last executing test programs:

15m0.200632637s ago: executing program 32 (id=33):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@oldalloc}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./bus/file0\x00', 0x2, 0xffffffff)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

13m49.491400997s ago: executing program 33 (id=175):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1008001, &(0x7f0000000180)=ANY=[], 0x1, 0x144c, &(0x7f0000003d80)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d000000000000ff00000000000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44, 0x0, 0x0, 0x40}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0dab)

13m24.009068859s ago: executing program 34 (id=236):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)}], 0x1}}], 0x1, 0x20000044)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

11m32.328952789s ago: executing program 35 (id=463):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)}], 0x1}}], 0x1, 0x20000044)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000002", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

11m21.911400642s ago: executing program 36 (id=482):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
syz_clone3(0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

9m35.134071961s ago: executing program 37 (id=704):
getpid()
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$char_usb(r0, &(0x7f0000000700)="027ef4e448", 0x5)
getpgrp(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa90, 0x8e8, 0xffffffff, 0xffffffff, 0x8e8, 0xffffffff, 0x9c0, 0xffffffff, 0xffffffff, 0x9c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xffffffff], [0xffffffff], 'bridge_slave_1\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x8c0, 0x8e8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0xe, 0x5, {0x2}}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x2, 0x3}, {0x80}, {0x4, 0x3}, {0x6, 0x2}, {0x250, 0x3}, {0x80, 0x2}, {0x800, 0x2}, {0x4}, {}, {0x2, 0x2}, {0x0, 0x2}], [{0x92, 0x5}, {0x7, 0x7}, {0xffffffff, 0x1}, {0x9, 0x98}, {0x9, 0x6}, {0xeb, 0x6}, {0x683f}, {0x0, 0xffff7d1d}, {0x36, 0x28000000}, {0x8}, {0x4, 0x400}], 0x0, 0x8}, {[{0x1a, 0x2}, {0x9a4c, 0x3}, {}, {0xfffffffd}, {0x4, 0x3}, {0x7, 0x2}, {0x9, 0x1}, {0x8, 0x3}, {0x26}, {0x8, 0x2}, {0x9, 0x3}], [{0x0, 0x443}, {0x4, 0x3}, {0x8, 0x7}, {0x7fffffff, 0x6}, {0x0, 0x5}, {0x4, 0x3}, {0xa5d, 0x7}, {0x22cd, 0x5}, {0xc0a5, 0x1}, {0x3, 0x8}, {0x8, 0xffff5503}], 0x8, 0x7}, {[{0xc5cf, 0x1}, {0x20000000, 0x2}, {0x40000004}, {0x2, 0x2}, {0xc, 0x3}, {0x40, 0x1}, {0x3, 0x2}, {0x1000}, {0x200, 0x3}, {0x3}, {0x6302}], [{0x61d, 0x2}, {0x81, 0x4}, {0x6, 0x10}, {0xfe, 0x7efb46fd}, {0x7ff, 0xd}, {0xfffffffb, 0x5}, {0x8, 0x7fffffff}, {0xa, 0x2}, {0xf978, 0x6cd}, {0x20fe6746, 0x6}, {0x0, 0x8}], 0xe, 0x9}, {[{0x6, 0x3}, {0x10, 0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x8a, 0x3}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x1}, {0x3}, {0xd, 0x2}, {0x0, 0x2}], [{0x0, 0x1}, {0xf, 0x572}, {0x3, 0x1}, {0x4, 0x8}, {0x2, 0x7}, {0x1000, 0x6}, {0x7, 0x7b}, {0xa, 0x8}, {0x2, 0x2}, {0x7, 0x6}, {0xfffffffd, 0x7}], 0x1, 0xa}, {[{0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x400, 0x1}, {0x7, 0x2}, {0x0, 0x1}, {0x5}, {0xffff, 0x2}, {0x6, 0x1}, {0xb}, {0x2, 0x1}], [{0x8, 0x6}, {0x8001, 0xfffffff6}, {0x4, 0x4}, {0x0, 0x7819a7b5}, {0x101, 0x2}, {0xb1, 0x9}, {}, {0x0, 0x3}, {0x0, 0x9}, {0x1ff}, {0xc, 0x9}], 0x2, 0x1}, {[{0x7fffffff, 0x3}, {0x1000}, {0x4, 0x2a2c5dee0a026e93}, {0x401, 0x3}, {0x3, 0x1}, {0x10001, 0x1}, {0x81, 0x3}, {0x6, 0x3}, {0x8, 0x3}, {0xfffff000}, {0x216, 0x2}], [{0x81, 0x4}, {0x7f, 0x3}, {0x4}, {0xfffffff7}, {0x99, 0x81}, {0x479, 0x3}, {0x3, 0x3}, {0xfffffffc, 0x80000001}, {0xa, 0x8}, {0x8, 0x2}, {0x7, 0x7fffffff}], 0x8, 0xb}, {[{0x7fffffff}, {0xfffffb5c, 0x2}, {0xfff}, {0x3, 0x3}, {0x101, 0x1}, {0x7f, 0x1}, {0x6, 0x3}, {0x8}, {0x9, 0x3}, {0x6, 0x2}, {0x6, 0x3}], [{0x4, 0x200}, {0x100, 0x20cc}, {0xc, 0x3}, {0x6f1c, 0xa0a}, {0x8, 0xfb}, {0x36, 0x1}, {0xc8, 0xe}, {0x2, 0x3}, {0x1}, {0x2, 0x6}, {0x2, 0x5}], 0x6, 0x9}, {[{0x101, 0x2}, {0x9, 0x2}, {0x2, 0x3}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {}, {0x4, 0x1}, {0x3, 0x2}, {0xfffffff4, 0x3}, {0x1, 0x2}], [{0x80000000, 0x9}, {0x3, 0x4}, {0x7, 0x7ff}, {0x2, 0x6}, {0x10000, 0x3}, {0xb, 0xa1}, {0x6, 0x25b}, {0x6, 0xe}, {0x8, 0xff7f}, {0x52c3cc9b, 0x6}, {0x80000000, 0x80}], 0x6, 0x8}, {[{0x7fff, 0x2}, {0xd5, 0x2}, {0x3ff, 0x1}, {0xfffff87e, 0x2}, {0x7fff, 0x2}, {0xd, 0x2}, {0x8000}, {0x1}, {0x2, 0x1}, {0xf72, 0x3}, {0xfff, 0x3}], [{0x7fffffff, 0x18d}, {0x7, 0x4}, {0x5, 0x7}, {0x9, 0x9543}, {0x9, 0x2}, {0xb51a, 0x401}, {0x4, 0x5}, {0x4, 0xe26f}, {0x0, 0x80}, {0x1, 0x6}, {0x60, 0x100}], 0x9, 0x2}, {[{0x1, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x2}, {0x80}, {0x3, 0x2}, {0x9, 0x3}, {0x1, 0x2}, {0x6, 0x3}, {0x5}, {0xfffffff8, 0x3}], [{0x9, 0x80}, {0x4d6, 0x6}, {0x1, 0x3}, {0xd3, 0xfcf}, {0x3, 0x4}, {0xbd36, 0xca26}, {0x2, 0x102}, {0xed40, 0x5}, {0x5}, {0x1, 0x401}, {0x2a1c1ca8, 0x3}], 0x5, 0x7}, {[{0x1ee, 0x2}, {0x8}, {0x3, 0x1}, {0xa0000, 0x3}, {0x4, 0x3}, {0x4}, {0xfffffff7}, {0x4}, {0xfffffffa, 0x3}, {0x8600, 0x2}, {0xead4, 0x1}], [{0x3, 0x8001}, {0x4, 0x5}, {0x0, 0x1}, {0xa333, 0x5}, {0x5, 0x8}, {0x6, 0x37e9}, {0x2, 0xfffffffd}, {0x1, 0xa2d6}, {0x4, 0x2}, {0x4, 0x7}, {0x8001, 0x7}], 0x3, 0xb}], 0x8, 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', '\x00', {}, {}, 0x0, 0xf7, 0x3}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xaf0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r7, &(0x7f0000000f40)=""/243, 0xf3)
ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, &(0x7f0000000080)={0x42})

9m6.647577295s ago: executing program 9 (id=791):
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2915048, 0x0, 0x0, 0x0, &(0x7f00000002c0))
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='configfs\x00', 0xa0c802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x9c8, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7fff}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000300000000140000000000000029000000"], 0x30}}], 0x1, 0x8800)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
sendmmsg$unix(r3, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

9m4.524223557s ago: executing program 9 (id=799):
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
r1 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d})
io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)="204d487a3ac888995ce3c840f0ce8d818941b72671f321df572259f4ce98e0e23cd0097dfa24508246698121b2bd00", 0x2f)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0)
write$binfmt_elf64(r0, 0x0, 0x1820)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
getpid()
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=<r2=>0x0)
memfd_create(0x0, 0x4)
syz_ublk_setup_queues(0xffffffffffffffff, r2, 0x0, 0x0, 0x1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000003d40)={0x8, 0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f00000019c0)=""/122, 0x7a}, {&(0x7f0000001a40)=""/54, 0x36}, {&(0x7f0000001a80)=""/105, 0x69}, {&(0x7f0000001b00)=""/16, 0x10}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/47, 0x2f}, {&(0x7f0000003b80)=""/231, 0xe7}], &(0x7f0000003d00)=[0x8]}, 0x20)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil)
mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
close(r3)

8m59.762545629s ago: executing program 9 (id=809):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket(0x11, 0x800, 0x7fffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000000))

8m55.308169531s ago: executing program 9 (id=819):
socket$inet6_udp(0xa, 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lseek(0xffffffffffffffff, 0x201, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'})

8m53.905873616s ago: executing program 9 (id=823):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x4c880)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}})
write$binfmt_script(r8, 0x0, 0x0)

8m51.778744101s ago: executing program 9 (id=825):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x24)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce)
listen(0xffffffffffffffff, 0x402)
getpid()
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00003e4000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000125000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000d6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00002d7000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
r2 = dup(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r4, 0x0, &(0x7f0000001700)=""/4096}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x1b}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6a521}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e978000000000000"], 0x1c}}, 0x0)

8m36.618680067s ago: executing program 38 (id=825):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x24)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce)
listen(0xffffffffffffffff, 0x402)
getpid()
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00003e4000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000125000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000d6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00002d7000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
r2 = dup(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r4, 0x0, &(0x7f0000001700)=""/4096}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x1b}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6a521}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e978000000000000"], 0x1c}}, 0x0)

8m7.079367887s ago: executing program 6 (id=907):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x6020400)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
dup(r1)
r2 = userfaultfd(0x1)
fcntl$dupfd(r2, 0x0, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

8m3.323167756s ago: executing program 6 (id=912):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0xfffffffc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)

8m0.745749998s ago: executing program 6 (id=914):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8m0.391580112s ago: executing program 6 (id=918):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./cgroup/../file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0\x00', 0x8502, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000240)={0xffffffff, 0xfffffff7, 0x4, 0x83, 0x6, 0x7, 0xa2, 0x9})
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4d5201, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff)

7m58.687605047s ago: executing program 6 (id=919):
syz_open_dev$sndpcmp(0x0, 0x0, 0x80040)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

7m52.443499842s ago: executing program 6 (id=933):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x2000741, &(0x7f00000003c0)={[{@usrquota}, {@stripe={'stripe', 0x3d, 0xffffffffffff45e9}}, {@errors_remount}, {@orlov}, {@jqfmt_vfsold, 0x0}, {@stripe={'stripe', 0x3d, 0x9}}, {@delalloc}, {@init_itable}, {@data_ordered}, {@journal_async_commit}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@errors_continue}, {@sb={'sb', 0x3d, 0x10001}}, {@barrier}], [], 0x2c}, 0x6, 0x525, &(0x7f0000001240)="$eJzs3MtvFEceAOBfj8fYXmBt2BevXbzLrtba1WJsnoc9ANqVuESKlCgiR8c2iGAgwo4ElhVMFIGUQyJuueVxi5S/IKfkEiVRDknOQVyjSCjyBcIh6qhneoaxZ8Yvxp4Yf580dnV3dXdVV5enHu4OYNPqz34kEdsi4ruI6C0vzo/QX/71cG5m9Ke5mdEk0vS5H5NSvAdzM6OVqJX9tuYLA4WIwhtJ7K0/bdfk9emLIxMT41fzFYNThTx0aeT8+Pnxy8MnThw53HP82PDRluQzS9ODPa9d2bf7zIt3nhk9e+elLz7K0pvm22vzUdZX+rll2WfoqFvTH/3zr2WNfyw/6RvC9ppwUowotjEtLF9212Zl1Vmq/73RUVNyvfH/19uaOGBNpWmadtWtrX6Xzaa1kqS8Q5reTIGnQBLtTgHQHpUv+gdzWU91ZrS+H/x0u38qSj2gLN8P8095SzEKWR++r9w36lyj8/8+Is7OPno3+0TDcQgAgNb65FTE7dNRzNodlU95RLgQf6yJ99t8bqgvInZExM6I+F3efvlDRCnunyJiV80+20tHWVz/guX69s83PXmgtrnaMln777/53Nb89l815X0d+dL2Uv47k3MXJsYP5ddkIDq7suWh+kNXh9U+/d87bzc7f39N+y/7ZOevtAXzdPxQXDBANzYyNfKk+a64f7N0YW/U5z+JYlIJReyOiD2rOH52zS7868N9zbbPy3+Wzyz/Se2s2VvND96CSab0/Yh/lst/NhbkP/L5v6Q0P3nplcHJ69P/uVA7Pzl0/Njw0cHumBg/NFi5K+p9+fWtZ/NgXTdikfKvVI2lqtATycr/Nw3v/2oZ9GWh6nzt5MrPcevu7aZ9mtXe/1uS50vhyvzstZGpqatDEVuS2fr1w4/3vTbSMy9+lv+BA43r/86In9/L99sbEdlN/OeI+EtE7M/T/teI+FtEHFgk/5+f/vvLzbqQS+d/bWX5H1tR+TcLnPwqovGmjouffRw7Hs+Pf3svIt7sr8t/ZzQr/yOl0EC+ZmxkqnupfC2W0vGrk0kxYpV3MwAAAGw8+yNiWySFg/lA07YoFA4ejNhaHUGZnPr3uSuvXh4rPyPQF52FykhXb8146FA+NpwtZ3sN1yxn2w+Xxo3TNE17suWs/z6xq71Zh01va/lXXf3PfF//SEvZ8h+KAX7tVjSP1uyJNmBDWlj/7y57z9b/QwawvjysDZuX+g+b17Lr/1o9BQe0TaP6fyPiYRuSAqyzRvX/hbo1J9clLcD60v+HzWv19d8/A8BG5/sfNqWln+tfXWDnmUXiJMW1OWnzQCEWjRN9+esArk9frLRpFj/gvUJEa1LY0XjTo/wFjSs8YM+8Mi00jNMdrbiqUVgyTnHpFzGsaaC76dkLLT1X4cl274qI+Wsq73yp3r3Vm+1GJTC91tewlIAP2vinCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCV+CQAA//8zbtGM")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@nojournal_checksum}, {@dax_never}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nodioread_nolock}, {@abort}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{}], 0x1, 0x7a00, 0x0, 0x3)
landlock_restrict_self(r0, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
io_uring_setup(0xa91, &(0x7f00000000c0)={0x0, 0x8161, 0x2, 0x3, 0x25c})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fchdir(r2)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
inotify_init()
setns(r4, 0x24020000)

7m37.327508242s ago: executing program 39 (id=933):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x2000741, &(0x7f00000003c0)={[{@usrquota}, {@stripe={'stripe', 0x3d, 0xffffffffffff45e9}}, {@errors_remount}, {@orlov}, {@jqfmt_vfsold, 0x0}, {@stripe={'stripe', 0x3d, 0x9}}, {@delalloc}, {@init_itable}, {@data_ordered}, {@journal_async_commit}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@errors_continue}, {@sb={'sb', 0x3d, 0x10001}}, {@barrier}], [], 0x2c}, 0x6, 0x525, &(0x7f0000001240)="$eJzs3MtvFEceAOBfj8fYXmBt2BevXbzLrtba1WJsnoc9ANqVuESKlCgiR8c2iGAgwo4ElhVMFIGUQyJuueVxi5S/IKfkEiVRDknOQVyjSCjyBcIh6qhneoaxZ8Yvxp4Yf580dnV3dXdVV5enHu4OYNPqz34kEdsi4ruI6C0vzo/QX/71cG5m9Ke5mdEk0vS5H5NSvAdzM6OVqJX9tuYLA4WIwhtJ7K0/bdfk9emLIxMT41fzFYNThTx0aeT8+Pnxy8MnThw53HP82PDRluQzS9ODPa9d2bf7zIt3nhk9e+elLz7K0pvm22vzUdZX+rll2WfoqFvTH/3zr2WNfyw/6RvC9ppwUowotjEtLF9212Zl1Vmq/73RUVNyvfH/19uaOGBNpWmadtWtrX6Xzaa1kqS8Q5reTIGnQBLtTgHQHpUv+gdzWU91ZrS+H/x0u38qSj2gLN8P8095SzEKWR++r9w36lyj8/8+Is7OPno3+0TDcQgAgNb65FTE7dNRzNodlU95RLgQf6yJ99t8bqgvInZExM6I+F3efvlDRCnunyJiV80+20tHWVz/guX69s83PXmgtrnaMln777/53Nb89l815X0d+dL2Uv47k3MXJsYP5ddkIDq7suWh+kNXh9U+/d87bzc7f39N+y/7ZOevtAXzdPxQXDBANzYyNfKk+a64f7N0YW/U5z+JYlIJReyOiD2rOH52zS7868N9zbbPy3+Wzyz/Se2s2VvND96CSab0/Yh/lst/NhbkP/L5v6Q0P3nplcHJ69P/uVA7Pzl0/Njw0cHumBg/NFi5K+p9+fWtZ/NgXTdikfKvVI2lqtATycr/Nw3v/2oZ9GWh6nzt5MrPcevu7aZ9mtXe/1uS50vhyvzstZGpqatDEVuS2fr1w4/3vTbSMy9+lv+BA43r/86In9/L99sbEdlN/OeI+EtE7M/T/teI+FtEHFgk/5+f/vvLzbqQS+d/bWX5H1tR+TcLnPwqovGmjouffRw7Hs+Pf3svIt7sr8t/ZzQr/yOl0EC+ZmxkqnupfC2W0vGrk0kxYpV3MwAAAGw8+yNiWySFg/lA07YoFA4ejNhaHUGZnPr3uSuvXh4rPyPQF52FykhXb8146FA+NpwtZ3sN1yxn2w+Xxo3TNE17suWs/z6xq71Zh01va/lXXf3PfF//SEvZ8h+KAX7tVjSP1uyJNmBDWlj/7y57z9b/QwawvjysDZuX+g+b17Lr/1o9BQe0TaP6fyPiYRuSAqyzRvX/hbo1J9clLcD60v+HzWv19d8/A8BG5/sfNqWln+tfXWDnmUXiJMW1OWnzQCEWjRN9+esArk9frLRpFj/gvUJEa1LY0XjTo/wFjSs8YM+8Mi00jNMdrbiqUVgyTnHpFzGsaaC76dkLLT1X4cl274qI+Wsq73yp3r3Vm+1GJTC91tewlIAP2vinCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCV+CQAA//8zbtGM")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@nojournal_checksum}, {@dax_never}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nodioread_nolock}, {@abort}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{}], 0x1, 0x7a00, 0x0, 0x3)
landlock_restrict_self(r0, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
io_uring_setup(0xa91, &(0x7f00000000c0)={0x0, 0x8161, 0x2, 0x3, 0x25c})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fchdir(r2)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
inotify_init()
setns(r4, 0x24020000)

7m9.019329925s ago: executing program 8 (id=1011):
socket(0x2a, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

7m7.458538809s ago: executing program 8 (id=1017):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_ethernet(0x2099, &(0x7f0000008800)=ANY=[@ANYBLOB], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000000c0)={0x8, 'vlan0\x00', {'dummy0\x00'}, 0x6})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000020500160002000000040012000500"], 0x60}}, 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./bus\x00', 0x0, 0x400040, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000140007800800114000000000050015000000000005000100060000000500050002000000050004000000000011000300686173683a6e65742c6e65740000"], 0x60}}, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f00000005c0)=0xde)

7m5.04314294s ago: executing program 8 (id=1019):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x2000741, &(0x7f00000003c0)={[{@usrquota}, {@stripe={'stripe', 0x3d, 0xffffffffffff45e9}}, {@errors_remount}, {@orlov}, {@jqfmt_vfsold, 0x0}, {@stripe={'stripe', 0x3d, 0x9}}, {@delalloc}, {@init_itable}, {@data_ordered}, {@journal_async_commit}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@errors_continue}, {@sb={'sb', 0x3d, 0x10001}}, {@barrier}], [], 0x2c}, 0x6, 0x525, &(0x7f0000001240)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@nojournal_checksum}, {@dax_never}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nodioread_nolock}, {@abort}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
landlock_restrict_self(r0, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000140))
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x8a850, r0, 0xaa61c000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)

7m3.984448444s ago: executing program 8 (id=1024):
syz_open_pts(0xffffffffffffffff, 0x81)
syz_open_dev$sg(0x0, 0x0, 0x8203)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @sliced={0x8, [0xb496, 0x3ff, 0x6, 0x4a, 0x5, 0x0, 0x7, 0x8, 0x9, 0x9, 0x5ff4, 0x3, 0x46c0, 0x8, 0x5, 0xba, 0x0, 0x1, 0x2, 0x80, 0xf090, 0xb, 0x8000, 0x6, 0x1ff, 0x0, 0x6, 0x9, 0x8, 0x200, 0x6, 0x2, 0xa, 0x7f, 0x0, 0x1, 0x0, 0x9, 0xe, 0x7, 0x4, 0x0, 0xfff9, 0xb, 0xff01, 0x4, 0x8001, 0x5230], 0xfffffff8}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000c80)={0x128, 0x1, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_PAYLOAD={0x37, 0xa, "2564bd8a34d2ec4bc7e860b53d82044b1cd0a57aaf31efaf63f89b0c156304d76148a47ee465bfd51b86de867b05fa587d029f"}, @NFQA_PAYLOAD={0x59, 0xa, "314e0350980ef6e8bd448914572f20b69f44f1a1a37935da8459deaf88d89f820b6d7e17d62da71ef664551e6c0875b412fa836755e9ca7b9fb28ba2a5237900a94f1acbc0c6b85b51855ba71ff02dcebfb50ac81b"}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_PAYLOAD={0x26, 0xa, "201c9067854d842eb3c30157c401c409f5deef2bdd749b59fa252d4a4f75a90247b1"}, @NFQA_CT={0x34, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x3ff, 0x9, 0x6]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}]}, 0x128}}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
socket(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)

7m1.56404271s ago: executing program 8 (id=1026):
syz_open_dev$video4linux(&(0x7f0000000280), 0x20000000000000, 0x20000)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, 0x0, 0x0)
accept4$unix(r1, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x5, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
close(r3)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020}, 0x2020)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)

6m58.925992271s ago: executing program 8 (id=1031):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0x1, 0x543, &(0x7f00000005c0)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)
prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
pipe2(&(0x7f0000001440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
read$watch_queue(r2, &(0x7f0000000780)=""/221, 0xfdef)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0)

6m42.481427843s ago: executing program 40 (id=1031):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0x1, 0x543, &(0x7f00000005c0)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)
prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
pipe2(&(0x7f0000001440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
read$watch_queue(r2, &(0x7f0000000780)=""/221, 0xfdef)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0)

2m54.881969609s ago: executing program 1 (id=1461):
r0 = open(0x0, 0x201, 0xd1)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000)
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000440)={0x1a, &(0x7f0000000580)=[{0x1a, '\x00', @buffer={"29bdd565f0de779fc51bdea4fd77a901f674ee7e731351f21207d975cf28bf25", 0x20}, 0x6}, {0x37, '\x00', @st={0x4, [{0x3, @svalue=0xff}, {0x2, @svalue}, {0x2, @uvalue=0xae1}, {0x0, @uvalue=0xf2}]}, 0x8}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCDELRT(r4, 0x890c, 0x0)
syz_usb_connect(0x0, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060102"], 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
ftruncate(r3, 0xffff)
setns(r0, 0x80)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r7, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x91, 0x8}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
fcntl$addseals(r3, 0x409, 0x3)
close(0x3)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x2000})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r9, 0x80, 0x2, 0x8}, [@NDA_VLAN={0x6, 0x5, 0xfffe}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', r9, 0x10, 0x0, 0x6, 0x2, {{0x15, 0x4, 0x3, 0x0, 0x54, 0x67, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_prespec={0x44, 0x14, 0xca, 0x3, 0x8, [{@multicast1, 0x401}, {@remote, 0x6}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xb3, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xaf, 0x0, 0x1, [0x1, 0x4, 0x5, 0xfff]}]}}}}})
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000000c0)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0, &(0x7f0000000080)=<r12=>0x0)
syz_io_uring_submit(r10, r11, r12, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})

2m51.024843848s ago: executing program 1 (id=1467):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

2m43.174839086s ago: executing program 1 (id=1478):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m42.902760906s ago: executing program 1 (id=1480):
mknod(0x0, 0x1ffa, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000500)=[@decrefs], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000680)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x12}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$sg(0x0, 0xf17, 0x100)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x3, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x1}}, 0x1c}}, 0x0)
io_uring_setup(0x2a8a, &(0x7f0000000240)={0x0, 0xb0e3, 0x1046, 0x0, 0x33b})
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0)

2m41.932758605s ago: executing program 1 (id=1481):
syz_open_pts(0xffffffffffffffff, 0x81)
syz_open_dev$sg(0x0, 0x0, 0x8203)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @sliced={0x8, [0xb496, 0x3ff, 0x6, 0x4a, 0x5, 0x0, 0x7, 0x8, 0x9, 0x9, 0x5ff4, 0x3, 0x46c0, 0x8, 0x5, 0xba, 0x0, 0x1, 0x2, 0x80, 0xf090, 0xb, 0x8000, 0x6, 0x1ff, 0x0, 0x6, 0x9, 0x8, 0x200, 0x6, 0x2, 0xa, 0x7f, 0x0, 0x1, 0x0, 0x9, 0xe, 0x7, 0x4, 0x0, 0xfff9, 0xb, 0xff01, 0x4, 0x8001, 0x5230], 0xfffffff8}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000c80)={0x128, 0x1, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_PAYLOAD={0x37, 0xa, "2564bd8a34d2ec4bc7e860b53d82044b1cd0a57aaf31efaf63f89b0c156304d76148a47ee465bfd51b86de867b05fa587d029f"}, @NFQA_PAYLOAD={0x59, 0xa, "314e0350980ef6e8bd448914572f20b69f44f1a1a37935da8459deaf88d89f820b6d7e17d62da71ef664551e6c0875b412fa836755e9ca7b9fb28ba2a5237900a94f1acbc0c6b85b51855ba71ff02dcebfb50ac81b"}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_PAYLOAD={0x26, 0xa, "201c9067854d842eb3c30157c401c409f5deef2bdd749b59fa252d4a4f75a90247b1"}, @NFQA_CT={0x34, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x3ff, 0x9, 0x6]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}]}, 0x128}}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r2, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c)

2m41.213724019s ago: executing program 1 (id=1482):
syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f00000003c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, &(0x7f0000000000)={{0x101, 0x8, 0x10000000, 0x9}}, 0x2, 0x0, 0x9}})
shmctl$SHM_UNLOCK(r3, 0xc)
semget(0x1, 0x1, 0x39c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)

2m25.979119285s ago: executing program 41 (id=1482):
syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f00000003c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, &(0x7f0000000000)={{0x101, 0x8, 0x10000000, 0x9}}, 0x2, 0x0, 0x9}})
shmctl$SHM_UNLOCK(r3, 0xc)
semget(0x1, 0x1, 0x39c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)

1m20.270454458s ago: executing program 7 (id=1626):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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")
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
setpriority(0x1, 0x0, 0x1)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa2)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2)

1m17.483970793s ago: executing program 7 (id=1632):
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000540)='./file1/file0\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x152b, &(0x7f0000002d40)="$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")
mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00')
ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000500))

1m17.191324838s ago: executing program 5 (id=1633):
close(0x3)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1})
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

1m15.572769503s ago: executing program 7 (id=1634):
r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0)
syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2)
syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1m15.162513961s ago: executing program 5 (id=1636):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./cgroup/../file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240))
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0\x00', 0x8502, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000240)={0xffffffff, 0xfffffff7, 0x4, 0x83, 0x6, 0x7, 0xa2, 0x9})
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4d5201, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x101)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff)

1m11.128231777s ago: executing program 7 (id=1644):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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")
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
setpriority(0x1, 0x0, 0x1)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa2)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2)

1m9.238201862s ago: executing program 7 (id=1646):
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000540)='./file1/file0\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x152b, &(0x7f0000002d40)="$eJzs3Au4TtX2MPAx5pyLTRtvkvsacyze5DJJklwScqkkSUjuCUmSJOnGJrckJEmuO8k95J52cr/fcg/tHEmShIQk83t26tMp5+t/zr9z9J09fs+znj3HWmvMNdYe7/uutd7n2furLoOrN6xRpR4zw79C/zLACz+SACABAPoBQDYACACgdPbS2dO2Z9KY9C8dRPyb1J9yuSsQl5P0P32T/qdv0v/0Tfqfvkn/0zfpf/om/U/fpP9CpGvT8lwpS/pd5Pv//8+p/02yXP//+yD+ftU/2lf6/99G/1N7S//TjQyXWin9Ty8ufQmQ/qdv0v/0LLjcBYjLTN7/6Zv0X4h07U//TnntmX9m/+DfUsN/eNFw+Wv4VxchhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOI/4Iy/yADAL+PLXZcQQgghhBBCCCH+PP7dy12BEEIIIYQQQggh/v0QFGgwEEAGyAgJkAkywxWQCFkgK2SDGFwJ2eEqyAFXQ07IBbkhD+SFfJAfQiCwwBBBASgIcbgGCsG1UBiKQFEoBg6KQwm4DkrC9VAKboDScCOUgZugLJSD8lABboaKcAtUgspQBW6FqlANqkMNuA1uhzugJtwJteAuqA13Qx24B+rCvVAP6kMDuA8awv3QCBpDE2gKzaA5tPiD/ORsl8p/Fp6D56EbdIck6AE94QXoBb2hD/SFfvAi9IeXYAC8DANhEAyGV2AIvApD4TUYBq/DcHgDRsBIGAWjYQyMhWR4E8bBWzAe3r4/C0yESTAZpsBUmAbvwHSYATPhXZgFs2EOJGeaB/NhAbwHC+F9SIEPYBF8CIthCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm+Ej2AJbYRtshx2wE3bBx7Ab9sBe+ARS8dN/Mv/0r/MTU6ErAgIqVGjQYAbMgAmYgJkxMyZiImbFrBjDGGbH7JgDc2BOzIm5MTfmxbyYH/MjISEjYwEsgHGMYyEshIWxMBbFoujQYQksgSXxeiyFpbA0lsYyWAbLYjkshxWwAlbEilgJK2EVrIJVsSpWx+p4G96Gd2BNrIm1sBbWxtpYB+tgXayL9bAeNsAG2BAbYiNshE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yH7bE9dsAO2BE7YifshJ2xM3bBLtgVn8an8Vl8Fp/H57E7VlU9sCf2xF7YC/tgX+yLL2J/fAlfwpdxIA7CwfgKvoKv4lA8hcPwdRyOw7GiGomjcDSyGovJmIwZYRyOx/E4ASfiRJyMU3AqTsNpOB1n4Ax8F2fhbJyNc3EuzscFuAAX4vuYgim4CE/jYlyCS3EZLscVuBxX4WpchWtxHa7FDbgBN+Em/Ag/wq24FbfjdtyJO/Fj/Bj34B4ciKmYivtwH+7H/XgAD+BBPIiH8BAexsN4BI/gUTyKx/A4nsDjeBJP4ik8jWcA4CyexXN4Ds/j+bQ3v0pjlFEZVAaVoBJUZpVZJapElVVlVTEVU9lVdpVD5VA5VU6VW+VWeVVelV/lV6RIsYpUAVVAxVVcFVKFVGFVWBVVRZVTTpVQJVRJVVKVUqVUaXXjmTLqJlVWlVOtXQVVQVVUbVwlVVlVUVVUVVVNVVc1VA11u7pd1VQ1VS1VS9VWCAD3qLqqB/bB+iqtMw3VIGykBmMT1VQ1U83Vq/iAaqmGYivVWrVRD6nXcRi2Uy1de/Wo6qBGYUf1uBqNT6jOaix2UU+prupp9Yx6Vj2nWrluqruagD1UTzUZe6neqo/qq6ZjNZXWserqZTVQDVKD1StqPr6qhqrX9uCFD0w1Qo1Uo9RoNUaNVcnqTTVOvaXGq7fVBDVRTVKT1RQ1VU1T76jpaoaaqd5Vs9RsNUfNVfPUfLVAvacWqvdVivpALVIfqsVqiVqqlqnlaoVaqVap1WqNWqvWqfVqg9qoNqnN6iO1RW1V29R2tUPtVLvUx2q32qP2qk9UqvpU7VN/U/vVZ+qA+lwdVF+oQ+pLdVh9pY6or9VR9Y06po6rE+pbdVJ9p06p0+qM+l6dVT+oc+pHdV55BRq10lobHegMOqNO0Jl0Zn2FTtRZdFadTcf0lTq7vkrn0FfrnDqXzm3yBKDz6fw61KStZh3pArqgjutrdCF9rS6si+iiuph2urguoa/TJfX1upS+QZfWN+oy+iZdVpfT5T3om3VFfYuupCvrKvpWXVVX09V1DX2bvl3foWvqO3UtfZeure/WdfQ9uq6+V9fT9XUDfZ9uqO/XjXRj3UQ31c10c91CP6Bb6gd1oFvrNvoh3VY/rNvpR3R7/ajuoB/THfXjupN+QnfWT+ou+indVVcGgB/1ee11N91dJ+keuqd+QffSvXUf3Vf30y/q/volPUC/rAfqQXqwfkUP0a/qofo1PUy/rofrN/QIPVKP0qP1GD1WJ+s39Tj9lh6v39YT9EQ9SU/WU/RU3SdtJlAXXjE/5ScAwKXz37pE/oCfjr5Jb9Yf6S16q96mt+sdeqfepXfp3Xq33qv36lSdqvfpfXq/3q8P6AP6oD6oD+lD+rA+rI/oI/qoPqqP6eP6e/2tPqm/06f0aX1af6/P6rP6nL7wOwCDRhltjAlMBpPRJJhMJrO5wiSaLCaryWZi5kqT3VxlcpirTU6Ty+Q2eUxek8/kN6EhYw2byBQwBU3cXGMKmWtNYVPEFDXFjDPFTQlz3f86/4/qa2FamJampWllWpk2po1pa9qadqadaW/amw6mg+loOppOppPpbDqbLqaL6WqWBxea8pzpZrqZJJNkepoXTC/T2/QxfU0/86Lpb/qbAWaAGWgGmsFmsBlihpihZqgZlvDzLZMZYUaZUWaMGWOSfTYzzowz4814M8FMMJP6ZTNTzBQzzUwz0810M9PMNLPMLDPHzDHzzDyzwCwwC81Ck2JSzCKzyCw2S8wSs8wsMyvMCrPKrDJrzBqzzqwzG8wGs9hsNpvNFrPFbDPbzA6zw+wyu8xus9vsNXtNqkk1+8w+s9/sNwfMAXPQHDSHzCFz2Bw2R8wRc9QcNcfMMXPCnDAnzUlzypwyZ8wZc9acNefMOXPenE+77QtUoAITmCBDkCFICBKCzEHmIDFIDLIGWYNYEAuyB9mDHMHVQc4gV5A7yBPkDfIF+YMwoMAGHPxyH3lNUCi4NigcFAmKBsUCFxQPSgTXBSWD64NSwQ1B6eDGoExwU1A2KBeUDyoENwcVg1uCSkHloEpwa1A1qBZUD2oEtwW3B3cENYM7g1rBXUHt4O6gTnBPUDe4N6gX1A8aBPcFDYP7g0ZB46BJ0DRoFjQPWvyp83t/KteDrlvYPUwKe4Q9wxfCXmHvsE/YN+wXvhj2D18KB4QvhwPDQeHg8JVwSPhqODR8LRwWvh4OD98IR4Qjw1Hh6HBMODZMDt8Mx4VvhePDt8MJ4cRwUjA5nBJODaeF74TTwxnhzPDdcFY4O5wTzg3nhfND/PnikhJ+EC4KPwwXh0vCpeGycHm4IlwZrgpXh2vCteG6cH24oXT/C7uGW8Kt4bZwe7gj3BnuCj8Od4d7wr3hJ2Fq+Gm4L/xbuD/8LDwQfh4eDL8ID4VfhofDr8Ij4dfh0fCb8Fh4PBOE34Ynw+/CU+Hp8Ez4fXg2/CE8F/4Yng992s192uWdDBnKQBkogRIoM2WmREqkrJSVYhSj7JSdclAOykk5KTflpryUl/JTfkrDxFSAClCc4lSIClFhKkxFqSg5clSCSlBJKkmlqBSVptJUhspQWbJUnsrTzXQz3UK3UGWqTLfSrVSNqlENqkGIt1NNqkm1qBbVptpUh+pQXapL9ageNaAG1JAaUiNqRE2oCTWjZtSCWlBLakmtqBW1oTbUltpSO2pH7ak9daAO1JE6UifqRJ2pM3WhLtSVutIz9Aw9R89RN+pGSZREPakn9aJe1If6UD/qR/2pPw2gATSQBtJgGkxDaAgNpaE0jF6n4fQGjaCRNIpG0xgaS8mUTONoHI2n8TSBJtAkmkRTaApNo2k0nabTTJpJs2gWzaE5NI/m0QJaQAtpIaVQCi2iRbSYFtNSWkrLaTmtpJW0mlbTWlpL62k9baSNtJk20xbaQttoG+2gHbSLdtFu2k17aS+lUirto320n/bTATpAB+kgHaJDdJgO0xE6QkfpKB2jY3SCTtBJOkmn6BSdoTN0ln6gc/QjnSdPCTaTzWyvsIk2i81qs9nfxrltHpvX5rP5bWhz2lw2EwD8EpO1trAtYovaYtbZ4raEve53cVlbzpa3FezNtqK9xVayZW0m+HV8u73D1rR32lr2LlvD3vZ3cW17t61j77d1bWNbzza1DWxz29DebxvZxraJbWqb2ea2rX3YtrOP2Pb2UdvBPva7eKF93662a+xau87utnvsGfu9PWy/smftD7ab7W772Rdtf/uSHWBftgPtoL+PAexw+4YdYUfaUXa0HWPH/i6eZCfbKXaqnWbfsdPtjN/FC+x7dpZNsXPsXDvPzv8pTqspxX5gF9kPvffeLrXL7HK7wq60q/5vrcvsBrvRbrK77Md2i91qt9ntdofd+VOcdh577Sc21X5qD9kv7X77mT1gj9iD9ouf4rTzO2K/tkftN/aYPW5P2G/tSfudPWVP/3T+aef+rf3RnrfeAiMr1mw44AyckRM4E2fmKziRs3BWzsYxvpKz81Wcg6/mnJyLc3Mezsv5OD+HTGyZOeICXJDjfA0X4mu5MBfholyMHRfnEnwdl+TruRTfwKX5Ri7DN3FZLsfluQLfzBX5Fq7ElbkK38pVudrWOy582vEdXJPv5Fp8F9fmu7kO38N1+V6ux/W5Ad/HDfl+bsSNuQk35WbcnFvwA9ySH+RW3Jrb8EPclh/mdvwIt+dHuQM/xh35ce7ET3BnfpK78FPclZ/mZ/hZfo6f527cnZO4B/fkF7gX9+Y+3Jf78Yvcn1/iAfwyD+RBPJhfYeZXeSi/xsP4dR7Ob/AIHsmjeDSP4bGczG/yOH6Lx/PbPIEn8iSezFN4Kk/jd3g6z+CZ/C7P4tk8h+fyPJ7PC/g9Xsjvcwp/wIv4Q17MS3gpL+PlvIJX8ipezWt4La/j9byBN/Im3swf8Rbeytt4O+/gnbyLP+bdvIf38iecyp/yPv4b7+fP+AB/zgf5Cz7EX/Jh/oqP8Nd8lL/hY3ycT/C3fJK/41N8ms/w93yWf+Bz/COfZ88QYaQiHZkoiDJEGaOEKFOUOboiSoyyRFmjbFEsujLKHl0V5YiujnJGuaLcUZ4ob5Qvyh+FEUU24iiKCkQFo3h0TVQoujYqHBWJikbFIhcVj0pE10Ulo+ujUtENUenoxqhMdFNUNioXlY8qRDdHFaNbokpR5ahKdGtUNaoWVY9qRLdFt0d3RDWjO6Na0V1RqejuqE50T1Q3ujeqF9WPGkT3RQ2j+6NGUeOoSdQ0ahY1j1pED0QtowejVlHrqE30UNQ2ejhqFz0StY8ejTpEj13cXuTnG5jfbE+KekT65zubO/W8+Pz4gvh78YXx9+Mp8Q/ii+IfxhfHl8SXxpfFl8dXxFfGV8VXx9fE18bXxdfHN8Q3xjfFva+RERymPQiDcYHL4DK6BJfJZXZXuESXxWV12VzMXemyu6tcDne1y+lyudwuj8vr8rn8LnTkrGMXuQKuoIu7a1whd60r7Iq4oq6Yc664K+GauxauhWvpHnStXGvXxj3kHnIPu4fdI+4R96jr4B5zHd3jrpN7wnV2T7on3VOuq3vaPeOedc+55103190luSTX0/V0vVwv18f1cf1cP9ff9XcD3AA30A10g91gN8QNcUPdUDfMDXPD3XA3wo1wo9woN8aNccku2Y1z49x4N95NcBPcJDfJTXFT3DQ3zU13091MN9PNcrPcHDfHzXPz3AK3wC10C12KS3GL3CK32C12S91St9wtdyvdSrfarXZr3Vq33q13G91Gt9ltdlvcFrfNbXM73A63y+1yu91ut9ftdaku1e1z+9x+t98dcJ+7g+4Ld8h96Q67r9wR97U76r5xx9xxd8J9606679wpd9qdcd+7s+4Hd8796M4775Jjb8bGxd6KjY+9HZsQmxibFJscmxKbGpsWeyc2PTYjNjP2bmxWbHZsTmxubF5sfmxB7L3Ywtj7sZTYB7FFsQ9ji2NLYktjy2LLYyti3ufbEvkCvqCP+2t8IX+tL+yL+KK+mHe+uC/hr/Ml/fW+lL/Bl/Y3+jL+Jl/Wl/PlfWPfxDf1zXxz38I/4Fv6B30r39q38Q/5tv5h384/4tv7R30H/5jv6B/3nfwTvrN/0nfxT83++eXpn/PP+26+u0/yPXxP/4Lv5Xv7Pr6v7+df9P39S36Af9kP9IP8YP+KH+Jf9UP9a36Yf90P92/4EX6kH+VH+zF+rE/2b/px/i0/3r/tJ/iJfpKf7Kf4qX6af8dP9zP8TP+un+Vn+zl+rp/n5/sF/j2/0L/vU/wHfpH/0C/2S/xSv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9hlhi9/qt/ntfoff6Xf5j/1uv8fv9Z/4VP+p3+f/5vf7z/wB/7k/6L/wh/yX/rD/yh/xX/uj/ht/zB/3J/y3/qT/zp/yp/0Z/70/63/w5/yP/rz8zZoQQgghxP9I0h9s73GJdernxQBATwDIsjXPwV9vT3tuWp/zwri32t0hBgCPdu9S/5elfv2kpF+Ou1hDUHAuAMQu5meAi/ESaAMP/zQqecn6eqvyyL+ZP/jV9rT54zcCZAbI9Mu6BPgp/tX87aE1XP8P5m/83m/n/2398bkAhQtezEk70C/xxflL/YP5d7b9g/kzfZYM0OpXOYlwMb44fwl4EB6D9n+3pxBCCCGEEEIIcUFvdbbrHz3fpj2f5zUXczLCxfji8+eln8//QKU/4xyEEEIIIYQQQgjx//bE08888kD79q07/TcPMv41yvgLDBAA/gJlXP5BAvwlyvgLDy73J5MQQgghhBDiz3bxpv9yVyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//p/CFP/451/fTx9+U5VCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEuGz+TwAAAP//4JtCyg==")
mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00')
ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000500))

1m7.383718582s ago: executing program 7 (id=1647):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB], 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x64000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000180), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x80]}, &(0x7f0000000000)=0x100)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)

1m4.784975268s ago: executing program 5 (id=1654):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x4c880)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}})
write$binfmt_script(r7, 0x0, 0x0)

1m1.307309135s ago: executing program 5 (id=1658):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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")
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
setpriority(0x1, 0x0, 0x1)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa2)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2)

58.377391392s ago: executing program 5 (id=1665):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
epoll_create1(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

54.426751982s ago: executing program 5 (id=1671):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = socket(0x1d, 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240), 0x1, 0x5b7, &(0x7f0000001380)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x15})
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6})
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0xc1105511, 0x0)
write(r2, &(0x7f0000000040)="240000001e005f0214f6fffffffffff80700000002000000000000", 0x1b)
fchdir(r1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff)
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000200)='$f', 0x2}], 0x1, 0x5, 0x178)
close(r5)

52.130152598s ago: executing program 42 (id=1647):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB], 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x64000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000180), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, [0x0, 0x80]}, &(0x7f0000000000)=0x100)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)

37.884643635s ago: executing program 43 (id=1671):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = socket(0x1d, 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240), 0x1, 0x5b7, &(0x7f0000001380)="$eJzs3U1oHNcdAPD/zGot2ZYrF1poiw+mLbhgvPqw3bo9yddSg8GHQi+tWK2F0UprtKvWEoLKdxPiQ0iCL84tOeSYkEMOIZccc80lH+eAiUUClg/Jhv2SZXnlrGTtbqz9/WC0783M7v//duY9zQwzbAAD63TtTxrx24i4mkSMbVs2FM2FpxvrbW6s5R9vrOWTqFavfZNEEhGPNtbyrfWT5uvxiFiPiN9ExMfZiLPp1kceaRXKK6vzM8ViYalZH68s3Bwvr6yeu7EwM1eYKyye/8tfL166cHFyanJ7uo+r22vZvbX1zhd3X7nz6d/v333n3VPr+ddmkpiO0eay7e04SI3vJBvTO+Zf6EawPkr6nQD7kmn281pX+nWMRabZ69upbh8chnuSHtBF1eGI6pZtRWAAJC/Q6VuDCPAyah0H1M5/W1Mvjz8eXG6cgNTibm6s5f8frfhDjWsTMVI/Nzn2bfLUmUntfPNkLxPlUFq/HRETQ0PP7v9Jc//bv4mDSJCu+uhyY0M9u/3TrfEn2ow/o61rpy+oNf5tNse/zTbxM7uMf1c7jPH9v756c9f4t4fjd23jJ1vxkzbx04j4T4fx7/3zg0u7Lau+FXEm2sdvSZ5/fXj8+o1iYaLxt22MD8+c+tvu7Y84tkv8xjXbkXoi29t/pJlT2mH73//kvd+vPyf+n/7w/O3f7vs/GhGvdhj/l4/e/sduyx7cTh7WjgL2uv2TyMb9DuP/efr0582iq4YAAAAAAAAAAHCA0vq9bEma2yqnaS7XeIb3V3EsLZbKlbPXS8uLs4173k5GNm3daTXWqCe1+mTzftxWfWpH/XymGTBztF7P5UvF2T63HQAAAAAAAAAAAAAAAAAAAH4uju94/v+7TP35/+mIqRP9zg3ogd1/8hs47PR/GFxP9/+kb3kAvef/Pwysqv4Pg0v/h8Gl/8Pg0v9hcLXt/0d7nwfQe8/0/5H+5AH0nuN/AAAAAAAAAAAAAAAAAAAAAAAAAADoiqtXrtSm6uONtXytPju0sjxf+u+52UJ5PrewnM/lS0s3c3Ol0lyxkMuXFn7q85JS6eZELC7fGq8UypXx8srqvxdKy4ut3xQtZLveIgAAAAAAAAAAAAAAAAAAAHj5jNanJM1FZBv1NM3lIk5ExMkkkus3ioWJiPhFRHyWyQ7X6pP9ThoAAAAAAAAAAAAAAAAAAAAOmfLK6vxMsVhY6l5hqBmqs3d9WelqPkN7WTki1g82jdon7vld2eYXWJ8z0vXtdbgLmQ73w4Ev9HFQAgAAAAAAAAAAAAAAAACAAfXkod9O3/FDdxMCAAAAAAAAAAAAAAAAAACAgZR+nUREbToz9sfRnUuPJJuZ+mtE/O/etddvzVQqS5O1+Q+35lfeaM6f6kf+QKda/TSNiFo/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4or6zOzxSLhaV9FoY7WKffbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjx8DAAD//95Mx5c=")
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x15})
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6})
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0xc1105511, 0x0)
write(r2, &(0x7f0000000040)="240000001e005f0214f6fffffffffff80700000002000000000000", 0x1b)
fchdir(r1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff)
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000200)='$f', 0x2}], 0x1, 0x5, 0x178)
close(r5)

18.3200514s ago: executing program 3 (id=1721):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'team0\x00'})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)
fcntl$setlease(r4, 0x400, 0x1)
r6 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00')
execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0)
r7 = fanotify_init(0x8, 0x1000)
fanotify_mark(r7, 0x15, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x3}, &(0x7f0000000180)=0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r9=>0x0})
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r10, 0x7b1, &(0x7f0000000040)={0x0, 0x6})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xef30f5cac608129c, 0xfff2}, {0xb, 0xfff1}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xd, 0xc}, {0x2, 0x1}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000)

17.019526048s ago: executing program 0 (id=1723):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0)

16.793945491s ago: executing program 3 (id=1724):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {0xfff2}, {0x8, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x40004)

16.450876541s ago: executing program 2 (id=1726):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = fsopen(&(0x7f0000000240)='exfat\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1)

16.38076054s ago: executing program 0 (id=1727):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000000)=0x533863bace190a0, 0x2)

13.875114631s ago: executing program 3 (id=1729):
openat$vicodec1(0xffffff9c, 0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x92)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x180)
r3 = syz_clone3(&(0x7f0000000480)={0x10100, 0x0, &(0x7f00000002c0), &(0x7f0000000300), {0x17}, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x58)
setpgid(0x0, r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1002, 0x2c3)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r2, 0x0, 0x40003)
r5 = syz_open_dev$vim2m(0x0, 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x5})
write(r1, &(0x7f0000000a00)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400)

13.868183902s ago: executing program 2 (id=1730):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(r0, 0x40049409, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
close(0x3)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

12.537523421s ago: executing program 0 (id=1732):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
syz_open_dev$sndmidi(0x0, 0x9, 0x420001)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
lsm_list_modules(0x0, &(0x7f0000000000), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)=ANY=[])
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c", 0x17}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000080000000)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x604, 0x0)

10.918611769s ago: executing program 3 (id=1735):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$NBD_PRINT_DEBUG(r2, 0xab06)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x84, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0x5}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x58, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24041091}, 0x0)
accept4(r1, &(0x7f0000000600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000680)=0x80, 0x80000)
sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4400c180)
r4 = syz_usb_connect(0x5, 0x2fb, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028008001f0004"], 0x44}, 0x1, 0x0, 0x0, 0x20040861}, 0x0)
syz_usb_control_io$printer(r4, &(0x7f00000008c0)={0x14, &(0x7f0000000740)={0x40, 0xe, 0xaf, {0xaf, 0x3, "f960e6610ae4a57dd610e490f22817a131e1ecb7c82f6e0de0431af2ec317402b7ee7e310a9778586ab2b9853c295c979175c71b41e0bc2252509c57a1bea1136e5dbb9e61db162bed0fa1d5261eaad5086e624b52f7471a3c51b390a2a9a86f02bb406597d8b44d7eb013c49aca7b558880445a6706c0b3a9ef7423b2141ed48dedb9b4943b0a019df65ce272c496c8cd987d3f503cface075d02b59dd92c8d287fbd05f71a4d091bc908c0f6"}}, &(0x7f0000000800)={0x0, 0x3, 0xac, @string={0xac, 0x3, "1245e82024394b68e64be56139d87d14977a0ba581bc047c0a722e7a62492b0bf4a3d4181ad0c976fdb733018c45e3e7b10060c48b67622aeb086bae100c70ba068c4f80d667c653e2abb59c21f029b8b115ae5fd842b45797502be7c7e8365fb505e96048a46b4f33e9642a0260a1e38dbfe6b72033bcab4ec87841a88a279344015938ac4acfe577bfa3b9fd923d34b535061250a5253d5cd5d4301afec12b6b8d0238ecd8912fc8bd"}}}, &(0x7f0000000c00)={0x34, &(0x7f00000009c0)={0x40, 0xa, 0xd2, "b60d7539c452835de084a54a77f07ec1a8d4e08882e9acd53e2e4d054764ad290f321e01fd4032e9b6be3a9f5527d1176323f4a05596479b95cba4c675f584ee48c241f5c8559ad34b34038cf94bf51f32086fef21581d5bb880fd81f312a04941747fb74c1025cb249538180ecb20a495ffad7a72c0a67ec5e0747168f56ebb329383f1150c9e6996a20ddb36f121622f9a653bcd93425d596ae1e84b3ec54dee478e698c33664c6061567274474ed5fef230819a58a3081b0d31000c91f3ba622c6782d819cf9fa99b755b71cb46367db8"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000b00)={0x0, 0x8, 0x1}, &(0x7f0000000b40)={0x20, 0x0, 0x19, {0x17, "10d4d1aac118839ad721135ea88d7572a8b5c3e875c0ba"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0xf}})

8.874941375s ago: executing program 2 (id=1737):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0)

8.680553646s ago: executing program 2 (id=1738):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x403, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1e8f7, 0x14}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x12ff}]}}}]}, 0x44}}, 0x0)

8.103588773s ago: executing program 2 (id=1739):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f00000008c0), 0x4, 0x42000)
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000940)={0x1, 0x0, {0x7fffffff, 0x5, 0x200f, 0x7, 0x2, 0x8, 0x2, 0x3}})
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f0000000140)={0xa, 0xfffe, 0x0, @empty, 0x805}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x40}, 0x24004800)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x5a5142, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002580)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e047732000000000000005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe0493a0ae0000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139c7ce864b0813e86de5b9da267fc095e366a6be628f0e6a1a0a2658ef1fb817508cb788c5d34993"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
fsopen(&(0x7f0000000200)='adfs\x00', 0x1)
close(r3)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
getpid()
socket$inet6_sctp(0xa, 0x5, 0x84)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @thr={&(0x7f0000001940)="42661714dd31d647bbe36a7c72b46435cbb1e6e639d4304ccd50b16c1f0e235e2a4130d1412c8882ac778740fc8beae1bc79cf79453a7c230fa9952a70cf5905e6d4475c4253fe48a1928395be78754b5667f7f1041925340c1ce0a9fab360e82f28af3afccb792c15fe256ecf844d7c07540d0f82ad90ad38f5c411918043bcb3c6a35c8219bb128f9f0b3644a1e9236a", &(0x7f0000001a00)="40050789d840c943e346f60cdba3d20ee6318f6d4c85c460186691077330d72250f12e9807313164d2040ec477b0bc2a91fc0e10f326cfade232e3d2bacb36443d2d222b758ae7f14b7c88bfe85670a4df8a8750cf96176a4169add59678b0533384fd86a90f9d74623d0194"}}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000840)="e55ada0a26b834f902c337d74e5e7238720efb7f8ec4d0727d476db4c872aa904427840eab3b36d1ed0bfbd7d7e69c6ddb2d8226eb56e81bf8ed7bc36a3881f90a5727aff51762c4b5d02893baa44c4fcebd4fc1c1136289c57bb6b9cac240b24cc199cc7edaeaad975966a70c5ca43e81ba4cc0232281bdf279b9b7425198f2bdba0dca17ac5f36268368465090c8440b9760a36dbd8c3c802ddfefc112ebc32dc8b4647b588da74e1bfa3832615c74474e82bf0b93b1de336368ffd64d25c5e41478", 0xc3}, {&(0x7f0000000a00)="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", 0xf3d}, {&(0x7f0000000200)="619178d0", 0x4}], 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_raw(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}}, 0xd209f6d83486bb56)
recvmmsg(r6, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001500)}, 0x2fa}, {{&(0x7f00000015c0)=@un=@abs, 0x80, &(0x7f00000016c0)}, 0x101}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/217, 0xd9}, 0xfb}, {{0x0, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000002400)=""/92, 0x5c}, 0xac}], 0x2b, 0x2, 0x0)

7.635039409s ago: executing program 3 (id=1740):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = fsopen(&(0x7f0000000240)='exfat\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1)

6.025830277s ago: executing program 3 (id=1742):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000000)=0x533863bace190a0, 0x2)

4.399203386s ago: executing program 4 (id=1745):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xd801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}}, 0x0)

4.313606744s ago: executing program 0 (id=1746):
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x1a}], 0x1, 0x81)

4.019122286s ago: executing program 4 (id=1747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(r0, 0x40049409, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
close(0x3)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

2.807011711s ago: executing program 4 (id=1748):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0)

2.275431042s ago: executing program 4 (id=1749):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x403, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1e8f7, 0x14}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x12ff}]}}}]}, 0x44}}, 0x0)

1.999176637s ago: executing program 4 (id=1750):
mknod(0x0, 0x1ffa, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000500)=[@decrefs], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000680)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x12}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_setup(0x2a8a, &(0x7f0000000240)={0x0, 0xb0e3, 0x1046, 0x0, 0x33b})
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0)

1.794764907s ago: executing program 2 (id=1751):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
syz_open_dev$sndmidi(0x0, 0x9, 0x420001)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
lsm_list_modules(0x0, &(0x7f0000000000), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)=ANY=[])
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c", 0x17}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000080000000)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x604, 0x0)

1.720811658s ago: executing program 0 (id=1752):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = fsopen(&(0x7f0000000240)='exfat\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1)

1.718768063s ago: executing program 4 (id=1753):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

0s ago: executing program 0 (id=1754):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
epoll_create1(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

kernel console output (not intermixed with test programs):

slave_1: entered promiscuous mode
[  636.967277][T10577] bridge0: port 2(bridge_slave_1) entered blocking state
[  636.977858][T10577] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.002557][T10577] bridge_slave_1: entered allmulticast mode
[  637.021068][T10577] bridge_slave_1: entered promiscuous mode
[  637.220983][T10785] loop1: detected capacity change from 0 to 512
[  637.230149][T10785] ext2: Bad value for 'stripe'
[  637.237679][ T7704] hsr_slave_0: left promiscuous mode
[  637.253275][ T7704] hsr_slave_1: left promiscuous mode
[  637.271645][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.344676][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_1
[  638.090372][ T7704] team0 (unregistering): Port device team_slave_1 removed
[  638.120386][ T7704] team0 (unregistering): Port device team_slave_0 removed
[  638.304778][T10577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  638.397750][T10584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  638.410979][T10584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  638.483859][T10577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  640.365257][T10584] team0: Port device team_slave_0 added
[  640.396791][T10801] No control pipe specified
[  640.454883][T10577] team0: Port device team_slave_0 added
[  640.593779][T10584] team0: Port device team_slave_1 added
[  640.657234][T10577] team0: Port device team_slave_1 added
[  642.958886][T10577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  642.975851][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.021253][T10821] futex_wake_op: syz.5.1109 tries to shift op by 144; fix this program
[  643.039997][T10577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  643.053453][T10577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.060408][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.143804][T10577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.146827][T10824] loop3: detected capacity change from 0 to 512
[  643.167535][T10824] ext2: Bad value for 'stripe'
[  643.178101][T10584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  644.414444][T10584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  644.442188][T10584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  644.944929][T10824] loop3: detected capacity change from 0 to 1024
[  644.963653][T10824] EXT4-fs: quotafile must be on filesystem root
[  645.569797][T10584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  645.597648][T10584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  645.683136][T10584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  645.852750][T10834] No control pipe specified
[  645.929260][T10577] hsr_slave_0: entered promiscuous mode
[  645.949695][T10577] hsr_slave_1: entered promiscuous mode
[  646.049312][T10584] hsr_slave_0: entered promiscuous mode
[  646.060820][T10584] hsr_slave_1: entered promiscuous mode
[  646.067858][T10584] debugfs: 'hsr0' already exists in 'hsr'
[  646.075064][T10584] Cannot create hsr debugfs directory
[  648.498281][T10860] siw: device registration error -23
[  648.761214][T10856] can: request_module (can-proto-3) failed.
[  649.269062][T10525] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  649.317547][T10525] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  649.427422][T10525] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  649.456312][T10525] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  649.657270][T10525] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  649.691381][T10525] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  649.711078][T10525] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  649.750230][T10525] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  651.015280][T10879] loop5: detected capacity change from 0 to 256
[  651.068011][T10878] No control pipe specified
[  652.388852][T10584] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  652.424164][T10584] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  652.735395][T10584] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  652.783561][T10584] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  652.904114][T10584] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  653.262258][T10584] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  653.289161][T10584] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  653.368397][T10584] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  655.353987][T10525] 8021q: adding VLAN 0 to HW filter on device bond0
[  655.928703][T10525] 8021q: adding VLAN 0 to HW filter on device team0
[  655.964720][T10917] futex_wake_op: syz.1.1132 tries to shift op by 144; fix this program
[  656.184385][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.191832][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.470016][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.477197][ T6784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  657.048865][T10577] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  657.098850][T10577] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  657.129859][T10577] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  657.186462][T10577] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  657.250952][T10577] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  657.323715][T10577] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  657.363209][T10577] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  657.389263][T10577] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  657.422721][T10584] 8021q: adding VLAN 0 to HW filter on device bond0
[  657.430528][T10935] autofs: Bad value for 'fd'
[  657.615722][T10584] 8021q: adding VLAN 0 to HW filter on device team0
[  658.545202][T10946] loop1: detected capacity change from 0 to 256
[  658.598460][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.605596][ T7435] bridge0: port 1(bridge_slave_0) entered forwarding state
[  658.779867][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.787058][ T7435] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.216342][T10577] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.312577][T10577] 8021q: adding VLAN 0 to HW filter on device team0
[  659.370009][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.377172][ T6784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  661.104952][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.112138][ T6784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  662.336740][T10525] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.649963][T10525] veth0_vlan: entered promiscuous mode
[  662.707506][T10584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.764718][T10525] veth1_vlan: entered promiscuous mode
[  662.901939][T10525] veth0_macvtap: entered promiscuous mode
[  662.969209][T10525] veth1_macvtap: entered promiscuous mode
[  663.094451][T10525] batman_adv: batadv0: Interface activated: batadv_slave_0
[  663.166150][T10525] batman_adv: batadv0: Interface activated: batadv_slave_1
[  663.240803][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  663.295525][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  663.424058][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  663.492465][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  664.394586][ T7435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  664.439932][ T7435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  664.477803][T10577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  664.517293][T11026] futex_wake_op: syz.5.1142 tries to shift op by 144; fix this program
[  664.821900][T11033] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  664.855331][T11033] loop5: detected capacity change from 0 to 7
[  664.994163][ T7435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.026023][ T7435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.076759][T11033] Dev loop5: unable to read RDB block 7
[  665.095818][T11033]  loop5: unable to read partition table
[  665.110407][T11038] overlayfs: failed to resolve './bus': -2
[  665.213320][T11033] loop5: partition table beyond EOD, truncated
[  665.219648][T11033] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  665.375793][T10584] veth0_vlan: entered promiscuous mode
[  665.407313][T11034] Dev loop5: unable to read RDB block 7
[  665.413896][T11034]  loop5: unable to read partition table
[  665.444949][T11034] loop5: partition table beyond EOD, truncated
[  665.466528][T10584] veth1_vlan: entered promiscuous mode
[  665.489298][T11034] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  665.659618][T10584] veth0_macvtap: entered promiscuous mode
[  665.750310][T10584] veth1_macvtap: entered promiscuous mode
[  666.914442][T10584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  666.930433][T11053] autofs: Bad value for 'fd'
[  667.004933][T10584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  667.109257][T11058] siw: device registration error -23
[  667.296213][ T6819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  667.418814][ T1166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.541415][ T1166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.870757][T11055] can: request_module (can-proto-3) failed.
[  668.010167][ T1108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  669.207748][T11063] loop1: detected capacity change from 0 to 256
[  671.660470][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.767713][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  671.926961][T11078] futex_wake_op: syz.0.1155 tries to shift op by 144; fix this program
[  672.010522][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.067631][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.216956][T11081] Cannot find add_set index 0 as target
[  672.539374][T11088] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  672.599524][T11088] loop5: detected capacity change from 0 to 7
[  672.754103][T11088] Dev loop5: unable to read RDB block 7
[  672.764842][ T4939] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  672.822597][ T4939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  672.830763][ T4939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  672.838900][ T4939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  672.846850][ T4939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  673.004194][T11088]  loop5: unable to read partition table
[  673.022283][T11088] loop5: partition table beyond EOD, truncated
[  673.810380][T11088] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  673.857123][T11090] Dev loop5: unable to read RDB block 7
[  673.909316][T11090]  loop5: unable to read partition table
[  673.954421][T11090] loop5: partition table beyond EOD, truncated
[  673.960733][T11090] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  674.260207][T11106] autofs: Bad value for 'fd'
[  674.279030][T11086] overlayfs: failed to resolve './bus': -2
[  674.756711][T10680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  675.115175][T11119] loop0: detected capacity change from 0 to 256
[  676.397966][T10680] Bluetooth: hci6: command tx timeout
[  676.404696][T10680] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  676.413902][T10680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  676.434064][T10680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  676.444503][T10680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  676.740122][T11126] siw: device registration error -23
[  677.436690][T11122] can: request_module (can-proto-3) failed.
[  679.229398][T10680] Bluetooth: hci6: command tx timeout
[  679.261314][ T4939] Bluetooth: hci2: command tx timeout
[  679.949458][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8
[  680.018106][T11146] futex_wake_op: syz.3.1167 tries to shift op by 144; fix this program
[  680.976417][T11158] overlayfs: failed to resolve './file1/file0': -2
[  681.292140][ T4939] Bluetooth: hci2: command tx timeout
[  681.298420][T10680] Bluetooth: hci6: command tx timeout
[  682.770621][T11175] autofs: Unknown parameter '0x0000000000000000'
[  683.168320][T11180] loop3: detected capacity change from 0 to 256
[  684.157924][T10680] Bluetooth: hci6: command tx timeout
[  684.158039][ T4939] Bluetooth: hci2: command tx timeout
[  684.318740][ T6819] bridge_slave_1: left allmulticast mode
[  684.348005][ T6819] bridge_slave_1: left promiscuous mode
[  684.390989][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.626241][ T6819] bridge_slave_0: left allmulticast mode
[  684.973934][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  685.366263][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  685.386003][ T6819] bridge_slave_0: left promiscuous mode
[  685.415883][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.481317][ T5869] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  685.635275][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  685.669577][ T5869] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  685.686119][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.702221][ T5869] usb 1-1: Product: syz
[  685.718975][ T5869] usb 1-1: Manufacturer: syz
[  685.728369][ T5869] usb 1-1: SerialNumber: syz
[  685.989394][ T6819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  686.017781][ T6819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  686.034033][ T6819] bond0 (unregistering): Released all slaves
[  686.172149][ T4939] Bluetooth: hci2: command tx timeout
[  686.355264][ T6819] hsr_slave_0: left promiscuous mode
[  686.378247][ T6819] hsr_slave_1: left promiscuous mode
[  686.393787][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_0
[  686.404712][T11209] loop5: detected capacity change from 0 to 512
[  686.421861][T11209] ext2: Bad value for 'stripe'
[  686.434630][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_1
[  686.607796][ T5869] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[  686.646872][ T5869] cdc_ncm 1-1:1.0: bind() failure
[  687.031515][ T5869] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  687.063865][ T5869] cdc_ncm 1-1:1.1: bind() failure
[  687.110619][ T5869] usb 1-1: USB disconnect, device number 6
[  689.910817][T11224] loop0: detected capacity change from 0 to 256
[  691.453931][ T6819] team0 (unregistering): Port device team_slave_1 removed
[  691.526362][ T6819] team0 (unregistering): Port device team_slave_0 removed
[  692.857267][ T4939] Bluetooth: hci5: unexpected event for opcode 0x146d
[  694.454715][T11243] input: syz0 as /devices/virtual/input/input18
[  695.110062][T11252] netlink: 'syz.3.1190': attribute type 1 has an invalid length.
[  695.714932][T11114] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.736351][T11114] bridge0: port 1(bridge_slave_0) entered disabled state
[  695.763694][T11261] loop3: detected capacity change from 0 to 512
[  695.763929][T11114] bridge_slave_0: entered allmulticast mode
[  695.810773][T11261] ext2: Bad value for 'stripe'
[  695.823190][T11114] bridge_slave_0: entered promiscuous mode
[  695.855953][T11114] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.901639][T11114] bridge0: port 2(bridge_slave_1) entered disabled state
[  695.921103][T11268] autofs: Unknown parameter '0x0000000000000000'
[  695.945183][T11114] bridge_slave_1: entered allmulticast mode
[  695.984381][T11114] bridge_slave_1: entered promiscuous mode
[  695.996355][T11261] loop3: detected capacity change from 0 to 1024
[  696.024764][T11085] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.040752][T11261] EXT4-fs: quotafile must be on filesystem root
[  696.078012][T11085] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.188851][T11085] bridge_slave_0: entered allmulticast mode
[  696.577138][T11085] bridge_slave_0: entered promiscuous mode
[  696.897990][T11085] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.915755][T11085] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.891628][T11085] bridge_slave_1: entered allmulticast mode
[  697.899224][T11085] bridge_slave_1: entered promiscuous mode
[  697.950067][T11114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  698.900212][T11114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  698.996395][T11085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  699.300792][ T6819] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.583020][T11085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  699.713845][T11304] input: syz0 as /devices/virtual/input/input19
[  699.822745][T11114] team0: Port device team_slave_0 added
[  699.966329][T11310] netlink: 'syz.3.1204': attribute type 1 has an invalid length.
[  700.203092][T11114] team0: Port device team_slave_1 added
[  700.376126][ T6819] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.452970][T11085] team0: Port device team_slave_0 added
[  700.567523][T11085] team0: Port device team_slave_1 added
[  700.705813][T11320] autofs: Unknown parameter '0x0000000000000000'
[  700.710558][T11114] batman_adv: batadv0: Adding interface: batadv_slave_0
[  700.744279][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  700.982391][T11114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  703.514045][T11330] loop3: detected capacity change from 0 to 256
[  703.959155][ T6819] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.192913][T11114] batman_adv: batadv0: Adding interface: batadv_slave_1
[  704.226996][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  704.318102][T11114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  704.366799][T11085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  704.403191][T11085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  704.500159][T11085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  704.702605][ T6819] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.844424][T11085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  704.880229][T11085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.144344][T11348] qrtr: Invalid version 0
[  705.404076][T11085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  706.703445][T11359] input: syz0 as /devices/virtual/input/input20
[  706.732234][T11361] netlink: 'syz.5.1215': attribute type 1 has an invalid length.
[  707.090669][   T30] audit: type=1800 audit(1784815498.833:15): pid=11346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1213" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  707.243608][T11346] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  707.280381][T11085] hsr_slave_0: entered promiscuous mode
[  707.301057][T11346] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  707.314298][T11085] hsr_slave_1: entered promiscuous mode
[  707.342363][ T5869] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  707.360052][T11346] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  707.419320][T11367] autofs: Unknown parameter '0x0000000000000000'
[  707.447625][T11114] hsr_slave_0: entered promiscuous mode
[  707.486472][T11114] hsr_slave_1: entered promiscuous mode
[  707.511248][T11114] debugfs: 'hsr0' already exists in 'hsr'
[  707.536846][T11114] Cannot create hsr debugfs directory
[  707.765700][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  708.787871][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  708.797687][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  709.760793][ T5869] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  709.772372][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.797791][   T13] wlan0: Trigger new scan to find an IBSS to join
[  709.923846][ T5869] usb 4-1: config 0 descriptor??
[  710.016376][T11346] syz.0.1213 (11346) used greatest stack depth: 18536 bytes left
[  710.244469][ T5869] usbhid 4-1:0.0: can't add hid device: -71
[  710.274341][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  710.322297][ T5869] usb 4-1: USB disconnect, device number 2
[  710.502457][T10883] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  710.685606][T10883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  710.725762][T10883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  710.769633][T10883] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  710.849978][T10883] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  710.898975][T10883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.976807][T10883] usb 1-1: config 0 descriptor??
[  711.805987][T11391] loop1: detected capacity change from 0 to 256
[  712.744422][ T6819] bridge_slave_1: left allmulticast mode
[  712.756484][T10883] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  712.772060][ T6819] bridge_slave_1: left promiscuous mode
[  712.794587][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.850304][ T6819] bridge_slave_0: left allmulticast mode
[  712.858535][ T6819] bridge_slave_0: left promiscuous mode
[  712.880944][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.055268][   T48] wlan0: Trigger new scan to find an IBSS to join
[  713.069829][ T5766] usb 1-1: USB disconnect, device number 7
[  714.246245][ T3329] wlan0: Creating new IBSS network, BSSID 2e:47:d5:10:07:4e
[  714.334701][ T6819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.404783][ T6819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  714.469995][ T6819] bond0 (unregistering): Released all slaves
[  715.382306][T11423] loop5: detected capacity change from 0 to 256
[  716.590193][T11427] autofs: Unknown parameter '0x0000000000000000'
[  717.943155][ T6819] hsr_slave_0: left promiscuous mode
[  717.978366][ T6819] hsr_slave_1: left promiscuous mode
[  717.996111][ T6819] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  718.019398][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_0
[  718.062737][ T6819] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  718.082797][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_1
[  718.160253][ T6819] veth1_macvtap: left promiscuous mode
[  718.178228][ T6819] veth0_macvtap: left promiscuous mode
[  718.198597][ T6819] veth1_vlan: left promiscuous mode
[  718.218366][ T6819] veth0_vlan: left promiscuous mode
[  719.194617][T11437] fuse: Unknown parameter '[d'
[  719.369727][ T6819] team0 (unregistering): Port device team_slave_1 removed
[  719.456730][ T6819] team0 (unregistering): Port device team_slave_0 removed
[  720.085217][T11456] loop3: detected capacity change from 0 to 256
[  722.791274][T11114] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  722.837364][T11114] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  722.879309][T11114] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  723.104658][T11114] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  723.224962][T11114] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  724.213665][T11114] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  725.290133][T11114] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  725.361266][T11114] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  725.944745][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'.
[  726.659165][T11506] autofs: Unknown parameter '0x0000000000000000'
[  726.948564][T11114] 8021q: adding VLAN 0 to HW filter on device bond0
[  727.251031][T11114] 8021q: adding VLAN 0 to HW filter on device team0
[  727.387382][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.394577][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  727.548671][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.555850][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  727.714919][T11085] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  727.775218][T11085] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  727.825179][T11085] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  727.869397][T11085] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  727.934553][T11085] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  727.979964][T11085] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  728.014279][T11085] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  728.082156][T11085] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  728.104550][T11524] loop1: detected capacity change from 0 to 256
[  728.816961][T11533] loop0: detected capacity change from 0 to 256
[  729.862404][T11085] 8021q: adding VLAN 0 to HW filter on device bond0
[  729.950028][T11541] input: syz1 as /devices/virtual/input/input21
[  729.953210][T11085] 8021q: adding VLAN 0 to HW filter on device team0
[  730.089094][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  730.096246][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  730.195905][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.203109][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state
[  733.133929][T10680] Bluetooth: hci1: command 0x0406 tx timeout
[  733.194486][ T4939] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  733.206584][ T4939] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  733.214801][ T4939] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  733.224445][ T4939] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  733.231234][T11596] autofs: Unknown parameter 'fd0x0000000000000000'
[  733.235047][ T4939] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  734.167145][T11615] loop3: detected capacity change from 0 to 256
[  735.506867][ T4939] Bluetooth: hci7: command tx timeout
[  737.578747][ T4939] Bluetooth: hci7: command tx timeout
[  737.666951][T10680] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  737.692387][T10680] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  737.703348][T10680] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  737.732186][T10680] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  737.746650][T10680] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  739.101139][T11657] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) !
[  739.163884][T11658] syzkaller0: entered promiscuous mode
[  739.324095][T11658] syzkaller0: entered allmulticast mode
[  739.422522][T11670] input: syz0 as /devices/virtual/input/input22
[  739.450507][T11675] autofs: Unknown parameter 'fd0x0000000000000000'
[  739.575929][T11679] netlink: 'syz.3.1268': attribute type 1 has an invalid length.
[  739.612100][T10680] Bluetooth: hci7: command tx timeout
[  740.288612][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'.
[  740.333123][T10680] Bluetooth: hci6: command tx timeout
[  740.488575][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'.
[  740.546896][T11698] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  741.692360][T10680] Bluetooth: hci7: command tx timeout
[  741.993299][T11709] can: request_module (can-proto-3) failed.
[  742.606648][T10680] Bluetooth: hci6: command tx timeout
[  742.793338][   T48] bridge_slave_1: left allmulticast mode
[  742.801380][   T48] bridge_slave_1: left promiscuous mode
[  742.820126][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.863749][   T48] bridge_slave_0: left allmulticast mode
[  742.879814][   T48] bridge_slave_0: left promiscuous mode
[  742.889100][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.010497][T11733] autofs: Unknown parameter 'fd0x0000000000000000'
[  743.222953][T11736] input: syz0 as /devices/virtual/input/input23
[  743.655745][T11745] netlink: 'syz.3.1282': attribute type 1 has an invalid length.
[  744.303318][ T3329] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  744.654372][T10680] Bluetooth: hci6: command tx timeout
[  745.053253][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  745.315374][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  745.369541][   T48] bond0 (unregistering): Released all slaves
[  745.618577][T11763] loop0: detected capacity change from 0 to 256
[  745.855377][   T48] hsr_slave_0: left promiscuous mode
[  745.906699][   T48] hsr_slave_1: left promiscuous mode
[  745.927425][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  745.952478][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  746.030550][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1287'.
[  746.512981][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  746.524229][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  746.735103][T10680] Bluetooth: hci6: command tx timeout
[  747.130485][T11785] xt_hashlimit: size too large, truncated to 1048576
[  748.879786][   T48] team0 (unregistering): Port device team_slave_1 removed
[  748.975087][   T48] team0 (unregistering): Port device team_slave_0 removed
[  751.766708][T11591] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.803478][T11591] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.810769][T11591] bridge_slave_0: entered allmulticast mode
[  751.827433][T11591] bridge_slave_0: entered promiscuous mode
[  751.895311][T11591] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.946811][T11591] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.991044][T11591] bridge_slave_1: entered allmulticast mode
[  752.450829][T11591] bridge_slave_1: entered promiscuous mode
[  753.736975][T11591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  753.919178][T11591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.589626][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'.
[  755.346141][T11892] (syz.3.1313,11892,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  755.355792][T11892] (syz.3.1313,11892,0):ocfs2_fill_super:1177 ERROR: status = -22
[  756.060181][ T7705] wlan0: Trigger new scan to find an IBSS to join
[  756.125694][T11591] team0: Port device team_slave_0 added
[  756.229960][T11591] team0: Port device team_slave_1 added
[  757.582314][T11635] bridge0: port 1(bridge_slave_0) entered blocking state
[  757.590855][T11635] bridge0: port 1(bridge_slave_0) entered disabled state
[  757.612247][T11635] bridge_slave_0: entered allmulticast mode
[  757.620324][T11635] bridge_slave_0: entered promiscuous mode
[  757.631717][T11635] bridge0: port 2(bridge_slave_1) entered blocking state
[  757.638910][T11635] bridge0: port 2(bridge_slave_1) entered disabled state
[  757.647095][T11635] bridge_slave_1: entered allmulticast mode
[  757.716207][T11635] bridge_slave_1: entered promiscuous mode
[  759.878848][T11591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  759.920505][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  760.082399][T11591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  760.132282][ T7435] wlan0: Trigger new scan to find an IBSS to join
[  760.137983][T11591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  760.198492][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  760.437190][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'.
[  760.612484][T11591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  760.942931][T11635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.955962][T11635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  762.984616][T11635] team0: Port device team_slave_0 added
[  763.016429][T11635] team0: Port device team_slave_1 added
[  763.107169][   T12] wlan0: Creating new IBSS network, BSSID 52:09:4c:ff:97:cb
[  763.200637][T11963] tmpfs: Unknown parameter 'fsmagic'
[  764.270385][T11968] futex_wake_op: syz.5.1331 tries to shift op by 144; fix this program
[  764.886710][T11591] hsr_slave_0: entered promiscuous mode
[  764.934975][T11591] hsr_slave_1: entered promiscuous mode
[  765.354883][T11635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  765.362082][T11635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  765.411235][T11635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  765.747723][T11635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  765.762053][T11635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  766.417022][T11635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  766.482109][T11975] lo: entered allmulticast mode
[  766.748406][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'.
[  767.059921][T11635] hsr_slave_0: entered promiscuous mode
[  767.794786][T11635] hsr_slave_1: entered promiscuous mode
[  767.805098][T11635] debugfs: 'hsr0' already exists in 'hsr'
[  767.810819][T11635] Cannot create hsr debugfs directory
[  770.084447][T12037] futex_wake_op: syz.3.1343 tries to shift op by 144; fix this program
[  770.953435][ T6784] bridge_slave_1: left allmulticast mode
[  771.052458][ T6784] bridge_slave_1: left promiscuous mode
[  771.372007][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.453318][ T6784] bridge_slave_0: left allmulticast mode
[  771.470439][ T6784] bridge_slave_0: left promiscuous mode
[  771.486164][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state
[  773.097109][ T6784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  773.164189][ T6784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.169224][T12067] loop5: detected capacity change from 0 to 512
[  774.316873][ T6784] bond0 (unregistering): Released all slaves
[  774.324068][T12067] ext2: Bad value for 'stripe'
[  775.238989][ T6784] hsr_slave_0: left promiscuous mode
[  775.256766][ T6784] hsr_slave_1: left promiscuous mode
[  775.268547][ T6784] batman_adv: batadv0: Removing interface: batadv_slave_0
[  775.291854][ T6784] batman_adv: batadv0: Removing interface: batadv_slave_1
[  776.362692][ T3329] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  776.836703][ T6784] team0 (unregistering): Port device team_slave_1 removed
[  776.918519][ T6784] team0 (unregistering): Port device team_slave_0 removed
[  778.064211][ T8067] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  778.262605][ T8067] usb 4-1: Using ep0 maxpacket: 8
[  778.310386][ T8067] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  778.334004][T11591] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  778.347530][ T8067] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  778.370969][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  778.399009][ T8067] usb 4-1: config 0 has no interface number 0
[  778.401889][T11591] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  778.459951][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  778.639480][T11591] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  778.675616][ T8067] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  778.685996][ T8067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.694251][ T8067] usb 4-1: Product: syz
[  778.698521][ T8067] usb 4-1: Manufacturer: syz
[  778.703221][ T8067] usb 4-1: SerialNumber: syz
[  779.458683][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  779.484929][T11591] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  779.521361][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  779.645355][ T8067] usb 4-1: config 0 descriptor??
[  779.709199][ T8067] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  779.768390][ T8067] uvcvideo 4-1:0.31: Failed to create links for entity 32774
[  779.779274][ T8067] uvcvideo 4-1:0.31: Failed to register entities (-22).
[  779.920669][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'.
[  780.061568][T11591] 8021q: adding VLAN 0 to HW filter on device bond0
[  780.106156][T11591] 8021q: adding VLAN 0 to HW filter on device team0
[  780.139274][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.146551][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  780.196770][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  780.203965][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  780.228109][ T5759] usb 4-1: USB disconnect, device number 3
[  781.270452][T12140] loop1: detected capacity change from 0 to 512
[  781.289432][T12140] ext2: Bad value for 'stripe'
[  782.283097][T11635] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  782.365535][T11635] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  782.396875][T11635] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  782.436149][T11635] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  782.474237][T11635] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  782.528649][T11635] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  782.563387][T11635] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  782.806779][T11635] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  782.999220][T12162] syzkaller0: entered promiscuous mode
[  783.097104][T12162] syzkaller0: entered allmulticast mode
[  784.239987][T12207] loop1: detected capacity change from 0 to 512
[  784.858517][T12207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  784.953267][T12207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  785.037933][T12207] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  785.071605][T11635] 8021q: adding VLAN 0 to HW filter on device bond0
[  785.086364][T12219] loop3: detected capacity change from 0 to 512
[  785.144984][T12219] ext2: Bad value for 'stripe'
[  785.170988][T11591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  785.191939][   T30] audit: type=1800 audit(1784815576.933:16): pid=12207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1373" name="file1" dev="loop1" ino=15 res=0 errno=0
[  785.218987][T11635] 8021q: adding VLAN 0 to HW filter on device team0
[  785.240157][T12207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1373'.
[  785.301165][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.308374][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  786.970545][ T5633] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  786.995282][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state
[  787.002448][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state
[  787.629819][T12252] ip6tnl1: entered promiscuous mode
[  787.668841][T12252] ip6tnl1: entered allmulticast mode
[  787.756568][T12257] tmpfs: Bad value for 'mpol'
[  788.400698][T11591] veth0_vlan: entered promiscuous mode
[  788.474881][T11591] veth1_vlan: entered promiscuous mode
[  788.561763][T12277] veth0: entered promiscuous mode
[  789.624200][T12283] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[12284] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[12283]
[  790.792082][T12284] veth0: left promiscuous mode
[  791.444794][T11591] veth0_macvtap: entered promiscuous mode
[  791.520288][T11591] veth1_macvtap: entered promiscuous mode
[  791.545224][T12291] loop3: detected capacity change from 0 to 512
[  791.574492][T12291] ext2: Bad value for 'stripe'
[  791.636669][T11591] batman_adv: batadv0: Interface activated: batadv_slave_0
[  791.689208][T11591] batman_adv: batadv0: Interface activated: batadv_slave_1
[  791.703706][ T5869] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  791.864927][T12296] binder: BINDER_SET_CONTEXT_MGR already set
[  791.871031][T12296] binder: 12290:12296 ioctl 4018620d 200000000300 returned -16
[  791.992226][ T5869] usb 6-1: Using ep0 maxpacket: 8
[  792.212545][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  792.224241][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  792.244072][ T5869] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  792.254222][ T5869] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173
[  792.277990][ T3329] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  792.317175][ T3329] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  792.333430][ T5869] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  792.367910][ T3329] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  792.378362][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.395069][ T3329] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  792.415939][ T5869] usb 6-1: config 0 descriptor??
[  792.431443][T12289] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  792.887603][T11635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  793.060819][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1389'.
[  793.116776][T10680] Bluetooth: hci2: Opcode 0x0c03 failed: -71
[  793.125738][ T3329] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  793.193381][   T24] usb 6-1: USB disconnect, device number 11
[  794.706408][ T4939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  794.720494][ T4939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  794.728520][ T4939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  794.742934][ T4939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  794.752152][ T4939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  795.984232][T10680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  795.997688][T10680] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  796.009860][T10680] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  796.020635][T10680] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  796.031063][T10680] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  796.623806][T12370] loop1: detected capacity change from 0 to 512
[  796.647942][T12370] ext2: Bad value for 'stripe'
[  798.624078][T10680] Bluetooth: hci2: command tx timeout
[  798.631829][ T4939] Bluetooth: hci7: command tx timeout
[  798.836389][T12370] loop1: detected capacity change from 0 to 1024
[  798.881018][ T1166] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.898947][T12370] EXT4-fs: quotafile must be on filesystem root
[  799.302859][T12394] binder: BINDER_SET_CONTEXT_MGR already set
[  799.309163][T12394] binder: 12367:12394 ioctl 4018620d 200000000300 returned -16
[  799.949239][ T1166] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.281071][T10680] Bluetooth: hci2: command tx timeout
[  801.286592][ T4939] Bluetooth: hci7: command tx timeout
[  801.895907][ T1166] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  803.394566][ T4939] Bluetooth: hci7: command tx timeout
[  803.400039][T10680] Bluetooth: hci2: command tx timeout
[  804.297882][ T1166] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.294967][ T4939] Bluetooth: hci7: command tx timeout
[  806.300455][T10680] Bluetooth: hci2: command tx timeout
[  807.361451][ T1122] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  807.700574][ T1166] bridge_slave_1: left allmulticast mode
[  807.823335][ T1166] bridge_slave_1: left promiscuous mode
[  807.830994][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.859439][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  807.868307][ T1166] bridge_slave_0: left allmulticast mode
[  807.874045][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  807.889199][ T1166] bridge_slave_0: left promiscuous mode
[  807.900170][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.275274][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  809.309337][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  809.318379][T12464] loop3: detected capacity change from 0 to 512
[  809.326487][T12464] ext2: Bad value for 'stripe'
[  809.338732][ T1166] bond0 (unregistering): Released all slaves
[  809.384291][T12464] loop3: detected capacity change from 0 to 1024
[  809.391895][T12464] EXT4-fs: quotafile must be on filesystem root
[  809.417177][T12466] fuse: Bad value for 'fd'
[  809.718371][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7
[  809.784228][T12469] binder: BINDER_SET_CONTEXT_MGR already set
[  809.790444][T12469] binder: 12463:12469 ioctl 4018620d 200000000300 returned -16
[  810.790332][T12474] input: syz0 as /devices/virtual/input/input24
[  810.800094][T12474] netlink: 'syz.5.1415': attribute type 1 has an invalid length.
[  813.685214][ T1166] hsr_slave_0: left promiscuous mode
[  813.728650][ T1166] hsr_slave_1: left promiscuous mode
[  813.787879][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  813.828602][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0
[  813.884521][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  813.920410][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1
[  815.518514][ T1166] veth1_macvtap: left promiscuous mode
[  815.534929][ T1166] veth0_macvtap: left promiscuous mode
[  815.549946][ T1166] veth1_vlan: left promiscuous mode
[  815.556834][ T1166] veth0_vlan: left promiscuous mode
[  820.024951][ T1166] team0 (unregistering): Port device team_slave_1 removed
[  820.115082][ T1166] team0 (unregistering): Port device team_slave_0 removed
[  821.475933][T12540] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  821.517747][T12540] overlayfs: failed to resolve './bus': -2
[  821.674426][ T5284] 8021q: adding VLAN 0 to HW filter on device eth21
[  821.943288][T12545] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  822.130922][T12545] loop5: detected capacity change from 0 to 7
[  822.247449][T12545] Dev loop5: unable to read RDB block 7
[  822.272049][T12545]  loop5: unable to read partition table
[  822.280956][T12545] loop5: partition table beyond EOD, truncated
[  822.287514][T12545] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  824.082352][T12323] bridge0: port 1(bridge_slave_0) entered blocking state
[  824.153102][T12323] bridge0: port 1(bridge_slave_0) entered disabled state
[  824.190459][T12323] bridge_slave_0: entered allmulticast mode
[  824.231387][T12323] bridge_slave_0: entered promiscuous mode
[  824.301847][T12323] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.349168][T12323] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.410134][T12323] bridge_slave_1: entered allmulticast mode
[  824.449752][T12323] bridge_slave_1: entered promiscuous mode
[  824.458400][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  825.122962][T12579] input: syz0 as /devices/virtual/input/input25
[  825.150719][T12579] netlink: 'syz.5.1434': attribute type 1 has an invalid length.
[  826.989603][T12602] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  827.037310][T12602] overlayfs: failed to resolve './bus': -2
[  827.399232][T12323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  828.127018][ T5284] 8021q: adding VLAN 0 to HW filter on device eth22
[  828.159295][T12323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  828.206835][T12350] bridge0: port 1(bridge_slave_0) entered blocking state
[  828.229678][T12350] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.249505][T12350] bridge_slave_0: entered allmulticast mode
[  828.278979][T12350] bridge_slave_0: entered promiscuous mode
[  829.024058][T12350] bridge0: port 2(bridge_slave_1) entered blocking state
[  829.032305][T12350] bridge0: port 2(bridge_slave_1) entered disabled state
[  829.039597][T12350] bridge_slave_1: entered allmulticast mode
[  829.048499][T12350] bridge_slave_1: entered promiscuous mode
[  829.151321][T12323] team0: Port device team_slave_0 added
[  830.516977][T12323] team0: Port device team_slave_1 added
[  831.711062][T12350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  831.783200][T12350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  832.607114][T12643] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  832.792852][T12643] overlayfs: failed to resolve './bus': -2
[  833.146662][T12323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  833.172418][T12323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.227234][T12323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  833.304769][T12350] team0: Port device team_slave_0 added
[  833.328906][T12323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  833.358809][T12323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.430115][T12323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  833.505563][T12350] team0: Port device team_slave_1 added
[  833.542894][ T8067] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  833.712608][ T8067] usb 2-1: Using ep0 maxpacket: 8
[  833.721032][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0
[  833.735932][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.740541][ T8067] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  833.808120][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  833.839258][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1
[  833.840398][ T8067] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  833.889398][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.928350][ T8067] usb 2-1: config 0 has no interface number 0
[  833.946541][ T8067] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  833.958165][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  833.999003][ T8067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.027620][ T8067] usb 2-1: Product: syz
[  834.037912][T12323] hsr_slave_0: entered promiscuous mode
[  834.060418][T12323] hsr_slave_1: entered promiscuous mode
[  834.074626][ T8067] usb 2-1: Manufacturer: syz
[  834.109748][ T8067] usb 2-1: SerialNumber: syz
[  834.160346][ T8067] usb 2-1: config 0 descriptor??
[  834.221092][ T8067] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  834.275138][ T8067] uvcvideo 2-1:0.31: Failed to create links for entity 32774
[  834.311469][ T8067] uvcvideo 2-1:0.31: Failed to register entities (-22).
[  834.594137][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'.
[  835.174060][ T5619] usb 2-1: USB disconnect, device number 12
[  835.241335][T12671] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1464'.
[  836.826382][T12678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1464'.
[  836.900800][T12681] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1464'.
[  836.988516][T12350] hsr_slave_0: entered promiscuous mode
[  837.014186][T12350] hsr_slave_1: entered promiscuous mode
[  837.034209][T12350] debugfs: 'hsr0' already exists in 'hsr'
[  837.047721][T12350] Cannot create hsr debugfs directory
[  837.080080][T12671] bridge0: port 2(bridge_slave_1) entered disabled state
[  837.087961][T12671] bridge0: port 1(bridge_slave_0) entered disabled state
[  837.443469][ T1166] bridge_slave_1: left allmulticast mode
[  837.462099][ T1166] bridge_slave_1: left promiscuous mode
[  837.663342][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state
[  837.720369][ T1166] bridge_slave_0: left allmulticast mode
[  837.728092][ T1166] bridge_slave_0: left promiscuous mode
[  837.739311][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.065076][   T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  841.034785][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  841.132572][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  841.201025][ T1166] bond0 (unregistering): Released all slaves
[  841.920932][ T1166] hsr_slave_0: left promiscuous mode
[  841.969828][ T1166] hsr_slave_1: left promiscuous mode
[  841.983828][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0
[  842.072499][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1
[  845.048019][ T1166] team0 (unregistering): Port device team_slave_1 removed
[  845.290900][ T1166] team0 (unregistering): Port device team_slave_0 removed
[  845.387556][T12743] (syz.1.1480,12743,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  845.396416][T12743] (syz.1.1480,12743,0):ocfs2_fill_super:1177 ERROR: status = -22
[  847.223602][ T5284] 8021q: adding VLAN 0 to HW filter on device eth23
[  856.381002][ T4939] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  856.394177][ T4939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  856.404909][ T4939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  856.418029][ T4939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  856.427785][ T4939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  856.712921][ T6784] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  857.799712][T10680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  857.816546][T10680] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  857.827411][T10680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  857.837985][T10680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  858.022569][T10680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  858.494972][T10680] Bluetooth: hci6: command tx timeout
[  860.092158][T10680] Bluetooth: hci2: command tx timeout
[  860.572286][T10680] Bluetooth: hci6: command tx timeout
[  860.732801][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5
[  861.156500][ T1166] bridge_slave_1: left allmulticast mode
[  861.181498][ T1166] bridge_slave_1: left promiscuous mode
[  861.208436][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.278732][ T1166] bridge_slave_0: left allmulticast mode
[  861.305220][ T1166] bridge_slave_0: left promiscuous mode
[  861.322737][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.172433][T10680] Bluetooth: hci2: command tx timeout
[  862.188383][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  862.249424][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  862.320896][ T1166] bond0 (unregistering): Released all slaves
[  862.656300][T10680] Bluetooth: hci6: command tx timeout
[  862.685704][ T4939] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  862.697213][ T4939] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  862.706340][ T4939] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  862.720260][ T4939] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  862.728890][ T4939] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  863.810194][ T1166] hsr_slave_0: left promiscuous mode
[  863.854224][ T1166] hsr_slave_1: left promiscuous mode
[  863.895882][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0
[  863.948728][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1
[  864.252694][ T4939] Bluetooth: hci2: command tx timeout
[  864.329009][T12891] loop0: detected capacity change from 0 to 512
[  864.705163][T12891] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  864.734950][ T4939] Bluetooth: hci6: command tx timeout
[  864.780687][T12891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  864.812317][ T4939] Bluetooth: hci7: command tx timeout
[  864.852048][T12891] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  864.942497][   T30] audit: type=1800 audit(1784815656.683:17): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1504" name="file1" dev="loop0" ino=15 res=0 errno=0
[  865.069200][T10525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  865.833670][ T1166] team0 (unregistering): Port device team_slave_1 removed
[  865.882621][ T1166] team0 (unregistering): Port device team_slave_0 removed
[  866.332163][ T4939] Bluetooth: hci2: command tx timeout
[  866.440820][T12908] xt_NFQUEUE: number of total queues is 0
[  866.892738][ T4939] Bluetooth: hci7: command tx timeout
[  867.429792][T12919] batadv_slave_1: entered promiscuous mode
[  868.180573][T12907] batadv_slave_1: left promiscuous mode
[  868.967947][ T1166] bridge_slave_1: left allmulticast mode
[  868.973311][ T4939] Bluetooth: hci7: command tx timeout
[  868.990389][ T1166] bridge_slave_1: left promiscuous mode
[  869.030891][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state
[  869.140765][ T1166] bridge_slave_0: left allmulticast mode
[  869.159726][ T1166] bridge_slave_0: left promiscuous mode
[  869.186033][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.295303][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  869.301774][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  870.239705][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  870.292071][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  870.474627][T12850] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  870.759956][ T1166] bond0 (unregistering): Released all slaves
[  870.854603][T12960] loop5: detected capacity change from 0 to 512
[  870.917680][T12960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  871.028712][T12960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  871.060323][ T4939] Bluetooth: hci7: command tx timeout
[  871.079251][T12960] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  871.147604][   T30] audit: type=1800 audit(1784815662.893:18): pid=12960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1515" name="file1" dev="loop5" ino=15 res=0 errno=0
[  871.235158][ T1166] hsr_slave_0: left promiscuous mode
[  871.273602][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  871.296842][ T1166] hsr_slave_1: left promiscuous mode
[  871.325244][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0
[  871.349119][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1
[  873.124127][ T1166] team0 (unregistering): Port device team_slave_1 removed
[  873.196547][ T1166] team0 (unregistering): Port device team_slave_0 removed
[  874.666263][T12801] bridge0: port 1(bridge_slave_0) entered blocking state
[  874.692104][T12801] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.729196][T12801] bridge_slave_0: entered allmulticast mode
[  874.945993][T12801] bridge_slave_0: entered promiscuous mode
[  875.055129][T12994] (syz.3.1520,12994,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  875.064160][T12994] (syz.3.1520,12994,0):ocfs2_fill_super:1177 ERROR: status = -22
[  875.889958][T12801] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.923817][T12801] bridge0: port 2(bridge_slave_1) entered disabled state
[  875.985661][T12801] bridge_slave_1: entered allmulticast mode
[  876.030548][T12801] bridge_slave_1: entered promiscuous mode
[  876.757764][T12819] bridge0: port 1(bridge_slave_0) entered blocking state
[  876.793955][T12819] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.831794][T12819] bridge_slave_0: entered allmulticast mode
[  876.869454][T12819] bridge_slave_0: entered promiscuous mode
[  877.074159][T12801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  877.106564][T12819] bridge0: port 2(bridge_slave_1) entered blocking state
[  877.137286][T12819] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.166287][T12819] bridge_slave_1: entered allmulticast mode
[  877.366943][T12819] bridge_slave_1: entered promiscuous mode
[  877.690532][T12801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  877.921799][T13021] loop0: detected capacity change from 0 to 512
[  877.953742][T13021] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  878.003601][T13021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  878.017772][T12819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  878.043216][T12819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  878.057917][T13021] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  878.080933][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1526'.
[  878.131406][   T30] audit: type=1800 audit(1784815669.873:19): pid=13021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1525" name="file1" dev="loop0" ino=15 res=0 errno=0
[  878.263218][T12801] team0: Port device team_slave_0 added
[  878.275887][T12801] team0: Port device team_slave_1 added
[  878.296030][T10525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  878.432447][T12819] team0: Port device team_slave_0 added
[  879.045046][T12819] team0: Port device team_slave_1 added
[  879.144584][T12801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  879.158730][T12801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  879.222748][ T5869] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  879.232063][T12801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  879.402623][T12801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  879.412810][ T5869] usb 1-1: Using ep0 maxpacket: 32
[  879.428559][T12801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  879.463070][ T5869] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  879.471720][ T5869] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  879.480705][ T5869] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  879.492034][T12801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  879.503025][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  879.556025][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  879.587964][T12819] batman_adv: batadv0: Adding interface: batadv_slave_0
[  879.614329][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  879.630737][T12819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  879.744808][ T5869] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  879.888646][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.944058][T13051] overlayfs: failed to resolve './bus': -2
[  879.952343][T12819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  880.148922][ T5869] usb 1-1: config 0 descriptor??
[  880.256167][T12819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  880.299587][T12819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  880.380171][T12819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  880.470041][ T5869] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  880.651008][  T185] usb 1-1: USB disconnect, device number 8
[  880.699384][  T185] usblp0: removed
[  880.971865][T12801] hsr_slave_0: entered promiscuous mode
[  881.008276][T12801] hsr_slave_1: entered promiscuous mode
[  881.171051][T12819] hsr_slave_0: entered promiscuous mode
[  881.205430][T12819] hsr_slave_1: entered promiscuous mode
[  881.243687][T12819] debugfs: 'hsr0' already exists in 'hsr'
[  881.295722][T12819] Cannot create hsr debugfs directory
[  883.643097][T12876] bridge0: port 1(bridge_slave_0) entered blocking state
[  883.651016][T12876] bridge0: port 1(bridge_slave_0) entered disabled state
[  883.658222][T12876] bridge_slave_0: entered allmulticast mode
[  884.018528][T12876] bridge_slave_0: entered promiscuous mode
[  884.117302][T12876] bridge0: port 2(bridge_slave_1) entered blocking state
[  884.137206][T12876] bridge0: port 2(bridge_slave_1) entered disabled state
[  884.164082][T12876] bridge_slave_1: entered allmulticast mode
[  884.195653][T12876] bridge_slave_1: entered promiscuous mode
[  884.407183][T12876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  884.883569][T12876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  885.180026][T13083] loop5: detected capacity change from 0 to 512
[  885.227923][T13083] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  885.297452][T13083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  885.361158][T13083] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  885.401568][T12876] team0: Port device team_slave_0 added
[  885.455647][   T30] audit: type=1800 audit(1784815677.203:20): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1536" name="file1" dev="loop5" ino=15 res=0 errno=0
[  885.584592][T12876] team0: Port device team_slave_1 added
[  885.607883][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  885.838719][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1537'.
[  885.956279][T12876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  885.989503][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  886.063634][T12876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  886.118262][T12876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  886.151717][T12876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  886.244141][T12876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  886.772099][ T5869] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  887.399045][T12876] hsr_slave_0: entered promiscuous mode
[  887.442028][ T5869] usb 1-1: Using ep0 maxpacket: 8
[  887.451622][ T5869] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  887.461563][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  887.473808][ T5869] usb 1-1: config 0 has no interface number 0
[  887.474900][T12876] hsr_slave_1: entered promiscuous mode
[  887.481867][ T5869] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  887.503870][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.532136][ T5869] usb 1-1: Product: syz
[  887.554085][ T5869] usb 1-1: Manufacturer: syz
[  887.566966][ T5869] usb 1-1: SerialNumber: syz
[  887.568458][T12876] debugfs: 'hsr0' already exists in 'hsr'
[  887.583524][T12876] Cannot create hsr debugfs directory
[  887.625531][ T5869] usb 1-1: config 0 descriptor??
[  887.645921][ T5869] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  887.669079][ T5869] uvcvideo 1-1:0.31: Failed to create links for entity 32774
[  887.682327][ T5869] uvcvideo 1-1:0.31: Failed to register entities (-22).
[  887.855384][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'.
[  887.987971][T12819] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  887.999800][ T5758] usb 1-1: USB disconnect, device number 9
[  888.043469][T12819] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  889.206356][ T1166] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  890.029876][T12819] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  890.077149][T12819] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  890.260855][T12819] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  890.294655][T12819] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  890.420384][T13133] loop0: detected capacity change from 0 to 512
[  890.446537][T12819] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  890.565947][T13133] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  890.656932][T13137] (syz.3.1545,13137,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  890.665949][T13137] (syz.3.1545,13137,0):ocfs2_fill_super:1177 ERROR: status = -22
[  891.150050][T12819] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  891.275911][T13133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  891.356822][T13133] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  891.408648][   T30] audit: type=1800 audit(1784815683.153:21): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1546" name="file1" dev="loop0" ino=15 res=0 errno=0
[  891.521743][T10525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  892.774127][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6
[  892.907620][T12819] 8021q: adding VLAN 0 to HW filter on device bond0
[  893.690406][T12801] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  893.758609][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  893.798551][T12801] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  895.052358][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  895.755883][T12801] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  895.790479][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  895.803801][T12801] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  895.841341][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  895.972088][ T8067] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  896.242243][ T8067] usb 1-1: Using ep0 maxpacket: 8
[  896.275360][ T8067] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  896.316372][ T8067] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  896.330242][T12819] 8021q: adding VLAN 0 to HW filter on device team0
[  896.366995][ T8067] usb 1-1: config 0 has no interface number 0
[  896.408628][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state
[  896.415812][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state
[  896.432438][ T8067] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  896.480339][ T8067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.520518][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[  896.527663][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  896.535230][ T8067] usb 1-1: Product: syz
[  896.540468][ T8067] usb 1-1: Manufacturer: syz
[  896.549169][ T8067] usb 1-1: SerialNumber: syz
[  896.598034][ T8067] usb 1-1: config 0 descriptor??
[  896.639980][ T8067] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  896.686811][ T8067] uvcvideo 1-1:0.31: Failed to create links for entity 32774
[  896.721182][ T8067] uvcvideo 1-1:0.31: Failed to register entities (-22).
[  897.287306][ T8067] usb 1-1: USB disconnect, device number 10
[  897.418791][T13207] loop0: detected capacity change from 0 to 512
[  897.447907][T13207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  897.513484][T13207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  897.526226][T13207] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  897.546488][   T30] audit: type=1800 audit(1784815689.293:22): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1558" name="file1" dev="loop0" ino=15 res=0 errno=0
[  897.679940][T10525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  898.060493][T13216] loop0: detected capacity change from 0 to 1024
[  898.089842][T13213] can: request_module (can-proto-0) failed.
[  898.146021][T13216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  898.222051][T13216] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  898.568166][T12801] 8021q: adding VLAN 0 to HW filter on device bond0
[  898.890859][T12801] 8021q: adding VLAN 0 to HW filter on device team0
[  899.427975][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state
[  899.435198][ T6819] bridge0: port 1(bridge_slave_0) entered forwarding state
[  899.496612][T12876] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  899.571194][T12876] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  899.598143][T12876] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  899.636243][T12876] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  899.683220][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state
[  899.690321][ T6819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  899.753885][T12876] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  899.826206][T12876] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  899.901682][T12876] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  899.941467][T12876] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  900.329340][T13245] loop3: detected capacity change from 0 to 512
[  900.557342][T13245] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1564: corrupted in-inode xattr: invalid ea_ino
[  900.586681][ T5869] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  900.688558][T12876] 8021q: adding VLAN 0 to HW filter on device bond0
[  900.732027][T13245] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  900.735674][T13245] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1564: couldn't read orphan inode 15 (err -117)
[  900.744964][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  900.744979][    C0] EXT4-fs (loop3): initial error at time 1784815692: ext4_iget_extra_inode:5180: inode 15
[  900.745005][    C0] EXT4-fs (loop3): last error at time 1784815692: ext4_iget_extra_inode:5180: inode 15
[  900.812961][T12876] 8021q: adding VLAN 0 to HW filter on device team0
[  900.822320][ T5869] usb 6-1: Using ep0 maxpacket: 8
[  900.837038][ T5869] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  900.854948][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.854945][ T5869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  900.854973][ T5869] usb 6-1: config 0 has no interface number 0
[  900.862160][ T7704] bridge0: port 1(bridge_slave_0) entered forwarding state
[  900.873412][T13245] loop3: lost filesystem error report for type 5 error -117
[  900.889153][ T5869] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  900.927130][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.938866][ T5869] usb 6-1: Product: syz
[  900.944567][ T5869] usb 6-1: Manufacturer: syz
[  900.951286][ T5869] usb 6-1: SerialNumber: syz
[  900.978446][T13245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  900.991280][ T5869] usb 6-1: config 0 descriptor??
[  901.008638][ T5869] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  901.018418][ T5869] uvcvideo 6-1:0.31: Failed to create links for entity 32774
[  901.026438][ T5869] uvcvideo 6-1:0.31: Failed to register entities (-22).
[  901.088717][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.095958][ T7704] bridge0: port 2(bridge_slave_1) entered forwarding state
[  901.132761][T13210] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  901.248288][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1567'.
[  901.476364][ T8067] usb 6-1: USB disconnect, device number 12
[  901.530408][T10525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  901.708232][T13263] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.1564: invalid fast symlink length 39
[  901.952559][T12850] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  901.984403][T12819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  905.096123][T12801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  905.293035][T13312] binder: 13311:13312 ioctl c0306201 200000000680 returned -14
[  905.355482][T12876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  905.478670][T12819] veth0_vlan: entered promiscuous mode
[  905.651513][T13321] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1575'.
[  905.707004][T12819] veth1_vlan: entered promiscuous mode
[  906.412914][T12819] veth0_macvtap: entered promiscuous mode
[  906.478650][T12876] veth0_vlan: entered promiscuous mode
[  906.497066][T12819] veth1_macvtap: entered promiscuous mode
[  906.544058][T12876] veth1_vlan: entered promiscuous mode
[  906.590167][T12819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  906.644926][T12819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  906.691588][ T1166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  906.722433][ T1166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  906.736465][ T1166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  906.768045][ T1166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  906.845645][T12801] veth0_vlan: entered promiscuous mode
[  906.864773][T12876] veth0_macvtap: entered promiscuous mode
[  906.915698][T12876] veth1_macvtap: entered promiscuous mode
[  906.975847][T12801] veth1_vlan: entered promiscuous mode
[  906.984752][ T9046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  907.187611][T12876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  907.243573][ T7705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  907.266898][T12876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  907.280891][ T7705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  907.326720][T13341] loop3: detected capacity change from 0 to 1024
[  907.345777][T13339] can: request_module (can-proto-0) failed.
[  907.360490][   T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  907.401632][ T7705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  907.435855][T13341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  907.448043][T13341] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  907.490976][ T7705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  907.505449][ T7705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  907.569893][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  907.585199][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  907.630581][T12801] veth0_macvtap: entered promiscuous mode
[  907.740581][T12801] veth1_macvtap: entered promiscuous mode
[  907.914702][ T7705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  907.951459][ T7705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  907.980895][T12801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  908.060253][T12801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  908.113799][ T7704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  908.139137][   T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  908.151698][ T7704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  908.164033][   T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  908.199046][   T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  908.278962][   T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  909.129713][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.179706][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  909.388628][ T7704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.431019][ T7704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  909.439625][ T5779] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  909.501405][T13370] xt_TCPMSS: Only works on TCP SYN packets
[  909.654396][ T5779] usb 6-1: Using ep0 maxpacket: 8
[  909.683544][ T5779] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  909.721599][ T5779] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  909.767747][ T5779] usb 6-1: config 0 has no interface number 0
[  909.773164][T13347] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  909.798247][ T5779] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  909.826047][ T5779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  909.881385][ T5779] usb 6-1: Product: syz
[  909.908190][ T5779] usb 6-1: Manufacturer: syz
[  909.930440][ T5779] usb 6-1: SerialNumber: syz
[  909.975800][ T5779] usb 6-1: config 0 descriptor??
[  910.002062][ T5869] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  910.026795][ T5779] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  910.029430][T13383] binder: 13381:13383 ioctl c0306201 200000000680 returned -14
[  910.447091][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1579'.
[  910.448996][ T5779] uvcvideo 6-1:0.31: Failed to create links for entity 32774
[  910.545631][ T5779] uvcvideo 6-1:0.31: Failed to register entities (-22).
[  910.557248][ T5869] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  910.613387][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.633133][ T5779] usb 6-1: USB disconnect, device number 13
[  910.651101][ T5869] usb 5-1: Product: syz
[  910.680586][ T5869] usb 5-1: Manufacturer: syz
[  910.708519][ T5869] usb 5-1: SerialNumber: syz
[  910.737383][ T5869] usb 5-1: config 0 descriptor??
[  910.745991][T13392] loop0: detected capacity change from 0 to 512
[  910.790081][T13392] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1586: corrupted in-inode xattr: invalid ea_ino
[  910.908753][T13392] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  910.909420][T13392] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1586: couldn't read orphan inode 15 (err -117)
[  910.918724][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  910.918744][    C1] EXT4-fs (loop0): initial error at time 1784815702: ext4_iget_extra_inode:5180: inode 15
[  910.918781][    C1] EXT4-fs (loop0): last error at time 1784815702: ext4_iget_extra_inode:5180: inode 15
[  910.962848][T13392] loop0: lost filesystem error report for type 5 error -117
[  910.965717][T13392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  911.031241][ T5869] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  911.725319][T13404] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz.0.1586: invalid fast symlink length 39
[  911.755679][ T5869] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  911.830845][ T5869] usb 5-1: USB disconnect, device number 2
[  913.931277][ T9046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  914.708306][T13436] binder: 13435:13436 ioctl c0306201 200000000680 returned -14
[  915.091416][T13448] futex_wake_op: syz.7.1600 tries to shift op by 144; fix this program
[  915.932285][ T5619] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  916.112056][ T5619] usb 4-1: Using ep0 maxpacket: 32
[  916.472333][T10883] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  916.732637][T10883] usb 6-1: Using ep0 maxpacket: 8
[  916.789881][ T5619] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  916.799124][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.812686][ T5619] usb 4-1: config 0 descriptor??
[  916.831445][T10883] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  916.889770][T10883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  917.927531][T10883] usb 6-1: config 0 has no interface number 0
[  918.646860][ T5619] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  918.668478][ T5619] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  918.688949][ T5619] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  918.736600][ T5619] usb 4-1: media controller created
[  918.737852][T10883] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  918.795768][T10883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.827847][T10883] usb 6-1: Product: syz
[  918.907162][T10883] usb 6-1: Manufacturer: syz
[  918.949436][T10883] usb 6-1: SerialNumber: syz
[  918.966798][T13470] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  918.991781][ T5619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  919.062826][T13470] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  919.128674][T13470] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  919.129660][T10883] usb 6-1: config 0 descriptor??
[  919.202416][ T5869] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  919.434492][ T5869] usb 3-1: Using ep0 maxpacket: 8
[  919.559600][ T5869] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  919.677328][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  919.889029][ T5869] usb 3-1: config 0 has no interface number 0
[  919.938501][T10883] usb 6-1: can't set config #0, error -71
[  920.120804][T10883] usb 6-1: USB disconnect, device number 14
[  920.140598][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  920.191187][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.211176][ T5619] az6027: usb out operation failed. (-71)
[  920.242388][ T5619] az6027: usb out operation failed. (-71)
[  920.252843][ T5869] usb 3-1: Product: syz
[  920.275959][ T5619] stb0899_attach: Driver disabled by Kconfig
[  920.285373][ T5869] usb 3-1: Manufacturer: syz
[  920.460737][ T5869] usb 3-1: SerialNumber: syz
[  920.465982][ T5619] az6027: no front-end attached
[  920.465982][ T5619] 
[  920.475345][ T5619] az6027: usb out operation failed. (-71)
[  920.481057][ T5619] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  920.491374][ T5869] usb 3-1: config 0 descriptor??
[  920.502060][ T5619] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27
[  920.531577][ T5869] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  921.232988][ T5869] uvcvideo 3-1:0.31: Failed to create links for entity 32774
[  921.247785][ T5869] uvcvideo 3-1:0.31: Failed to register entities (-22).
[  921.360715][ T5619] dvb-usb: schedule remote query interval to 400 msecs.
[  921.373016][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'.
[  921.414180][ T5619] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  921.451472][ T5619] usb 4-1: USB disconnect, device number 4
[  921.505398][ T5869] usb 3-1: USB disconnect, device number 4
[  921.634520][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  921.686972][T13491] loop3: detected capacity change from 0 to 1024
[  921.759556][T13489] can: request_module (can-proto-0) failed.
[  921.789118][T10525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  921.845695][ T5619] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  921.855190][T13491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  921.871169][T13501] binder: BINDER_SET_CONTEXT_MGR already set
[  921.908623][T13501] binder: 13500:13501 ioctl 4018620d 200000001000 returned -16
[  921.939029][T13491] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  922.150519][T13511] futex_wake_op: syz.4.1615 tries to shift op by 144; fix this program
[  923.859648][T13522] loop2: detected capacity change from 0 to 256
[  924.892318][T13499] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  926.537830][ T5758] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  927.663484][ T5758] usb 6-1: Using ep0 maxpacket: 8
[  927.714964][ T5758] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  927.770137][ T5758] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  927.831528][ T5758] usb 6-1: config 0 has no interface number 0
[  927.863734][ T5758] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  927.915644][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.963428][ T5758] usb 6-1: Product: syz
[  927.976633][ T5758] usb 6-1: Manufacturer: syz
[  928.001549][T13548] loop7: detected capacity change from 0 to 512
[  928.013022][ T5758] usb 6-1: SerialNumber: syz
[  928.042134][ T5758] usb 6-1: config 0 descriptor??
[  928.559155][T13548] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1626: corrupted in-inode xattr: invalid ea_ino
[  928.606266][T13548] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  928.609380][ T5758] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  928.637501][T13548] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1626: couldn't read orphan inode 15 (err -117)
[  928.649394][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  928.649410][    C1] EXT4-fs (loop7): initial error at time 1784815720: ext4_iget_extra_inode:5180: inode 15
[  928.649437][    C1] EXT4-fs (loop7): last error at time 1784815720: ext4_iget_extra_inode:5180: inode 15
[  928.715551][ T5758] uvcvideo 6-1:0.31: Failed to create links for entity 32774
[  928.779542][ T5758] uvcvideo 6-1:0.31: Failed to register entities (-22).
[  928.832402][T13548] loop7: lost filesystem error report for type 5 error -117
[  928.844059][T13548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  928.946182][T13558] futex_wake_op: syz.0.1628 tries to shift op by 144; fix this program
[  929.759869][ T5758] usb 6-1: USB disconnect, device number 15
[  930.049382][T13562] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz.7.1626: invalid fast symlink length 39
[  930.523532][T12801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.591337][T13563] binder: 13561:13563 ioctl c0306201 200000000680 returned -14
[  930.742737][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  930.756823][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  931.409496][T13571] loop7: detected capacity change from 0 to 256
[  932.964835][ T9046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  933.721536][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  935.327925][T13590] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  935.334629][T13590] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  935.979667][T13614] vhci_hcd: connection closed
[  936.065027][T13590] vhci_hcd vhci_hcd.0: Device attached
[  936.152261][ T5869] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  936.162540][   T57] vhci_hcd vhci_hcd.4: stop threads
[  936.201340][   T57] vhci_hcd vhci_hcd.4: release socket
[  936.217797][ T5758] usb 42-1: SetAddress Request (2) to port 0
[  936.241581][   T57] vhci_hcd vhci_hcd.4: disconnect device
[  936.259675][ T5758] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  936.311991][ T5758] usb 42-1: enqueue for inactive port 0
[  936.340157][ T5869] usb 3-1: Using ep0 maxpacket: 8
[  936.369106][ T5869] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  936.403837][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  936.457642][ T5869] usb 3-1: config 0 has no interface number 0
[  936.531639][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  936.575579][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.625050][ T5869] usb 3-1: Product: syz
[  936.654593][ T5869] usb 3-1: Manufacturer: syz
[  936.698905][ T5869] usb 3-1: SerialNumber: syz
[  936.733724][ T5758] usb usb42-port1: attempt power cycle
[  936.765499][ T5869] usb 3-1: config 0 descriptor??
[  936.880830][ T5869] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  936.928515][ T5869] uvcvideo 3-1:0.31: Failed to create links for entity 32774
[  936.964408][ T5869] uvcvideo 3-1:0.31: Failed to register entities (-22).
[  937.011575][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'.
[  937.021261][T13630] loop7: detected capacity change from 0 to 512
[  937.475308][T13630] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1644: corrupted in-inode xattr: invalid ea_ino
[  937.489135][T13630] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  937.490617][T13630] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1644: couldn't read orphan inode 15 (err -117)
[  937.499816][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  937.499832][    C0] EXT4-fs (loop7): initial error at time 1784815729: ext4_iget_extra_inode:5180: inode 15
[  937.499858][    C0] EXT4-fs (loop7): last error at time 1784815729: ext4_iget_extra_inode:5180: inode 15
[  937.540296][T13630] loop7: lost filesystem error report for type 5 error -117
[  937.546960][T13630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  937.843932][T13639] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz.7.1644: invalid fast symlink length 39
[  938.199823][T13640] futex_wake_op: syz.0.1643 tries to shift op by 144; fix this program
[  938.228758][ T5758] usb usb42-port1: unable to enumerate USB device
[  938.788081][T12801] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  939.599058][T13645] loop7: detected capacity change from 0 to 256
[  940.994813][ T5869] usb 3-1: USB disconnect, device number 5
[  941.315940][T13656] loop2: detected capacity change from 0 to 1024
[  941.455784][T13656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  941.480150][T13653] can: request_module (can-proto-0) failed.
[  941.552168][T13656] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  944.172470][T13660] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  946.847781][T12876] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  947.021663][T13715] futex_wake_op: syz.4.1657 tries to shift op by 144; fix this program
[  947.968026][T13718] loop5: detected capacity change from 0 to 512
[  948.150886][T13718] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.1658: corrupted in-inode xattr: invalid ea_ino
[  948.302459][T13718] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  948.306712][T13718] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1658: couldn't read orphan inode 15 (err -117)
[  948.315970][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  948.315987][    C1] EXT4-fs (loop5): initial error at time 1784815740: ext4_iget_extra_inode:5180: inode 15
[  948.316016][    C1] EXT4-fs (loop5): last error at time 1784815740: ext4_iget_extra_inode:5180: inode 15
[  948.605535][T13728] (syz.4.1661,13728,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  948.614334][T13728] (syz.4.1661,13728,1):ocfs2_fill_super:1177 ERROR: status = -22
[  948.639738][T13718] loop5: lost filesystem error report for type 5 error -117
[  948.658967][T13718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  949.122783][T13737] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.1658: invalid fast symlink length 39
[  949.682610][ T5632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.135507][T13746] (syz.4.1664,13746,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  950.144418][T13746] (syz.4.1664,13746,1):ocfs2_fill_super:1177 ERROR: status = -22
[  953.983185][T13773] futex_wake_op: syz.2.1672 tries to shift op by 144; fix this program
[  954.847657][T13770] can: request_module (can-proto-0) failed.
[  954.874412][T13774] loop5: detected capacity change from 0 to 1024
[  955.018934][ T6819] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  955.481526][T13774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  955.652756][T13774] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  956.488299][T13788] loop2: detected capacity change from 0 to 512
[  956.564935][T10680] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  956.577307][T10680] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  956.594839][T10680] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  956.608447][T13788] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1677: corrupted in-inode xattr: invalid ea_ino
[  956.622257][T10680] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  956.633699][T13788] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  956.634638][T10680] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  956.651941][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  956.658454][    C1] EXT4-fs (loop2): initial error at time 1784815748: ext4_iget_extra_inode:5180: inode 15
[  956.668481][    C1] EXT4-fs (loop2): last error at time 1784815748: ext4_iget_extra_inode:5180: inode 15
[  956.698160][T13788] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1677: couldn't read orphan inode 15 (err -117)
[  956.715485][T13788] loop2: lost filesystem error report for type 5 error -117
[  956.788475][T13788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  957.239054][T13800] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.1677: invalid fast symlink length 39
[  957.773858][T12876] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  957.864245][T13780] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  958.170249][T13807] (syz.3.1678,13807,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  958.179150][T13807] (syz.3.1678,13807,0):ocfs2_fill_super:1177 ERROR: status = -22
[  958.732021][T10680] Bluetooth: hci8: command tx timeout
[  961.084646][T10680] Bluetooth: hci8: command tx timeout
[  963.549066][T10680] Bluetooth: hci8: command tx timeout
[  963.780438][ T1122] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.794526][T13841] futex_wake_op: syz.3.1685 tries to shift op by 144; fix this program
[  964.671553][T13851] loop4: detected capacity change from 0 to 512
[  964.727558][T13851] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1691: corrupted in-inode xattr: invalid ea_ino
[  964.728713][ T1122] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  964.867065][T13851] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  964.867553][T13851] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1691: couldn't read orphan inode 15 (err -117)
[  964.876813][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  964.876834][    C0] EXT4-fs (loop4): initial error at time 1784815756: ext4_iget_extra_inode:5180: inode 15
[  964.876872][    C0] EXT4-fs (loop4): last error at time 1784815756: ext4_iget_extra_inode:5180: inode 15
[  965.096512][T13851] loop4: lost filesystem error report for type 5 error -117
[  965.103018][T13851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  965.473821][ T1108] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  965.568624][T13858] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.1691: invalid fast symlink length 39
[  965.633328][T10680] Bluetooth: hci8: command tx timeout
[  966.081453][T12819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  966.195987][ T1122] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.564809][ T1122] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  967.429654][T13875] (syz.2.1693,13875,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  967.438551][T13875] (syz.2.1693,13875,1):ocfs2_fill_super:1177 ERROR: status = -22
[  968.219372][ T1122] bridge_slave_1: left allmulticast mode
[  968.258578][ T1122] bridge_slave_1: left promiscuous mode
[  968.297979][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.019617][ T1122] bridge_slave_0: left allmulticast mode
[  970.030580][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'.
[  970.039858][ T1122] bridge_slave_0: left promiscuous mode
[  970.047514][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[  970.097657][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'.
[  970.219226][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'.
[  970.438651][ T4939] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  970.449346][ T4939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  970.459379][ T4939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  970.473920][ T4939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  970.494094][ T4939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  971.110438][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  971.178031][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  971.274022][ T1122] bond0 (unregistering): Released all slaves
[  971.448224][T13697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  972.109673][T13914] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1700'.
[  973.363822][ T4939] Bluetooth: hci6: command tx timeout
[  973.454775][T13789] bridge0: port 1(bridge_slave_0) entered blocking state
[  973.521674][T13789] bridge0: port 1(bridge_slave_0) entered disabled state
[  973.564131][T13789] bridge_slave_0: entered allmulticast mode
[  973.617213][T13789] bridge_slave_0: entered promiscuous mode
[  975.034937][ T1122] hsr_slave_0: left promiscuous mode
[  975.067597][ T1122] hsr_slave_1: left promiscuous mode
[  975.258049][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  975.307111][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0
[  975.565248][ T4939] Bluetooth: hci6: command tx timeout
[  975.611259][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  975.619749][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1
[  975.693330][ T1122] veth1_macvtap: left promiscuous mode
[  975.698997][ T1122] veth0_macvtap: left promiscuous mode
[  975.705924][ T1122] veth1_vlan: left promiscuous mode
[  975.721462][ T1122] veth0_vlan: left promiscuous mode
[  975.804212][  T185] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  976.322918][  T185] usb 1-1: Using ep0 maxpacket: 32
[  976.339289][  T185] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  976.375056][  T185] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  976.401525][  T185] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  976.439288][  T185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  976.483481][  T185] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  976.512409][  T185] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  976.557636][  T185] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  976.603439][  T185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.636357][  T185] usb 1-1: config 0 descriptor??
[  977.622109][ T4939] Bluetooth: hci6: command tx timeout
[  977.659194][  T185] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  978.027711][ T1122] team0 (unregistering): Port device team_slave_1 removed
[  978.136403][ T1122] team0 (unregistering): Port device team_slave_0 removed
[  978.484575][T13789] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.511595][T13789] bridge0: port 2(bridge_slave_1) entered disabled state
[  978.542270][T13789] bridge_slave_1: entered allmulticast mode
[  978.552294][T13789] bridge_slave_1: entered promiscuous mode
[  978.722857][T13789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.745926][ T5766] usb 1-1: USB disconnect, device number 11
[  978.781273][ T5766] usblp0: removed
[  978.796412][T13789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  980.417180][ T4939] Bluetooth: hci6: command tx timeout
[  980.629567][T13789] team0: Port device team_slave_0 added
[  980.789604][T13789] team0: Port device team_slave_1 added
[  980.884925][T13974] futex_wake_op: syz.2.1711 tries to shift op by 144; fix this program
[  981.727362][T13978] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1712'.
[  981.727725][T13789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  981.765528][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.837376][T13789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  981.938172][T13789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  981.964802][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  983.085363][T13789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  983.369778][T13789] hsr_slave_0: entered promiscuous mode
[  983.377783][T13789] hsr_slave_1: entered promiscuous mode
[  983.558629][ T1122] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  984.810981][ T4939] Bluetooth: hci2: command 0x0406 tx timeout
[  985.041321][ T1122] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.297560][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'.
[  985.322217][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'.
[  985.364569][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'.
[  985.424026][ T1122] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  987.174977][ T6819] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  987.428333][ T1122] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  988.672010][ T5619] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  989.216839][T14003] Bluetooth: hci7: command 0x0406 tx timeout
[  989.543263][ T5619] usb 3-1: Using ep0 maxpacket: 32
[  989.559432][ T5619] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  989.568925][ T5619] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  989.578086][ T5619] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  989.589432][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  989.599302][ T5619] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  989.609172][ T5619] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  989.622579][ T5619] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  989.642017][ T5619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.669923][T13889] bridge0: port 1(bridge_slave_0) entered blocking state
[  989.681190][ T5619] usb 3-1: config 0 descriptor??
[  989.711763][T13889] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.770244][T13889] bridge_slave_0: entered allmulticast mode
[  989.804956][T13889] bridge_slave_0: entered promiscuous mode
[  989.835609][T13889] bridge0: port 2(bridge_slave_1) entered blocking state
[  989.854429][T13889] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.879189][T13889] bridge_slave_1: entered allmulticast mode
[  989.902366][T13889] bridge_slave_1: entered promiscuous mode
[  990.109762][T13889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  990.140655][ T5619] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  990.848078][ T5619] usb 3-1: USB disconnect, device number 6
[  990.943033][ T5619] usblp0: removed
[  991.095727][T13889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  991.273867][T14039] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1723'.
[  991.359641][T13889] team0: Port device team_slave_0 added
[  991.416918][T13889] team0: Port device team_slave_1 added
[  991.610651][T13889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  992.463562][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  992.475392][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  992.478408][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  993.571663][T13889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  993.929262][ T1122] lo: left allmulticast mode
[  993.989108][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'.
[  995.764483][ T1122] bond0 (unregistering): Released all slaves
[  995.902050][T13889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  996.005354][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  996.374764][ T6784] smbdirect: ib_dev[syz1] removed
[  996.433475][T13889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  996.631298][ T1122] tipc: Left network mode
[  996.650734][T13889] hsr_slave_0: entered promiscuous mode
[  996.663909][T13889] hsr_slave_1: entered promiscuous mode
[  996.728288][ T5766] Process accounting resumed
[  996.909481][T13889] debugfs: 'hsr0' already exists in 'hsr'
[  996.918315][T13889] Cannot create hsr debugfs directory
[  997.000842][ T7704] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  997.038129][T14078] Process accounting resumed
[  997.794924][ T5869] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  997.908055][T14020] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  998.092493][ T5869] usb 4-1: device descriptor read/64, error -71
[  998.153319][T14020] usb 5-1: Using ep0 maxpacket: 32
[  998.171796][T14020] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  998.211359][T14020] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  998.273622][T14020] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  998.346435][T14020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  998.384234][ T5869] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  998.416951][T14020] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  998.489542][T14020] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  998.592266][ T5869] usb 4-1: device descriptor read/64, error -71
[  998.620178][T14020] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  998.748350][T14020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.769239][ T5869] usb usb4-port1: attempt power cycle
[  999.001604][T14020] usb 5-1: config 0 descriptor??
[  999.216895][ T5869] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  999.250741][T14020] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  999.269972][ T1122] hsr_slave_0: left promiscuous mode
[  999.273391][ T5869] usb 4-1: device descriptor read/8, error -71
[  999.283215][ T1122] hsr_slave_1: left promiscuous mode
[  999.314152][ T1122] veth1_macvtap: left promiscuous mode
[  999.335686][ T1122] veth0_macvtap: left promiscuous mode
[  999.355981][ T1122] veth1_vlan: left promiscuous mode
[  999.389164][ T1122] veth0_vlan: left promiscuous mode
[  999.795811][T14104] usb 5-1: USB disconnect, device number 3
[  999.828824][T14104] usblp0: removed
[  999.862820][ T5869] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  999.896963][ T5869] usb 4-1: device descriptor read/8, error -71
[ 1000.012316][ T5869] usb usb4-port1: unable to enumerate USB device
[ 1000.022100][T14020] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1000.193765][T14020] usb 1-1: Using ep0 maxpacket: 32
[ 1000.209468][T14020] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1000.218480][T14020] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1000.241239][T14020] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1000.263517][T14020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1000.284764][T14020] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1000.296508][T14020] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1000.365950][T14020] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1000.402016][T14020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.954414][T14020] usb 1-1: config 0 descriptor??
[ 1001.979417][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1741'.
[ 1002.188639][T14020] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1002.407674][T14020] usb 1-1: USB disconnect, device number 12
[ 1002.427230][T13789] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1002.652368][T14020] usblp0: removed
[ 1002.662590][T13789] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1003.418815][T13789] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1003.596820][T13789] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1003.849866][T13789] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1003.879021][T13789] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1003.908886][T13789] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1003.944912][T13789] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1004.033157][ T5745] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1004.661505][ T5745] usb 1-1: Using ep0 maxpacket: 8
[ 1005.009521][ T5745] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[ 1005.018169][ T5745] usb 1-1: config 0 has no interface number 0
[ 1005.024595][ T5745] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1005.052535][ T5745] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1005.078834][ T5745] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1005.108958][ T5745] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1005.122498][ T5745] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1005.131628][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.145384][ T5745] usb 1-1: config 0 descriptor??
[ 1005.170478][ T5745] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1005.204175][ T1122] IPVS: stop unused estimator thread 0...
[ 1005.559871][ T5745] usb 1-1: USB disconnect, device number 13
[ 1005.607914][ T5745] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[ 1005.625725][T13789] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1005.960809][T13789] 8021q: adding VLAN 0 to HW filter on device team0
[ 1006.049816][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1006.056997][ T6784] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1006.109805][T13889] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1006.158489][T13889] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1006.187449][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1006.194690][ T6784] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1006.211384][T14166] (syz.4.1750,14166,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1006.221840][T14166] (syz.4.1750,14166,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1006.245055][T13889] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1006.296702][T13889] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1006.327689][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1753'.
[ 1006.344606][T13889] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1006.393557][T13889] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1006.596153][T13789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1006.606658][T13789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1007.959614][   T31] INFO: task syz.1.1482:12755 blocked for more than 145 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1008.036849][T13889] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1008.396720][   T31]       Tainted: G             L      syzkaller #0
[ 1008.432743][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1008.471967][   T31] task:syz.1.1482      state:D stack:27824 pid:12755 tgid:12751 ppid:5633   task_flags:0x400040 flags:0x00080002
[ 1008.505305][   T31] Call Trace:
[ 1008.523328][   T31]  <TASK>
[ 1008.540062][   T31]  __schedule+0x17d9/0x56c0
[ 1008.586863][   T31]  ? __pfx___schedule+0x10/0x10
[ 1008.617214][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1008.642895][ T5869] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1008.826624][   T31]  ? schedule+0x90/0x2b0
[ 1008.852286][   T31]  schedule+0x164/0x2b0
[ 1009.574425][   T31]  super_lock+0x1e0/0x3d0
[ 1009.583447][   T31]  ? __pfx_super_lock+0x10/0x10
[ 1009.588916][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1009.595456][   T31]  ? __pfx_var_wake_function+0x10/0x10
[ 1009.600942][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1009.606633][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1009.613092][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[ 1009.618371][   T31]  __iterate_supers+0x120/0x240
[ 1009.623276][   T31]  ? __pfx_quota_sync_one+0x10/0x10
[ 1009.628477][   T31]  __se_sys_quotactl+0x3a0/0x9a0
[ 1009.642385][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1009.650448][   T31]  ? __se_sys_futex+0x3a8/0x450
[ 1009.655388][   T31]  ? __pfx___se_sys_quotactl+0x10/0x10
[ 1009.660847][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1009.666542][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1009.672493][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1009.678158][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1009.684344][   T31]  do_syscall_64+0x174/0x580
[ 1009.688949][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1009.695143][   T31] RIP: 0033:0x7f3028d9de99
[ 1009.703479][   T31] RSP: 002b:00007f3029bf4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[ 1009.713510][   T31] RAX: ffffffffffffffda RBX: 00007f3029026270 RCX: 00007f3028d9de99
[ 1009.730526][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100
[ 1009.740098][ T5869] usb 3-1: Using ep0 maxpacket: 32
[ 1009.747057][   T31] RBP: 00007f3028e33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1009.761954][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1009.791956][   T31] R13: 00007f3029026308 R14: 00007f3029026270 R15: 00007ffff77f1a78
[ 1009.801664][   T31]  </TASK>
[ 1009.805618][   T31] 
[ 1009.805618][   T31] Showing all locks held in the system:
[ 1009.819206][T13889] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1009.881916][   T31] 1 lock held by khungtaskd/31:
[ 1009.936204][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1010.160736][   T31] 3 locks held by kworker/u8:9/1122:
[ 1010.190588][   T31] 1 lock held by dhcpcd/5284:
[ 1010.223625][   T31] 2 locks held by getty/5378:
[ 1010.241605][   T31]  #0: ffff88803274d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1010.270060][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 1010.290213][   T31] 4 locks held by kworker/1:5/5766:
[ 1010.301921][   T31] 5 locks held by kworker/0:7/5869:
[ 1010.307148][   T31]  #0: ffff888021ad6d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1010.321915][   T31]  #1: ffffc90005527c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1010.334477][   T31]  #2: ffff888029c9f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[ 1010.352238][   T31]  #3: ffff888029c9c568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30
[ 1010.377752][   T31]  #4: ffff8880299e3060 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30
[ 1010.400170][   T31] 1 lock held by syz.8.1031/10429:
[ 1010.411922][   T31]  #0: ffff88807e25c0d8 (&type->s_umount_key#94/1){+.+.}-{4:4}, at: sget_fc+0x938/0x1900
[ 1010.441917][   T31] 2 locks held by syz-executor/10525:
[ 1010.448908][   T31] 3 locks held by kworker/1:2/10883:
[ 1010.462209][   T31]  #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1010.483849][   T31]  #1: ffffc9000366fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1010.511984][   T31]  #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 1010.541972][   T31] 1 lock held by syz.3.1742/14169:
[ 1010.548696][   T31]  #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 1010.574469][   T31] 1 lock held by syz.4.1755/14183:
[ 1010.594803][   T31]  #0: ffff8880598e8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[ 1010.606212][   T31] 1 lock held by sed/14192:
[ 1010.610884][   T31] 
[ 1010.678576][   T31] =============================================
[ 1010.678576][   T31] 
[ 1010.733850][   T31] NMI backtrace for cpu 0
[ 1010.733870][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1010.733900][   T31] Tainted: [L]=SOFTLOCKUP
[ 1010.733908][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1010.733921][   T31] Call Trace:
[ 1010.733930][   T31]  <TASK>
[ 1010.733939][   T31]  dump_stack_lvl+0xe8/0x150
[ 1010.733980][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1010.734011][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1010.734040][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1010.734076][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 1010.734112][   T31]  sys_info+0x135/0x170
[ 1010.734138][   T31]  watchdog+0xfd7/0x1030
[ 1010.734174][   T31]  ? watchdog+0x1c7/0x1030
[ 1010.734210][   T31]  kthread+0x388/0x470
[ 1010.734242][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1010.734267][   T31]  ? __pfx_kthread+0x10/0x10
[ 1010.734301][   T31]  ret_from_fork+0x514/0xb70
[ 1010.734337][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1010.734368][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1010.734395][   T31]  ? __switch_to+0xc89/0x1420
[ 1010.734425][   T31]  ? __pfx_kthread+0x10/0x10
[ 1010.734459][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1010.734498][   T31]  </TASK>
[ 1010.734527][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1010.862374][    C1] NMI backtrace for cpu 1
[ 1010.862392][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1010.862419][    C1] Tainted: [L]=SOFTLOCKUP
[ 1010.862426][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1010.862437][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1010.862474][    C1] Code: dc 7f 02 e9 fe 6f 40 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 9a 19 00 fb f4 <e9> d7 6f 40 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1010.862492][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246
[ 1010.862510][    C1] RAX: 0000000002d742e1 RBX: ffffffff819ab450 RCX: 0000000080000001
[ 1010.862525][    C1] RDX: 0000000000000001 RSI: ffffffff8e22bfbd RDI: ffffffff8c4bdb80
[ 1010.862540][    C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
[ 1010.862555][    C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
[ 1010.862569][    C1] R13: 1ffff11003bd4000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[ 1010.862587][    C1] FS:  0000000000000000(0000) GS:ffff888125054000(0000) knlGS:0000000000000000
[ 1010.862604][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1010.862618][    C1] CR2: 00007ffecc1fb038 CR3: 00000000741e0000 CR4: 0000000000350ef0
[ 1010.862636][    C1] Call Trace:
[ 1010.862643][    C1]  <TASK>
[ 1010.862651][    C1]  default_idle+0x9/0x20
[ 1010.862677][    C1]  default_idle_call+0x72/0xb0
[ 1010.862701][    C1]  do_idle+0x2e0/0x540
[ 1010.862731][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1010.862765][    C1]  cpu_startup_entry+0x43/0x60
[ 1010.862793][    C1]  start_secondary+0x101/0x110
[ 1010.862821][    C1]  common_startup_64+0x13e/0x157
[ 1010.862857][    C1]  </TASK>
[ 1011.601962][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1011.608851][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1011.619514][   T31] Tainted: [L]=SOFTLOCKUP
[ 1011.623817][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[ 1011.633854][   T31] Call Trace:
[ 1011.637119][   T31]  <TASK>
[ 1011.640038][   T31]  vpanic+0x56c/0xa60
[ 1011.644058][   T31]  ? __pfx___schedule+0x10/0x10
[ 1011.648913][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1011.653443][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1011.659073][   T31]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[ 1011.665228][   T31]  panic+0xc5/0xd0
[ 1011.668952][   T31]  ? __pfx_panic+0x10/0x10
[ 1011.673368][   T31]  ? preempt_schedule_common+0x82/0xd0
[ 1011.678825][   T31]  ? preempt_schedule_thunk+0x16/0x40
[ 1011.684191][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[ 1011.690347][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[ 1011.696497][   T31]  watchdog+0x1030/0x1030
[ 1011.700835][   T31]  ? watchdog+0x1c7/0x1030
[ 1011.705260][   T31]  kthread+0x388/0x470
[ 1011.709328][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1011.713996][   T31]  ? __pfx_kthread+0x10/0x10
[ 1011.718591][   T31]  ret_from_fork+0x514/0xb70
[ 1011.723187][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1011.728298][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1011.733923][   T31]  ? __switch_to+0xc89/0x1420
[ 1011.738597][   T31]  ? __pfx_kthread+0x10/0x10
[ 1011.743192][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1011.747963][   T31]  </TASK>
[ 1011.751188][   T31] Kernel Offset: disabled
[ 1011.755492][   T31] Rebooting in 86400 seconds..