541] bcachefs (loop2): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 1428.979607][T20541] bcachefs (loop2): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
[ 1428.989632][T20541] bcachefs (loop2): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 1429.001359][T20541] bcachefs (loop2): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
[ 1429.011436][T20541] bcachefs (loop2): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 1429.023000][T20541] bcachefs (loop2): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[ 1429.033048][T20541] bcachefs (loop2): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 1429.044651][T20541] bcachefs (loop2): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
[ 1429.055163][T20541] bcachefs (loop2): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[ 1429.070462][T20541] bcachefs (loop2): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
[ 1429.071185][T20551] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3455 (20551)
[ 1429.096362][T20541] bcachefs (loop2): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
[ 1429.107947][T20541] bcachefs (loop2): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing
[ 1429.118453][T20541] bcachefs (loop2): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 1429.130494][T20541] bcachefs (loop2): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing
[ 1429.130675][T20551] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1429.151885][T20541] bcachefs (loop2): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 1429.151927][T20551] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1429.174649][T20551] BTRFS info (device loop7): disk space caching is enabled
[ 1429.174674][T20551] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1429.174723][T20541] bcachefs (loop2): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing
[ 1429.174744][T20541]   Ratelimiting new instances of previous error
[ 1429.217340][T20541] bcachefs (loop2): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[ 1429.217370][T20541]   Ratelimiting new instances of previous error
[ 1429.235961][T20392] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1429.235983][T20392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1429.236029][T20392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1429.238278][T20392] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1429.316015][T20392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1429.351069][T20392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1429.369603][T20541]  done
[ 1429.374343][T20541] bcachefs (loop2): going read-write
[ 1429.536041][T20541] workqueue: Failed to create a rescuer kthread for wq "bcachefs_copygc": -EINTR
[ 1429.596398][T20541] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10
[ 1429.616155][T20541] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10
[ 1429.626470][T20541] bcachefs (loop2): unclean shutdown complete, journal seq 10
[ 1429.636137][T20541] bcachefs (loop2): error in recovery: ENOMEM_fs_other_allocemergency read only at seq 10
[ 1429.646166][T20541] bcachefs (loop2): bch2_fs_start(): error starting filesystem ENOMEM_fs_other_alloc
[ 1429.655704][T20541] bcachefs (loop2): shutting down
[ 1429.678412][T20541] bcachefs (loop2): shutdown complete
[ 1429.750981][T20392] hsr_slave_0: entered promiscuous mode
[ 1429.761802][T20392] hsr_slave_1: entered promiscuous mode
[ 1429.768837][T20392] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1429.776689][T20392] Cannot create hsr debugfs directory
[ 1429.796960][T20551] BTRFS info (device loop7): rebuilding free space tree
[ 1429.874702][T20551] BTRFS info (device loop7): disabling free space tree
[ 1429.882199][T20551] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1429.892055][T20551] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1429.934605][T20551] BTRFS info (device loop7): balance: start -d -m -slimit=0
[ 1429.953151][T20551] BTRFS info (device loop7): relocating block group 6881280 flags data|metadata
[ 1430.077633][T20551] BTRFS info (device loop7): relocating block group 5242880 flags data|metadata
[ 1430.102259][T20581] bridge1: entered allmulticast mode
[ 1430.144033][T20551] BTRFS info (device loop7): balance: canceled
[ 1430.281369][T14745] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1431.031374][T20541] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc
[ 1432.503529][T20592] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20004
[ 1433.658293][T20596] loop2: detected capacity change from 0 to 32768
[ 1433.732421][T20596] (syz.2.3462,20596,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[ 1433.732421][T20596] found = 2, set = 0, taken = 0, off = 0
[ 1433.752939][T20596] (syz.2.3462,20596,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[ 1433.761176][T20596] (syz.2.3462,20596,0):ocfs2_check_volume:2404 ERROR: status = -22
[ 1433.769152][T20596] (syz.2.3462,20596,0):ocfs2_check_volume:2432 ERROR: status = -22
[ 1433.777540][T20596] (syz.2.3462,20596,0):ocfs2_mount_volume:1764 ERROR: status = -22
[ 1433.790282][T20596] (syz.2.3462,20596,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1433.915860][T20392] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1433.968056][T20392] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1434.011111][T20392] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1434.239321][T20392] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1434.260001][T20604] loop7: detected capacity change from 0 to 8
[ 1434.277101][T20604] overlay: Unknown parameter 'subj_user'
[ 1434.634884][T20606] loop1: detected capacity change from 0 to 1024
[ 1434.871551][T20606] hfsplus: failed to load root directory
[ 1435.581993][T20392] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1437.685132][T20392] 8021q: adding VLAN 0 to HW filter on device team0
[ 1437.699078][T20618] loop1: detected capacity change from 0 to 4096
[ 1439.458894][T17408] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1439.466268][T17408] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1439.547549][T17408] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1439.554814][T17408] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1439.710457][T20629] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3472'.
[ 1441.240269][T20392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1441.251416][T20392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1441.545205][ T5896] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1441.727021][ T5896] usb 2-1: too many configurations: 57, using maximum allowed: 8
[ 1441.759897][ T5896] usb 2-1: config index 0 descriptor too short (expected 65379, got 173)
[ 1441.801551][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1441.879984][ T5896] usb 2-1: config index 1 descriptor too short (expected 65379, got 173)
[ 1441.898321][T20392] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1441.906164][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1442.008998][ T5896] usb 2-1: config index 2 descriptor too short (expected 65379, got 173)
[ 1442.184264][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1442.494637][ T5896] usb 2-1: config index 3 descriptor too short (expected 65379, got 173)
[ 1442.518749][T20651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3478'.
[ 1442.535812][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1442.577564][T20651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3478'.
[ 1442.602646][ T5896] usb 2-1: config index 4 descriptor too short (expected 65379, got 173)
[ 1442.611564][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1442.649029][ T5896] usb 2-1: config index 5 descriptor too short (expected 65379, got 173)
[ 1442.675360][T20392] veth0_vlan: entered promiscuous mode
[ 1442.683964][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1442.704917][ T5896] usb 2-1: config index 6 descriptor too short (expected 65379, got 173)
[ 1442.716176][T20392] veth1_vlan: entered promiscuous mode
[ 1442.722489][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1442.766626][T20665] FAULT_INJECTION: forcing a failure.
[ 1442.766626][T20665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1442.792303][ T5896] usb 2-1: unable to read config index 7 descriptor/start: -71
[ 1442.804321][T20392] veth0_macvtap: entered promiscuous mode
[ 1442.815715][ T5896] usb 2-1: can't read configurations, error -71
[ 1442.840201][T20392] veth1_macvtap: entered promiscuous mode
[ 1442.846402][T20665] CPU: 0 UID: 0 PID: 20665 Comm: syz.0.3481 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1442.846433][T20665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1442.846448][T20665] Call Trace:
[ 1442.846458][T20665]  <TASK>
[ 1442.846468][T20665]  dump_stack_lvl+0x189/0x250
[ 1442.846495][T20665]  ? __pfx____ratelimit+0x10/0x10
[ 1442.846522][T20665]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1442.846543][T20665]  ? __pfx__printk+0x10/0x10
[ 1442.846583][T20665]  should_fail_ex+0x414/0x560
[ 1442.846613][T20665]  _copy_to_user+0x31/0xb0
[ 1442.846646][T20665]  simple_read_from_buffer+0xe1/0x170
[ 1442.846676][T20665]  proc_fail_nth_read+0x1df/0x250
[ 1442.846708][T20665]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1442.846741][T20665]  ? rw_verify_area+0x258/0x650
[ 1442.846775][T20665]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1442.846806][T20665]  vfs_read+0x200/0x980
[ 1442.846833][T20665]  ? __pfx___mutex_lock+0x10/0x10
[ 1442.846861][T20665]  ? __pfx_vfs_read+0x10/0x10
[ 1442.846884][T20665]  ? __fget_files+0x2a/0x420
[ 1442.846915][T20665]  ? __fget_files+0x3a0/0x420
[ 1442.846939][T20665]  ? __fget_files+0x2a/0x420
[ 1442.846982][T20665]  ksys_read+0x145/0x250
[ 1442.847007][T20665]  ? __pfx_ksys_read+0x10/0x10
[ 1442.847025][T20665]  ? rcu_is_watching+0x15/0xb0
[ 1442.847052][T20665]  ? do_syscall_64+0xbe/0x3b0
[ 1442.847084][T20665]  do_syscall_64+0xfa/0x3b0
[ 1442.847110][T20665]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1442.847135][T20665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1442.847156][T20665]  ? clear_bhb_loop+0x60/0xb0
[ 1442.847182][T20665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1442.847203][T20665] RIP: 0033:0x7fd971d8d37c
[ 1442.847222][T20665] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1442.847242][T20665] RSP: 002b:00007fd972bb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1442.847265][T20665] RAX: ffffffffffffffda RBX: 00007fd971fb5fa0 RCX: 00007fd971d8d37c
[ 1442.847280][T20665] RDX: 000000000000000f RSI: 00007fd972bb40a0 RDI: 0000000000000003
[ 1442.847294][T20665] RBP: 00007fd972bb4090 R08: 0000000000000000 R09: 0000000000000000
[ 1442.847307][T20665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1442.847320][T20665] R13: 0000000000000000 R14: 00007fd971fb5fa0 R15: 00007fffb4059508
[ 1442.847354][T20665]  </TASK>
[ 1442.917395][T20667] netlink: 'syz.1.3482': attribute type 2 has an invalid length.
[ 1442.981745][T20392] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1443.067819][T20669] loop2: detected capacity change from 0 to 256
[ 1443.103984][T20392] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1443.130187][T20671] loop7: detected capacity change from 0 to 512
[ 1443.142334][T20669] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1443.154015][T20667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3482'.
[ 1443.163946][T20669] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[ 1443.184668][T20671] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.3484: casefold flag without casefold feature
[ 1443.192231][T20669] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1443.205773][T20392] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1443.219717][T20392] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1443.219889][T20671] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3484: couldn't read orphan inode 15 (err -117)
[ 1443.229608][T20392] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1443.249264][T20392] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1443.282185][T20671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1443.467733][ T5936] IPVS: starting estimator thread 0...
[ 1443.535056][T17419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1443.564727][T20676] IPVS: using max 31 ests per chain, 74400 per kthread
[ 1443.596449][T17419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1443.668471][T17419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1443.695691][T17419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1443.708635][T20686] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[ 1443.785406][T20686] bond1: entered promiscuous mode
[ 1443.821979][T14745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1443.834200][T20686] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1444.359530][T20688] loop1: detected capacity change from 0 to 32768
[ 1444.408528][T20688] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got  should be 
[ 1444.475364][T20688] bcachefs (/dev/loop1): error validating superblock: Bad dev_idx (got 6, nr_devices 1)
[ 1444.489746][T20688] bcachefs: bch2_fs_get_tree() error: invalid_sb_dev_idx
[ 1444.714537][T20709] loop2: detected capacity change from 0 to 128
[ 1444.780152][T20709] vfat: Unknown parameter ''
[ 1446.078722][ T5896] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1446.145657][   T30] audit: type=1800 audit(1748199751.782:1076): pid=20717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3497" name="/" dev="9p" ino=2 res=0 errno=0
[ 1446.268061][T20688] loop1: detected capacity change from 0 to 131072
[ 1446.283907][ T5896] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1446.292472][ T5896] usb 3-1: can't read configurations, error -61
[ 1446.298519][T20688] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945)
[ 1446.308757][T20688] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1446.323746][T20707] loop7: detected capacity change from 0 to 32768
[ 1446.334851][T20707] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3494 (20707)
[ 1446.352911][T20688] F2FS-fs (loop1): invalid crc value
[ 1446.432142][T20707] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1446.443559][ T5896] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1446.450724][T20707] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm
[ 1446.461074][T20688] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1446.468174][T20688] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 1446.469521][T20707] BTRFS info (device loop7): using free-space-tree
[ 1446.535537][T20688] netlink: 'syz.1.3488': attribute type 11 has an invalid length.
[ 1446.604997][ T5896] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1446.614738][ T5896] usb 3-1: can't read configurations, error -61
[ 1446.622826][ T5896] usb usb3-port1: attempt power cycle
[ 1446.646000][T20707] BTRFS info (device loop7): rebuilding free space tree
[ 1446.787078][T20706] BTRFS info (device loop7): scrub: started on devid 1
[ 1446.800277][T20706] BTRFS info (device loop7): left=0, need=98304, flags=2
[ 1446.814806][T20706] BTRFS info (device loop7): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[ 1446.824765][T20706] BTRFS info (device loop7): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[ 1446.838680][T20706] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1441792
[ 1446.847610][T20706] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0
[ 1446.855536][T20706] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0
[ 1446.863304][T20706] BTRFS info (device loop7): delayed_block_rsv: size 229376 reserved 229376
[ 1446.872230][T20706] BTRFS info (device loop7): delayed_refs_rsv: size 65536 reserved 65536
[ 1446.912943][T20706] BTRFS info (device loop7): unable to make block group 5242880 ro
[ 1446.929639][T20706] BTRFS info (device loop7): space_info DATA+METADATA (sub-group id 0) has 1466368 free, is not full
[ 1446.941155][T20706] BTRFS info (device loop7): space_info total=3276800, used=53248, pinned=20480, reserved=4096, may_use=1732608, readonly=0 zone_unusable=0
[ 1446.955807][T20706] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1437696
[ 1446.964684][T20706] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0
[ 1446.972406][T20706] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0
[ 1446.973892][ T5896] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1446.980166][T20706] BTRFS info (device loop7): delayed_block_rsv: size 229376 reserved 229376
[ 1446.996954][T20706] BTRFS info (device loop7): delayed_refs_rsv: size 589824 reserved 65536
[ 1447.014856][T20706] BTRFS info (device loop7): unable to make block group 6881280 ro
[ 1447.025117][T20706] BTRFS info (device loop7): space_info DATA+METADATA (sub-group id 0) has 1466368 free, is full
[ 1447.035921][T20706] BTRFS info (device loop7): space_info total=3276800, used=53248, pinned=20480, reserved=4096, may_use=1732608, readonly=0 zone_unusable=0
[ 1447.044179][ T5896] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1447.050389][T20706] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1437696
[ 1447.065940][ T5896] usb 3-1: can't read configurations, error -61
[ 1447.066779][T20706] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0
[ 1447.080913][T20706] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0
[ 1447.088696][T20706] BTRFS info (device loop7): delayed_block_rsv: size 229376 reserved 229376
[ 1447.097787][T20706] BTRFS info (device loop7): delayed_refs_rsv: size 589824 reserved 65536
[ 1447.123246][T20706] BTRFS info (device loop7): scrub: finished on devid 1 with status: 0
[ 1447.221504][ T5896] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1447.262790][ T5896] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1447.279762][ T5896] usb 3-1: can't read configurations, error -61
[ 1447.286968][ T5896] usb usb3-port1: unable to enumerate USB device
[ 1447.614095][T20742] loop1: detected capacity change from 0 to 256
[ 1447.626615][T20742] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1447.637608][T20742] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[ 1447.667111][T20742] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1447.780011][T14745] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1447.831426][T20744] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3501'.
[ 1447.840541][T20744] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3501'.
[ 1448.333467][ T5936] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1448.590678][ T5936] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1448.610722][ T5936] usb 2-1: can't read configurations, error -61
[ 1448.768380][ T5936] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1448.836250][T20755] loop2: detected capacity change from 0 to 1024
[ 1448.868939][T20756] loop7: detected capacity change from 0 to 2048
[ 1448.930720][T20758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3505'.
[ 1448.943516][T20756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1448.951744][ T5936] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1448.977858][ T5936] usb 2-1: can't read configurations, error -61
[ 1448.995925][ T5936] usb usb2-port1: attempt power cycle
[ 1449.071684][T20756] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3500: bg 0: block 234: padding at end of block bitmap is not set
[ 1449.092934][T20756] EXT4-fs (loop7): Remounting filesystem read-only
[ 1449.202290][T14745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1450.196237][ T5936] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1450.284985][ T5936] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1450.327651][ T5936] usb 2-1: can't read configurations, error -61
[ 1450.469727][ T5936] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1451.503109][ T5936] usb 2-1: device descriptor read/8, error -71
[ 1451.708065][ T5936] usb usb2-port1: unable to enumerate USB device
[ 1451.716674][T20778] loop7: detected capacity change from 0 to 2048
[ 1451.785667][T20778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1453.034990][T14745] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1453.264970][T20782] loop1: detected capacity change from 0 to 32768
[ 1453.306517][T20782] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3511 (20782)
[ 1453.309023][T20790] loop2: detected capacity change from 0 to 32768
[ 1453.361524][T20782] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1453.374922][T20782] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[ 1453.390580][T20782] BTRFS info (device loop1): using free-space-tree
[ 1453.402503][T20790] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3512 (20790)
[ 1453.433262][T20790] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1453.448669][T20790] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[ 1453.458897][T20790] BTRFS info (device loop2): using free-space-tree
[ 1453.549448][T20801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3517'.
[ 1453.620793][T20782] BTRFS info (device loop1): rebuilding free space tree
[ 1453.898355][T20782] BTRFS info (device loop1): scrub: started on devid 1
[ 1453.925306][T17236] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1453.940793][T20782] BTRFS info (device loop1): left=0, need=98304, flags=2
[ 1453.970058][T20782] BTRFS info (device loop1): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[ 1453.980039][T20782] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[ 1453.993729][T20782] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1441792
[ 1454.002650][T20782] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[ 1454.010452][T20782] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[ 1454.018410][T20782] BTRFS info (device loop1): delayed_block_rsv: size 229376 reserved 229376
[ 1454.027392][T20782] BTRFS info (device loop1): delayed_refs_rsv: size 65536 reserved 65536
[ 1454.164173][T20782] BTRFS info (device loop1): unable to make block group 5242880 ro
[ 1454.216590][T20782] BTRFS info (device loop1): space_info DATA+METADATA (sub-group id 0) has 1466368 free, is not full
[ 1454.228590][T20782] BTRFS info (device loop1): space_info total=3276800, used=53248, pinned=20480, reserved=4096, may_use=1732608, readonly=0 zone_unusable=0
[ 1454.244007][T20782] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1437696
[ 1454.253226][T20782] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[ 1454.261080][T20782] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[ 1454.268766][T20782] BTRFS info (device loop1): delayed_block_rsv: size 229376 reserved 229376
[ 1454.277580][T20782] BTRFS info (device loop1): delayed_refs_rsv: size 589824 reserved 65536
[ 1454.398440][T20782] BTRFS info (device loop1): unable to make block group 6881280 ro
[ 1454.441281][T20782] BTRFS info (device loop1): space_info DATA+METADATA (sub-group id 0) has 1466368 free, is full
[ 1454.452167][T20782] BTRFS info (device loop1): space_info total=3276800, used=53248, pinned=20480, reserved=4096, may_use=1732608, readonly=0 zone_unusable=0
[ 1454.466658][T20782] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1437696
[ 1454.475653][T20782] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[ 1454.483483][T20782] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[ 1454.491238][T20782] BTRFS info (device loop1): delayed_block_rsv: size 229376 reserved 229376
[ 1454.500017][T20782] BTRFS info (device loop1): delayed_refs_rsv: size 589824 reserved 65536
[ 1454.594017][T20782] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0
[ 1454.893533][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3520'.
[ 1455.131370][T20849] vcan0: tx drop: invalid da for name 0x0000000000eb0000
[ 1455.371255][T19612] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1458.072750][T20863] loop2: detected capacity change from 0 to 32768
[ 1458.080289][T20863] XFS: attr2 mount option is deprecated.
[ 1458.162110][T20867] loop7: detected capacity change from 0 to 40427
[ 1458.186175][T20867] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[ 1458.193201][T20867] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1458.201842][T20867] F2FS-fs (loop7): build fault injection rate: 48
[ 1458.208849][T20867] F2FS-fs (loop7): build fault injection type: 0x1f8
[ 1458.221661][T20867] F2FS-fs (loop7): invalid crc value
[ 1458.288894][   T30] audit: type=1800 audit(1748199764.539:1077): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3531" name="dmabuf" dev="dmabuf" ino=5 res=0 errno=0
[ 1458.314728][T20863] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1458.330523][T20867] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1458.342248][T20867] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1458.359882][T20867] F2FS-fs (loop7): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x130e/0x4510
[ 1458.376464][   T30] audit: type=1800 audit(1748199764.612:1078): pid=20867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3530" name="file1" dev="loop7" ino=10 res=0 errno=0
[ 1458.418846][T20863] XFS (loop2): Ending clean mount
[ 1458.481401][T20863] XFS (loop2): Quotacheck needed: Please wait.
[ 1458.566780][T20863] XFS (loop2): Quotacheck: Done.
[ 1459.627981][T20887] could not allocate digest TFM handle poly1305
[ 1459.918348][T14745] syz-executor: attempt to access beyond end of device
[ 1459.918348][T14745] loop7: rw=2049, sector=45392, nr_sectors = 8 limit=40427
[ 1459.986160][T14745] CPU: 0 UID: 0 PID: 14745 Comm: syz-executor Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1459.986199][T14745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1459.986215][T14745] Call Trace:
[ 1459.986225][T14745]  <TASK>
[ 1459.986236][T14745]  dump_stack_lvl+0x189/0x250
[ 1459.986271][T14745]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1459.986296][T14745]  ? __pfx_queue_work_on+0x10/0x10
[ 1459.986318][T14745]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1459.986354][T14745]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1459.986394][T14745]  f2fs_handle_critical_error+0x37c/0x540
[ 1459.986433][T14745]  f2fs_write_end_io+0x5b8/0x7e0
[ 1459.986468][T14745]  ? __submit_merged_bio+0x1d1/0x6a0
[ 1459.986515][T14745]  __submit_merged_bio+0x27a/0x6a0
[ 1459.986553][T14745]  __submit_merged_write_cond+0x255/0x530
[ 1459.986593][T14745]  f2fs_write_data_pages+0x261d/0x3000
[ 1459.986669][T14745]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1459.986720][T14745]  ? is_bpf_text_address+0x292/0x2b0
[ 1459.986779][T14745]  ? __mod_zone_page_state+0xd7/0x140
[ 1459.986817][T14745]  ? folios_put_refs+0x560/0x640
[ 1459.986865][T14745]  ? __lock_acquire+0xab9/0xd20
[ 1459.986911][T14745]  ? do_raw_spin_lock+0x121/0x290
[ 1459.986955][T14745]  ? do_raw_spin_unlock+0x122/0x240
[ 1459.986985][T14745]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1459.987021][T14745]  do_writepages+0x32e/0x550
[ 1459.987073][T14745]  ? do_raw_spin_unlock+0x122/0x240
[ 1459.987109][T14745]  filemap_fdatawrite+0x191/0x230
[ 1459.987134][T14745]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1459.987218][T14745]  ? do_raw_spin_unlock+0x122/0x240
[ 1459.987254][T14745]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 1459.987310][T14745]  f2fs_write_checkpoint+0x94a/0x1de0
[ 1459.987384][T14745]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1459.987479][T14745]  ? kill_f2fs_super+0x298/0x6c0
[ 1459.987522][T14745]  kill_f2fs_super+0x2c3/0x6c0
[ 1459.987566][T14745]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1459.987601][T14745]  ? radix_tree_delete_item+0x2b6/0x400
[ 1459.987654][T14745]  ? shrinker_free+0x2ce/0x3e0
[ 1459.987689][T14745]  deactivate_locked_super+0xb9/0x130
[ 1459.987726][T14745]  cleanup_mnt+0x425/0x4c0
[ 1459.987759][T14745]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1459.987790][T14745]  task_work_run+0x1d4/0x260
[ 1459.987824][T14745]  ? __pfx_task_work_run+0x10/0x10
[ 1459.987851][T14745]  ? __x64_sys_umount+0x122/0x160
[ 1459.987881][T14745]  ? exit_to_user_mode_loop+0x40/0x110
[ 1459.987920][T14745]  exit_to_user_mode_loop+0xec/0x110
[ 1459.987955][T14745]  do_syscall_64+0x2bd/0x3b0
[ 1459.987982][T14745]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1459.988009][T14745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1459.988032][T14745]  ? clear_bhb_loop+0x60/0xb0
[ 1459.988060][T14745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1459.988083][T14745] RIP: 0033:0x7f6c0ed8fc97
[ 1459.988105][T14745] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1459.988125][T14745] RSP: 002b:00007ffeb8b6c668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1459.988150][T14745] RAX: 0000000000000000 RBX: 00007f6c0ee1089d RCX: 00007f6c0ed8fc97
[ 1459.988166][T14745] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb8b6c720
[ 1459.988181][T14745] RBP: 00007ffeb8b6c720 R08: 0000000000000000 R09: 0000000000000000
[ 1459.988196][T14745] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb8b6d7b0
[ 1459.988211][T14745] R13: 00007f6c0ee1089d R14: 0000000000166e2e R15: 00007ffeb8b6d7f0
[ 1459.988249][T14745]  </TASK>
[ 1459.988260][T14745] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[ 1460.840844][T17236] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1461.222716][T20901] netlink: 'syz.0.3536': attribute type 28 has an invalid length.
[ 1461.230610][T20901] netlink: 'syz.0.3536': attribute type 29 has an invalid length.
[ 1461.298624][T20901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3536'.
[ 1461.486809][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1463.863445][T20933] loop2: detected capacity change from 0 to 40427
[ 1463.873186][T20933] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[ 1463.880270][T20933] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1463.888987][T20933] F2FS-fs (loop2): build fault injection rate: 48
[ 1463.895477][T20933] F2FS-fs (loop2): build fault injection type: 0x1f8
[ 1463.917912][T20933] F2FS-fs (loop2): invalid crc value
[ 1463.997216][T20933] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1464.004638][T20933] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1464.024443][   T30] audit: type=1800 audit(1748199770.565:1079): pid=20933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3545" name="file1" dev="loop2" ino=10 res=0 errno=0
[ 1464.025674][T20933] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x130e/0x4510
[ 1464.045079][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1464.105044][T20923] loop7: detected capacity change from 0 to 32768
[ 1464.120882][T20923] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3534 (20923)
[ 1464.157723][T20923] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1464.182023][T20923] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm
[ 1464.208558][T20923] BTRFS info (device loop7): using free-space-tree
[ 1464.527543][T16744] Bluetooth: hci0: command 0x0405 tx timeout
[ 1464.789371][T20923] BTRFS info (device loop7): rebuilding free space tree
[ 1464.934303][T20923] BTRFS info (device loop7): scrub: started on devid 1
[ 1464.960354][T20923] BTRFS info (device loop7): left=0, need=98304, flags=2
[ 1464.976145][T20923] BTRFS info (device loop7): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[ 1464.986231][T20923] BTRFS info (device loop7): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[ 1465.000073][T20923] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1441792
[ 1465.008970][T20923] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0
[ 1465.016717][T20923] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0
[ 1465.024442][T20923] BTRFS info (device loop7): delayed_block_rsv: size 229376 reserved 229376
[ 1465.033244][T20923] BTRFS info (device loop7): delayed_refs_rsv: size 65536 reserved 65536
[ 1465.043004][T17236] syz-executor: attempt to access beyond end of device
[ 1465.043004][T17236] loop2: rw=2049, sector=45392, nr_sectors = 8 limit=40427
[ 1465.055660][T20923] BTRFS info (device loop7): unable to make block group 5242880 ro
[ 1465.057847][T17236] CPU: 0 UID: 0 PID: 17236 Comm: syz-executor Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1465.057883][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1465.057898][T17236] Call Trace:
[ 1465.057908][T17236]  <TASK>
[ 1465.057929][T17236]  dump_stack_lvl+0x189/0x250
[ 1465.057964][T17236]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1465.057991][T17236]  ? __pfx_queue_work_on+0x10/0x10
[ 1465.058012][T17236]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1465.058040][T17236]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1465.058084][T17236]  f2fs_handle_critical_error+0x37c/0x540
[ 1465.058127][T17236]  f2fs_write_end_io+0x5b8/0x7e0
[ 1465.058161][T17236]  ? __submit_merged_bio+0x1d1/0x6a0
[ 1465.058218][T17236]  __submit_merged_bio+0x27a/0x6a0
[ 1465.058258][T17236]  __submit_merged_write_cond+0x255/0x530
[ 1465.058300][T17236]  f2fs_write_data_pages+0x261d/0x3000
[ 1465.058386][T17236]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1465.058440][T17236]  ? arch_stack_walk+0xfc/0x150
[ 1465.058508][T17236]  ? __mod_zone_page_state+0xd7/0x140
[ 1465.058549][T17236]  ? folios_put_refs+0x560/0x640
[ 1465.058597][T17236]  ? __pfx_folios_put_refs+0x10/0x10
[ 1465.058627][T17236]  ? rcu_is_watching+0x15/0xb0
[ 1465.058665][T17236]  ? __lock_acquire+0xab9/0xd20
[ 1465.058726][T17236]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1465.058761][T17236]  do_writepages+0x32e/0x550
[ 1465.058818][T17236]  ? do_raw_spin_unlock+0x122/0x240
[ 1465.058855][T17236]  filemap_fdatawrite+0x191/0x230
[ 1465.058881][T17236]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1465.058984][T17236]  ? do_raw_spin_unlock+0x122/0x240
[ 1465.059021][T17236]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 1465.059080][T17236]  f2fs_write_checkpoint+0x94a/0x1de0
[ 1465.059152][T17236]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1465.059258][T17236]  ? kill_f2fs_super+0x298/0x6c0
[ 1465.059303][T17236]  kill_f2fs_super+0x2c3/0x6c0
[ 1465.059349][T17236]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1465.059382][T17236]  ? radix_tree_delete_item+0x2b6/0x400
[ 1465.059422][T17236]  ? shrinker_free+0x2ce/0x3e0
[ 1465.059459][T17236]  deactivate_locked_super+0xb9/0x130
[ 1465.059498][T17236]  cleanup_mnt+0x425/0x4c0
[ 1465.059533][T17236]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1465.059566][T17236]  task_work_run+0x1d4/0x260
[ 1465.059602][T17236]  ? __pfx_task_work_run+0x10/0x10
[ 1465.059631][T17236]  ? __x64_sys_umount+0x122/0x160
[ 1465.059664][T17236]  ? exit_to_user_mode_loop+0x40/0x110
[ 1465.059706][T17236]  exit_to_user_mode_loop+0xec/0x110
[ 1465.059743][T17236]  do_syscall_64+0x2bd/0x3b0
[ 1465.059771][T17236]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1465.059799][T17236]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.059824][T17236]  ? clear_bhb_loop+0x60/0xb0
[ 1465.059857][T17236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.059882][T17236] RIP: 0033:0x7fc1c318fc97
[ 1465.059904][T17236] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1465.059934][T17236] RSP: 002b:00007ffc1b0c6348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1465.059960][T17236] RAX: 0000000000000000 RBX: 00007fc1c321089d RCX: 00007fc1c318fc97
[ 1465.059977][T17236] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1b0c6400
[ 1465.059993][T17236] RBP: 00007ffc1b0c6400 R08: 0000000000000000 R09: 0000000000000000
[ 1465.060008][T17236] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1b0c7490
[ 1465.060025][T17236] R13: 00007fc1c321089d R14: 0000000000168596 R15: 00007ffc1b0c74d0
[ 1465.060069][T17236]  </TASK>
[ 1465.062610][T17236] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[ 1465.084021][T20966] 9pnet_fd: Insufficient options for proto=fd
[ 1465.243232][T20923] BTRFS info (device loop7): space_info DATA+METADATA (sub-group id 0) has 1466368 free, is not full
[ 1465.435911][T20923] BTRFS info (device loop7): space_info total=3276800, used=53248, pinned=20480, reserved=4096, may_use=1732608, readonly=0 zone_unusable=0
[ 1465.450450][T20923] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1437696
[ 1465.459534][T20923] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0
[ 1465.467298][T20923] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0
[ 1465.475234][T20923] BTRFS info (device loop7): delayed_block_rsv: size 229376 reserved 229376
[ 1465.484032][T20923] BTRFS info (device loop7): delayed_refs_rsv: size 589824 reserved 65536
[ 1465.601308][T20923] BTRFS info (device loop7): unable to make block group 6881280 ro
[ 1465.625578][T20923] BTRFS info (device loop7): space_info DATA+METADATA (sub-group id 0) has 1466368 free, is full
[ 1465.636622][T20923] BTRFS info (device loop7): space_info total=3276800, used=53248, pinned=20480, reserved=4096, may_use=1732608, readonly=0 zone_unusable=0
[ 1465.651416][T20923] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1437696
[ 1465.660234][T20923] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0
[ 1465.668215][T20923] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0
[ 1465.676625][T20923] BTRFS info (device loop7): delayed_block_rsv: size 229376 reserved 229376
[ 1465.685913][T20923] BTRFS info (device loop7): delayed_refs_rsv: size 589824 reserved 65536
[ 1465.742020][T20923] BTRFS info (device loop7): scrub: finished on devid 1 with status: 0
[ 1465.829367][T20971] loop1: detected capacity change from 0 to 64
[ 1466.649711][T14745] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1467.771530][T20975] loop2: detected capacity change from 0 to 32768
[ 1467.819818][T20975] JBD2: Ignoring recovery information on journal
[ 1467.949105][T20987] Cannot find set identified by id 0 to match
[ 1467.985716][T20975] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1468.131477][T17236] ocfs2: Unmounting device (7,2) on (node local)
[ 1468.172832][T20991] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (288 ns). Using initial count to start timer.
[ 1468.281688][T20993] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3558'.
[ 1468.424035][T20999] loop2: detected capacity change from 0 to 1024
[ 1468.431679][T20999] EXT4-fs: Ignoring removed orlov option
[ 1468.522062][T20999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1469.514387][T21019] loop1: detected capacity change from 0 to 64
[ 1471.593891][T17236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1471.697698][T21015] loop7: detected capacity change from 0 to 32768
[ 1471.723005][T21015] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3563 (21015)
[ 1471.794874][T21015] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1471.796106][T21024] tipc: Started in network mode
[ 1471.826597][T21015] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm
[ 1471.851787][T21015] BTRFS info (device loop7): using free-space-tree
[ 1471.851859][T21024] tipc: Node identity ac14140f, cluster identity 4711
[ 1471.881161][T21024] tipc: New replicast peer: 255.255.255.255
[ 1471.888194][T21024] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1471.996321][T21015] BTRFS info (device loop7): rebuilding free space tree
[ 1472.137389][  T977] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[ 1472.239027][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 1472.245683][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 1472.284509][  T977] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1472.314877][  T977] usb 2-1: config 0 has no interface number 0
[ 1472.337143][  T977] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1472.365692][  T977] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1472.394478][  T977] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1472.414039][  T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1472.452601][  T977] usb 2-1: config 0 descriptor??
[ 1472.458371][T21033] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1472.491005][  T977] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1472.758124][T14745] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1472.778768][  T977] usb 2-1: USB disconnect, device number 9
[ 1472.954198][T19959] tipc: Node number set to 2886997007
[ 1473.065641][T21064] macsec0: default FDB implementation only supports local addresses
[ 1473.114650][T21056] loop1: detected capacity change from 0 to 4096
[ 1473.124698][T21056] ntfs3: Unknown parameter ''
[ 1473.191608][T21048] loop2: detected capacity change from 0 to 40427
[ 1473.244377][T21048] F2FS-fs (loop2): invalid crc value
[ 1473.419905][T21066] kvm: kvm [21065]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80
[ 1473.478723][T21066] kvm: kvm [21065]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x80
[ 1473.599041][T21048] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1473.716606][T17236] syz-executor: attempt to access beyond end of device
[ 1473.716606][T17236] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1473.756055][T17236] CPU: 0 UID: 0 PID: 17236 Comm: syz-executor Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1473.756089][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1473.756104][T17236] Call Trace:
[ 1473.756113][T17236]  <TASK>
[ 1473.756122][T17236]  dump_stack_lvl+0x189/0x250
[ 1473.756153][T17236]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1473.756176][T17236]  ? __pfx_queue_work_on+0x10/0x10
[ 1473.756197][T17236]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1473.756221][T17236]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1473.756259][T17236]  f2fs_handle_critical_error+0x37c/0x540
[ 1473.756297][T17236]  f2fs_write_end_io+0x5b8/0x7e0
[ 1473.756328][T17236]  ? __submit_merged_bio+0x1d1/0x6a0
[ 1473.756370][T17236]  __submit_merged_bio+0x27a/0x6a0
[ 1473.756412][T17236]  __submit_merged_write_cond+0x255/0x530
[ 1473.756447][T17236]  f2fs_write_data_pages+0x261d/0x3000
[ 1473.756516][T17236]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1473.756610][T17236]  ? folios_put_refs+0x559/0x640
[ 1473.756654][T17236]  ? __lock_acquire+0xab9/0xd20
[ 1473.756695][T17236]  ? do_raw_spin_lock+0x121/0x290
[ 1473.756734][T17236]  ? do_raw_spin_unlock+0x122/0x240
[ 1473.756761][T17236]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1473.756792][T17236]  do_writepages+0x32e/0x550
[ 1473.756840][T17236]  ? do_raw_spin_unlock+0x122/0x240
[ 1473.756871][T17236]  filemap_fdatawrite+0x191/0x230
[ 1473.756895][T17236]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1473.756971][T17236]  ? do_raw_spin_unlock+0x122/0x240
[ 1473.757002][T17236]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 1473.757053][T17236]  f2fs_write_checkpoint+0x94a/0x1de0
[ 1473.757112][T17236]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1473.757200][T17236]  ? kill_f2fs_super+0x298/0x6c0
[ 1473.757238][T17236]  kill_f2fs_super+0x2c3/0x6c0
[ 1473.757278][T17236]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1473.757308][T17236]  ? radix_tree_delete_item+0x2b6/0x400
[ 1473.757342][T17236]  ? shrinker_free+0x2ce/0x3e0
[ 1473.757384][T17236]  deactivate_locked_super+0xb9/0x130
[ 1473.757420][T17236]  cleanup_mnt+0x425/0x4c0
[ 1473.757451][T17236]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1473.757479][T17236]  task_work_run+0x1d4/0x260
[ 1473.757512][T17236]  ? __pfx_task_work_run+0x10/0x10
[ 1473.757538][T17236]  ? __x64_sys_umount+0x122/0x160
[ 1473.757567][T17236]  ? exit_to_user_mode_loop+0x40/0x110
[ 1473.757606][T17236]  exit_to_user_mode_loop+0xec/0x110
[ 1473.757638][T17236]  do_syscall_64+0x2bd/0x3b0
[ 1473.757664][T17236]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1473.757689][T17236]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1473.757710][T17236]  ? clear_bhb_loop+0x60/0xb0
[ 1473.757738][T17236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1473.757760][T17236] RIP: 0033:0x7fc1c318fc97
[ 1473.757781][T17236] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1473.757800][T17236] RSP: 002b:00007ffc1b0c6348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1473.757824][T17236] RAX: 0000000000000000 RBX: 00007fc1c321089d RCX: 00007fc1c318fc97
[ 1473.757838][T17236] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1b0c6400
[ 1473.757851][T17236] RBP: 00007ffc1b0c6400 R08: 0000000000000000 R09: 0000000000000000
[ 1473.757865][T17236] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1b0c7490
[ 1473.757880][T17236] R13: 00007fc1c321089d R14: 000000000016ace2 R15: 00007ffc1b0c74d0
[ 1473.757916][T17236]  </TASK>
[ 1473.757926][T17236] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[ 1473.860400][T21080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3580'.
[ 1474.137294][T21080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1474.144629][T21080] IPv6: NLM_F_CREATE should be set when creating new route
[ 1474.427865][T21075] loop7: detected capacity change from 0 to 32768
[ 1475.718591][T21112] binder: 21111:21112 ioctl c0306201 200000000640 returned -22
[ 1475.826872][T21109] kvm: kvm [21108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0
[ 1475.847822][T21115] binder_alloc: 21114: pid 21114 spamming oneway? 1 buffers allocated for a total size of 6144
[ 1475.870553][T21109] kvm: kvm [21108]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0
[ 1476.088397][T21123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1476.138259][T21128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1476.277216][T21135] @: renamed from vlan0 (while UP)
[ 1476.450823][T20002] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff
[ 1476.728605][T19959] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1476.893956][T19959] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1476.904324][T19959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1476.917066][T19959] usb 2-1: Product: syz
[ 1476.921409][T19959] usb 2-1: Manufacturer: syz
[ 1476.926249][T19959] usb 2-1: SerialNumber: syz
[ 1476.938021][T19959] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1476.961405][  T977] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1477.169444][T21157] overlayfs: failed to clone upperpath
[ 1477.195561][T21145] xt_hashlimit: size too large, truncated to 1048576
[ 1477.352893][T16744] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1477.590144][ T5923] usb 2-1: USB disconnect, device number 10
[ 1477.937194][  T977] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1477.963512][  T977] ath9k_htc: Failed to initialize the device
[ 1477.980991][ T5923] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1478.203463][T21180] fuse: Bad value for 'fd'
[ 1478.465254][T21189] netlink: 'syz.3.3621': attribute type 1 has an invalid length.
[ 1478.474598][T21188] loop2: detected capacity change from 0 to 7
[ 1478.502386][T21188] Dev loop2: unable to read RDB block 7
[ 1478.508254][T21188]  loop2: unable to read partition table
[ 1478.518882][T21188] loop2: partition table beyond EOD, truncated
[ 1478.554367][T21188] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1478.705364][T21191] bond1: entered promiscuous mode
[ 1478.727766][T21191] bond1: entered allmulticast mode
[ 1478.733444][T21191] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1478.867161][T21192] ip6gretap1: entered promiscuous mode
[ 1478.892887][T21192] ip6gretap1: entered allmulticast mode
[ 1478.911207][T17404] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1478.938006][T21192] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1479.061124][ T6862] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1479.545832][T21205] xt_hashlimit: size too large, truncated to 1048576
[ 1480.453420][T21224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1480.570075][T21224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1480.691547][T21224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1480.723363][T21224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1480.747412][T21234] : entered promiscuous mode
[ 1481.489480][T21257] 9pnet_virtio: no channels available for device syz
[ 1481.503852][T21257] overlayfs: overlapping lowerdir path
[ 1482.245883][T21275] xt_hashlimit: size too large, truncated to 1048576
[ 1482.331112][T20002] Bluetooth: hci2: link tx timeout
[ 1482.337102][T20002] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1482.433136][T20002] Bluetooth: hci2: command 0x0405 tx timeout
[ 1482.772111][T21290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1482.791371][T21290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1482.810127][T21290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1482.836683][T21290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1482.854946][T21290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1483.250998][T21288] chnl_net:caif_netlink_parms(): no params data found
[ 1483.429370][T21302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3662'.
[ 1483.654479][T21288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1483.664788][T21288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1483.678130][T21288] bridge_slave_0: entered allmulticast mode
[ 1483.687019][T21288] bridge_slave_0: entered promiscuous mode
[ 1483.696725][T21288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1483.704137][T21288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1483.713728][T21288] bridge_slave_1: entered allmulticast mode
[ 1483.722015][T21288] bridge_slave_1: entered promiscuous mode
[ 1483.840458][T21288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1483.881170][T21288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1483.987713][T21320] bridge0: port 3(syz_tun) entered blocking state
[ 1484.061530][T21320] bridge0: port 3(syz_tun) entered disabled state
[ 1484.152581][T21320] syz_tun: entered allmulticast mode
[ 1484.169048][T21320] syz_tun: entered promiscuous mode
[ 1484.183609][T21320] bridge0: port 3(syz_tun) entered blocking state
[ 1484.191497][T21320] bridge0: port 3(syz_tun) entered forwarding state
[ 1484.269330][T21288] team0: Port device team_slave_0 added
[ 1484.316321][T21288] team0: Port device team_slave_1 added
[ 1484.331750][T21323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1484.423049][T20002] Bluetooth: hci2: command 0x0405 tx timeout
[ 1484.471468][T21288] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1484.478476][T21288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1484.559519][T21288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1484.595640][T21335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3674'.
[ 1484.596494][T21288] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1484.611885][T21288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1484.639908][T21288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1484.794712][T16744] Bluetooth: hci3: command tx timeout
[ 1484.848284][T21288] hsr_slave_0: entered promiscuous mode
[ 1484.855631][T21288] hsr_slave_1: entered promiscuous mode
[ 1484.862704][T21288] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1484.870305][T21288] Cannot create hsr debugfs directory
[ 1485.074787][T21346] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1485.191681][T21288] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1485.464463][T21288] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1485.684046][T21288] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1485.685819][T21363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2834047395 (22672379160 ns) > initial count (8751802360 ns). Using initial count to start timer.
[ 1485.846809][T21288] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1486.161490][T21288] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1486.207130][T21288] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1486.230048][T21288] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1486.260742][T21288] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1486.505777][T21288] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1486.560224][T21288] 8021q: adding VLAN 0 to HW filter on device team0
[ 1486.579852][T17404] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1486.587103][T17404] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1486.635730][T17412] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1486.643021][T17412] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1486.781565][T16744] Bluetooth: hci3: command tx timeout
[ 1487.134490][T21288] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1487.265038][T21288] veth0_vlan: entered promiscuous mode
[ 1487.303414][T21288] veth1_vlan: entered promiscuous mode
[ 1487.374409][T21288] veth0_macvtap: entered promiscuous mode
[ 1487.417373][T21288] veth1_macvtap: entered promiscuous mode
[ 1487.458850][T21288] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1487.516348][T21288] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1487.527552][T21288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.547294][T21288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.561438][T21288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.607470][T21288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.975575][T17412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1487.975781][T21425] sd 0:0:1:0: PR command failed: 1026
[ 1488.000221][T17412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1488.008861][T21425] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1488.029960][T21425] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1488.107481][T17412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1488.141310][T17412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1488.386815][T21438] pimreg: entered allmulticast mode
[ 1488.473165][T21444] binder: BINDER_SET_CONTEXT_MGR already set
[ 1488.509779][T21444] binder: 21440:21444 ioctl 4018620d 200000000040 returned -16
[ 1488.761512][T16744] Bluetooth: hci3: command tx timeout
[ 1488.903639][T16744] Bluetooth: hci0: unexpected event for opcode 0x2019
[ 1489.005561][T21463] 9pnet_virtio: no channels available for device syz
[ 1489.493713][T21481] xt_hashlimit: size too large, truncated to 1048576
[ 1489.501608][T19626] ==================================================================
[ 1489.509715][T19626] BUG: KASAN: slab-use-after-free in binder_remove_device+0xa1/0xe0
[ 1489.517741][T19626] Write of size 8 at addr ffff888058a04808 by task syz.7.3217/19626
[ 1489.525781][T19626] 
[ 1489.528143][T19626] CPU: 0 UID: 0 PID: 19626 Comm: syz.7.3217 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1489.528172][T19626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1489.528188][T19626] Call Trace:
[ 1489.528197][T19626]  <TASK>
[ 1489.528207][T19626]  dump_stack_lvl+0x189/0x250
[ 1489.528232][T19626]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1489.528255][T19626]  ? rcu_is_watching+0x15/0xb0
[ 1489.528275][T19626]  ? __kasan_check_byte+0x12/0x40
[ 1489.528299][T19626]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1489.528318][T19626]  ? rcu_is_watching+0x15/0xb0
[ 1489.528339][T19626]  ? lock_release+0x4b/0x3e0
[ 1489.528373][T19626]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1489.528396][T19626]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1489.528426][T19626]  print_report+0xd2/0x2b0
[ 1489.528456][T19626]  ? binder_remove_device+0xa1/0xe0
[ 1489.528477][T19626]  kasan_report+0x118/0x150
[ 1489.528501][T19626]  ? binder_remove_device+0xa1/0xe0
[ 1489.528527][T19626]  binder_remove_device+0xa1/0xe0
[ 1489.528548][T19626]  binderfs_evict_inode+0x16b/0x240
[ 1489.528580][T19626]  ? __pfx_binderfs_evict_inode+0x10/0x10
[ 1489.528611][T19626]  evict+0x501/0x9c0
[ 1489.528646][T19626]  ? __pfx_evict+0x10/0x10
[ 1489.528674][T19626]  ? do_raw_spin_unlock+0x122/0x240
[ 1489.528702][T19626]  ? _raw_spin_unlock+0x28/0x50
[ 1489.528723][T19626]  ? iput+0x6d8/0x9d0
[ 1489.528752][T19626]  __dentry_kill+0x209/0x660
[ 1489.528780][T19626]  ? shrink_kill+0x8d/0x2c0
[ 1489.528805][T19626]  shrink_kill+0xa9/0x2c0
[ 1489.528830][T19626]  shrink_dentry_list+0x2e0/0x5e0
[ 1489.528861][T19626]  shrink_dcache_parent+0xa1/0x2c0
[ 1489.528891][T19626]  ? __pfx_shrink_dcache_parent+0x10/0x10
[ 1489.528929][T19626]  do_one_tree+0x23/0xe0
[ 1489.528959][T19626]  shrink_dcache_for_umount+0xa0/0x170
[ 1489.528990][T19626]  generic_shutdown_super+0x67/0x2c0
[ 1489.529024][T19626]  kill_litter_super+0x76/0xb0
[ 1489.529058][T19626]  binderfs_kill_super+0x44/0x90
[ 1489.529091][T19626]  deactivate_locked_super+0xb9/0x130
[ 1489.529139][T19626]  cleanup_mnt+0x425/0x4c0
[ 1489.529181][T19626]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1489.529246][T19626]  task_work_run+0x1d4/0x260
[ 1489.529280][T19626]  ? __pfx_task_work_run+0x10/0x10
[ 1489.529309][T19626]  ? kmem_cache_free+0x18f/0x400
[ 1489.529335][T19626]  do_exit+0x6ad/0x22e0
[ 1489.529363][T19626]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1489.529387][T19626]  ? do_raw_spin_lock+0x121/0x290
[ 1489.529413][T19626]  ? __pfx_do_exit+0x10/0x10
[ 1489.529447][T19626]  do_group_exit+0x21c/0x2d0
[ 1489.529474][T19626]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1489.529499][T19626]  get_signal+0x125e/0x1310
[ 1489.529544][T19626]  arch_do_signal_or_restart+0x9a/0x750
[ 1489.529574][T19626]  ? __pfx_get_timespec64+0x10/0x10
[ 1489.529606][T19626]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1489.529644][T19626]  ? exit_to_user_mode_loop+0x40/0x110
[ 1489.529677][T19626]  exit_to_user_mode_loop+0x75/0x110
[ 1489.529706][T19626]  do_syscall_64+0x2bd/0x3b0
[ 1489.529726][T19626]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1489.529745][T19626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1489.529762][T19626]  ? clear_bhb_loop+0x60/0xb0
[ 1489.529781][T19626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1489.529798][T19626] RIP: 0033:0x7f6c0edc1225
[ 1489.529814][T19626] Code: Unable to access opcode bytes at 0x7f6c0edc11fb.
[ 1489.529823][T19626] RSP: 002b:00007f6c0fb53f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[ 1489.529842][T19626] RAX: 0000000000000000 RBX: 00007f6c0efb6160 RCX: 00007f6c0edc1225
[ 1489.529854][T19626] RDX: 00007f6c0fb53fc0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1489.529865][T19626] RBP: 00007f6c0ee10ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1489.529876][T19626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 1489.529888][T19626] R13: 0000000000001000 R14: 00007f6c0efb6160 R15: 00007ffeb8b6d3d8
[ 1489.529907][T19626]  </TASK>
[ 1489.529914][T19626] 
[ 1489.897876][T19626] Allocated by task 9622:
[ 1489.902236][T19626]  kasan_save_track+0x3e/0x80
[ 1489.907009][T19626]  __kasan_kmalloc+0x93/0xb0
[ 1489.911645][T19626]  __kmalloc_cache_noprof+0x230/0x3d0
[ 1489.917061][T19626]  binderfs_binder_device_create+0x1eb/0xc40
[ 1489.923099][T19626]  binderfs_fill_super+0xa0e/0xe90
[ 1489.928265][T19626]  get_tree_nodev+0xbb/0x150
[ 1489.932919][T19626]  vfs_get_tree+0x92/0x2b0
[ 1489.937383][T19626]  do_new_mount+0x24a/0xa40
[ 1489.941944][T19626]  __se_sys_mount+0x317/0x410
[ 1489.946669][T19626]  do_syscall_64+0xfa/0x3b0
[ 1489.951231][T19626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1489.957267][T19626] 
[ 1489.959622][T19626] Freed by task 5936:
[ 1489.963638][T19626]  kasan_save_track+0x3e/0x80
[ 1489.968395][T19626]  kasan_save_free_info+0x46/0x50
[ 1489.973476][T19626]  __kasan_slab_free+0x62/0x70
[ 1489.978291][T19626]  kfree+0x18e/0x440
[ 1489.982222][T19626]  binder_proc_dec_tmpref+0x228/0x4f0
[ 1489.987640][T19626]  binder_deferred_func+0x13a5/0x1520
[ 1489.993073][T19626]  process_scheduled_works+0xade/0x17b0
[ 1489.998690][T19626]  worker_thread+0x8a0/0xda0
[ 1490.003324][T19626]  kthread+0x711/0x8a0
[ 1490.007438][T19626]  ret_from_fork+0x3fc/0x770
[ 1490.012091][T19626]  ret_from_fork_asm+0x1a/0x30
[ 1490.016903][T19626] 
[ 1490.019256][T19626] The buggy address belongs to the object at ffff888058a04800
[ 1490.019256][T19626]  which belongs to the cache kmalloc-512 of size 512
[ 1490.033352][T19626] The buggy address is located 8 bytes inside of
[ 1490.033352][T19626]  freed 512-byte region [ffff888058a04800, ffff888058a04a00)
[ 1490.047021][T19626] 
[ 1490.049382][T19626] The buggy address belongs to the physical page:
[ 1490.055820][T19626] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058a04400 pfn:0x58a04
[ 1490.065933][T19626] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1490.074473][T19626] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1490.083012][T19626] page_type: f5(slab)
[ 1490.087036][T19626] raw: 00fff00000000240 ffff88801a441c80 ffffea0001513610 ffffea000092e410
[ 1490.095673][T19626] raw: ffff888058a04400 0000000000100007 00000000f5000000 0000000000000000
[ 1490.104301][T19626] head: 00fff00000000240 ffff88801a441c80 ffffea0001513610 ffffea000092e410
[ 1490.113018][T19626] head: ffff888058a04400 0000000000100007 00000000f5000000 0000000000000000
[ 1490.121742][T19626] head: 00fff00000000002 ffffea0001628101 00000000ffffffff 00000000ffffffff
[ 1490.130459][T19626] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 1490.139164][T19626] page dumped because: kasan: bad access detected
[ 1490.145625][T19626] page_owner tracks the page as allocated
[ 1490.151373][T19626] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1323, tgid 1323 (kworker/u8:6), ts 96081768275, free_ts 29346901518
[ 1490.172784][T19626]  post_alloc_hook+0x240/0x2a0
[ 1490.177610][T19626]  get_page_from_freelist+0x21e4/0x22c0
[ 1490.183299][T19626]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1490.189156][T19626]  alloc_pages_mpol+0x232/0x4a0
[ 1490.194054][T19626]  allocate_slab+0x8a/0x3b0
[ 1490.198602][T19626]  ___slab_alloc+0xbfc/0x1480
[ 1490.203330][T19626]  __kmalloc_noprof+0x305/0x4f0
[ 1490.208220][T19626]  fib6_info_alloc+0x30/0xf0
[ 1490.212862][T19626]  ip6_route_info_create+0x142/0x860
[ 1490.218209][T19626]  addrconf_f6i_alloc+0x1d2/0x450
[ 1490.223270][T19626]  ipv6_add_addr+0x56e/0x1090
[ 1490.227989][T19626]  addrconf_add_linklocal+0x28c/0x6c0
[ 1490.233414][T19626]  addrconf_addr_gen+0x490/0x580
[ 1490.238390][T19626]  addrconf_init_auto_addrs+0x711/0xb50
[ 1490.243979][T19626]  addrconf_notify+0xacc/0x1010
[ 1490.248877][T19626]  notifier_call_chain+0x1b6/0x3e0
[ 1490.254025][T19626] page last free pid 1 tgid 1 stack trace:
[ 1490.259869][T19626]  __free_frozen_pages+0xc71/0xe70
[ 1490.265047][T19626]  free_contig_range+0x1bd/0x4a0
[ 1490.270043][T19626]  destroy_args+0x7e/0x5d0
[ 1490.274505][T19626]  debug_vm_pgtable+0x412/0x450
[ 1490.279401][T19626]  do_one_initcall+0x233/0x820
[ 1490.284207][T19626]  do_initcall_level+0x137/0x1f0
[ 1490.289187][T19626]  do_initcalls+0x69/0xd0
[ 1490.293557][T19626]  kernel_init_freeable+0x3d9/0x570
[ 1490.298807][T19626]  kernel_init+0x1d/0x1d0
[ 1490.303183][T19626]  ret_from_fork+0x3fc/0x770
[ 1490.307922][T19626]  ret_from_fork_asm+0x1a/0x30
[ 1490.312728][T19626] 
[ 1490.315083][T19626] Memory state around the buggy address:
[ 1490.320765][T19626]  ffff888058a04700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1490.328861][T19626]  ffff888058a04780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1490.340001][T19626] >ffff888058a04800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1490.348106][T19626]                       ^
[ 1490.352470][T19626]  ffff888058a04880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1490.360655][T19626]  ffff888058a04900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1490.368752][T19626] ==================================================================
[ 1490.376936][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1490.385597][T19626] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1490.392851][T19626] CPU: 0 UID: 0 PID: 19626 Comm: syz.7.3217 Not tainted 6.15.0-rc7-next-20250523-syzkaller #0 PREEMPT(full) 
[ 1490.404601][T19626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1490.414694][T19626] Call Trace:
[ 1490.418116][T19626]  <TASK>
[ 1490.421085][T19626]  dump_stack_lvl+0x99/0x250
[ 1490.425728][T19626]  ? __asan_memcpy+0x40/0x70
[ 1490.430370][T19626]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1490.435609][T19626]  ? __pfx__printk+0x10/0x10
[ 1490.440254][T19626]  panic+0x2db/0x790
[ 1490.444334][T19626]  ? __pfx_panic+0x10/0x10
[ 1490.448809][T19626]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 1490.454748][T19626]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1490.460690][T19626]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1490.467087][T19626]  ? print_memory_metadata+0x314/0x400
[ 1490.472614][T19626]  ? binder_remove_device+0xa1/0xe0
[ 1490.477859][T19626]  check_panic_on_warn+0x89/0xb0
[ 1490.482845][T19626]  ? binder_remove_device+0xa1/0xe0
[ 1490.488078][T19626]  end_report+0x78/0x160
[ 1490.492349][T19626]  kasan_report+0x129/0x150
[ 1490.496871][T19626]  ? binder_remove_device+0xa1/0xe0
[ 1490.502108][T19626]  binder_remove_device+0xa1/0xe0
[ 1490.507198][T19626]  binderfs_evict_inode+0x16b/0x240
[ 1490.512424][T19626]  ? __pfx_binderfs_evict_inode+0x10/0x10
[ 1490.518168][T19626]  evict+0x501/0x9c0
[ 1490.522087][T19626]  ? __pfx_evict+0x10/0x10
[ 1490.526540][T19626]  ? do_raw_spin_unlock+0x122/0x240
[ 1490.531759][T19626]  ? _raw_spin_unlock+0x28/0x50
[ 1490.536621][T19626]  ? iput+0x6d8/0x9d0
[ 1490.540630][T19626]  __dentry_kill+0x209/0x660
[ 1490.545244][T19626]  ? shrink_kill+0x8d/0x2c0
[ 1490.549765][T19626]  shrink_kill+0xa9/0x2c0
[ 1490.554119][T19626]  shrink_dentry_list+0x2e0/0x5e0
[ 1490.559161][T19626]  shrink_dcache_parent+0xa1/0x2c0
[ 1490.564378][T19626]  ? __pfx_shrink_dcache_parent+0x10/0x10
[ 1490.570128][T19626]  do_one_tree+0x23/0xe0
[ 1490.574391][T19626]  shrink_dcache_for_umount+0xa0/0x170
[ 1490.579871][T19626]  generic_shutdown_super+0x67/0x2c0
[ 1490.585178][T19626]  kill_litter_super+0x76/0xb0
[ 1490.589968][T19626]  binderfs_kill_super+0x44/0x90
[ 1490.594935][T19626]  deactivate_locked_super+0xb9/0x130
[ 1490.600346][T19626]  cleanup_mnt+0x425/0x4c0
[ 1490.604810][T19626]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1490.610060][T19626]  task_work_run+0x1d4/0x260
[ 1490.614677][T19626]  ? __pfx_task_work_run+0x10/0x10
[ 1490.619830][T19626]  ? kmem_cache_free+0x18f/0x400
[ 1490.624799][T19626]  do_exit+0x6ad/0x22e0
[ 1490.628986][T19626]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1490.634394][T19626]  ? do_raw_spin_lock+0x121/0x290
[ 1490.639460][T19626]  ? __pfx_do_exit+0x10/0x10
[ 1490.644088][T19626]  do_group_exit+0x21c/0x2d0
[ 1490.648698][T19626]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1490.653926][T19626]  get_signal+0x125e/0x1310
[ 1490.658474][T19626]  arch_do_signal_or_restart+0x9a/0x750
[ 1490.664055][T19626]  ? __pfx_get_timespec64+0x10/0x10
[ 1490.669281][T19626]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1490.675459][T19626]  ? exit_to_user_mode_loop+0x40/0x110
[ 1490.680953][T19626]  exit_to_user_mode_loop+0x75/0x110
[ 1490.686269][T19626]  do_syscall_64+0x2bd/0x3b0
[ 1490.690909][T19626]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1490.696122][T19626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1490.702212][T19626]  ? clear_bhb_loop+0x60/0xb0
[ 1490.706910][T19626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1490.712826][T19626] RIP: 0033:0x7f6c0edc1225
[ 1490.717252][T19626] Code: Unable to access opcode bytes at 0x7f6c0edc11fb.
[ 1490.724280][T19626] RSP: 002b:00007f6c0fb53f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[ 1490.732708][T19626] RAX: 0000000000000000 RBX: 00007f6c0efb6160 RCX: 00007f6c0edc1225
[ 1490.740692][T19626] RDX: 00007f6c0fb53fc0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1490.748859][T19626] RBP: 00007f6c0ee10ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1490.756838][T19626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[ 1490.764822][T19626] R13: 0000000000001000 R14: 00007f6c0efb6160 R15: 00007ffeb8b6d3d8
[ 1490.772830][T19626]  </TASK>
[ 1490.776205][T19626] Kernel Offset: disabled
[ 1490.780545][T19626] Rebooting in 86400 seconds..