last executing test programs:

1m53.944213566s ago: executing program 1 (id=1097):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket(0x400000000010, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={<r1=>0x0, 0x3, 0x2, 0x2}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={r1, 0x4a, 0xb}, 0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000480)={[0x2]}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r7}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r7}, 0x38)

1m51.149134766s ago: executing program 1 (id=1103):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
fchdir(0xffffffffffffffff)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00')
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010000000000000000000e"], 0x14}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x3, 0x6, 0x2, 0xffff, 0x0, "000000000000e8ff00", "ecff0600", '\x00', '\x00', ["50ff7f0000000000000000b6", "808e8ce2e9ffff00", "0c3269643c97c44308331001", "0008978be0f6a9298500"]})

1m50.132359675s ago: executing program 1 (id=1105):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000300)={0x3e, 0x8, 0x9})
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$phonet(0x23, 0x2, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r4=>r1, {0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000240)=0x7, 0x4)
sendto$phonet(r3, &(0x7f0000000040), 0x0, 0x4000, &(0x7f0000000100), 0x10)
socket$alg(0x26, 0x5, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
write$dsp(r4, &(0x7f0000000280)="bb1f432332e166bdeb0b804a9d0792b3336645a1bd7e6a9b26c4075e02f62afef0fb93635671fc72569faccc67ebc4cd59007cf2baa62631aa15ef01ff169536ea8990", 0x43)
symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00')
lstat(&(0x7f00000048c0)='./file0\x00', &(0x7f0000004900))
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x200040d1)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
ioprio_set$pid(0x1, 0x0, 0x6000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b408000000000000730a4100000000008510000002000000b7000000000000009500c200000000009500001200000000f34ce887b7191a78df20e9357469eb577cc66d0df7b7c22af332cd17b77615d5e3ec9813345a5c18c77c3086e28c9e7e034491c839919641508a7f659fb74757dddc873d893e5099ce740f02a21ca7be4652665387cad31e0c45fd01bed44e6af70b2b6caf5d51251182d8549e69e94cb6c8e86ac9239082be55b2817a014c21655560fa919cca4996b0e2b883e92a95212fba1135670522b77ffaa9b098b39cef973264"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

1m48.99484032s ago: executing program 1 (id=1108):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = gettid()
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
read(r6, &(0x7f0000000200)=""/209, 0x128)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000})
tkill(r5, 0x7)
r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a440000102030109021b00010100c000090400000207010100090501"], 0x0)
syz_usb_disconnect(r7)
listen(r0, 0x3)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x7}, {0x4, 0xc9, 0x3f}}}}, 0xa)

1m45.592327205s ago: executing program 1 (id=1114):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000)=0x2, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})
write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)
socket$key(0xf, 0x3, 0x2)
sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="05030006e8fe091c6202a0", 0xb, 0x0, 0x0, 0x0)
mkdir(0x0, 0x33)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="71756f74612c0076803d1ef1e21d15ecae5550b872972cd5fd8e642f1e64ccb6bbcfe6ba65a7cf4fdbc772c2977e319ff8f2cc885c06cc0d16a110373fa6cff7b62d0d527d078b3154bfe4913a1a66b19475a0a4d0c5831d8f2c3697d547a24e519af5b610225e5ed8"])
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1m45.106187292s ago: executing program 1 (id=1116):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x42, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_tgsigqueueinfo(r1, r1, 0x32, &(0x7f00000000c0)={0x9, 0x10001, 0x8})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0xfc5e)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300))
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x29, 0x10003, 0x204000, 0x0, 0x4, 0x8000080, 0x1}}, 0x50)

1m29.653361108s ago: executing program 32 (id=1116):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x42, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_tgsigqueueinfo(r1, r1, 0x32, &(0x7f00000000c0)={0x9, 0x10001, 0x8})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0xfc5e)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300))
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x29, 0x10003, 0x204000, 0x0, 0x4, 0x8000080, 0x1}}, 0x50)

15.355154347s ago: executing program 3 (id=1255):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0xffffffdc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, 0x0, 0x50)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, 0x0, 0x4050)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4008001)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r6, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x3000000}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001000000000000000000000010000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d7"], 0x114}], 0x1}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x4c, 0x1a, 0x130, 0x73, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)

15.116984947s ago: executing program 3 (id=1256):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x42, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x32, &(0x7f00000000c0)={0x9, 0x10001, 0x8})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0xfc5e)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300))
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r4, {0x7, 0x29, 0x10003, 0x204000, 0x0, 0x4, 0x8000080, 0x1}}, 0x50)

14.275366814s ago: executing program 2 (id=1257):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140))
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

14.077508494s ago: executing program 2 (id=1258):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382)
r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x1)
pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r1, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x1, 0x9, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]})
ioctl$LOOP_CLR_FD(r1, 0x4c01)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd273}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc801}, 0x84000bef968ff6f8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0xc)
setresuid(0x0, 0x0, r4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x7, 0x0, &(0x7f00000008c0)="386d178529a39d", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000c00083a0000000000000000000000ffffac1414aaff0100000000000000000000000000018000907800060400f29d840a4e4ba6852978d87ad15ac7734662f43ff0e9e5616f137f8954f97fa32cd482d7890b97be97b35206311972f2531a4a62b183460628c0ba00005244c7839cc1104e007d3099dc8bede008b519b46149134a3f154f0841b8683ef18c3a0baadb459630e79715203bedefa07ec1b3532fbd"], 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258})

13.247870135s ago: executing program 5 (id=1260):
r0 = fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xfdef, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x6040)
r2 = io_uring_setup(0x3eae, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4003, &(0x7f0000000080)='\x00;\xdc<\x91q\tBD~\x19\xedy@\xa6\xcb*G\xe7\x93\f\x13\xfd\xa5\xc4\xf7\xdf\x83<V\x80\x15\xa4\xe0)s\xef\x8f5>\x83\xcd\x0e\xe9\x8d4ef\v\xf6\x85o\xc2\xb8A^\x1d\x8dd\x17\xf5\fU\xbaU\xd0H.$\xd7ag\x91\x89M\x9f\xa72;\xcdT\xa7\x81\xb5\x19\xa5R\xc6a\xd6\x1f \xe09\x03v[\x8e\x93PG\x97cg\x91\x02\xdb\xd9o.9\xec\xdd\xd8\x8e\xfd')
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020)
r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
ioperm(0x181, 0xd80b, 0x400000)
preadv2(r6, 0x0, 0x0, 0x0, 0x4001002, 0x0)
vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)='-', 0x1}], 0x1, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000200)='./file0\x00', 0x9)
fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

12.15493557s ago: executing program 0 (id=1261):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080), 0x6)
ioctl$sock_bt_hci(r5, 0x400448e7, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0100000b0601080005840008800c00078008001c40000000080c000580050015000f0000001c00078018000180140002400000000000000000000000000000000018010780140017007465616d5f736c6176655f31000000000c00078008000a40000000040c0007800800084000000084100007800900130073797a32000000000c00078008000840000001ac20000880100007800a001100192702c5669d00000c00078008000a40000100000900020073797a30"], 0x16c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900"], 0x2c}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

12.12991087s ago: executing program 3 (id=1262):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x48084)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x0)
write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2)

12.127639176s ago: executing program 5 (id=1272):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00')
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f0000000180))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(0x0)
r4 = open(0x0, 0x2282, 0x80)
setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@private0, @in=@broadcast}}, {{@in6=@private2}, 0x0, @in6=@empty}}, 0x0)
mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x3090040, 0x0)

11.07032366s ago: executing program 3 (id=1263):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0)
socket(0x200000100000011, 0x3, 0x3)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}})
write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373)
lseek(r4, 0xfffffffffffffff5, 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r5, 0x1)

11.069517496s ago: executing program 5 (id=1264):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESHEX, @ANYRES16, @ANYRES16, @ANYRES64, @ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mount(&(0x7f0000000180)=@md0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='hugetlbfs\x00', 0x20, &(0x7f0000000440)='^%\x00')
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008015}, 0x4000080)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x8, r4}, 0x38)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$alg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

10.971461089s ago: executing program 4 (id=1265):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x17)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x3c1d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
read(r3, 0x0, 0x0)
r4 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000940d000000000000000000000000000000009f1dcf"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000004000000007468f74996836d8c05e05864b00a3cd43889f03bff95194aa5696c99d06e4dad66fcbfa8cf6c", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='RADIO\nCD \'Mic Ctpture Switch\' 00000000000000000000\nIGAIN\nTREBLE \'CD Capture Switch\' 000'], 0xd3)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_ifreq(r6, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}})

10.903563217s ago: executing program 0 (id=1266):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0xffffffdc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, 0x0, 0x50)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, 0x0, 0x4050)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4008001)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r6, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x3000000}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001000000000000000000000010000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d7"], 0x114}], 0x1}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x4c, 0x1a, 0x130, 0x73, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)

9.744650449s ago: executing program 2 (id=1267):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', 0x0})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005})

9.711922379s ago: executing program 0 (id=1268):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000)=0x2, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
r3 = dup(0xffffffffffffffff)
r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})
write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d320987f70e06d038e7ff7fc6e5539b3247298b089b070d366e090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'hsr0\x00'})
sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="05030006e8fe091c6202a0", 0xb, 0x0, 0x0, 0x0)
mkdir(0x0, 0x33)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="71756f74612c0076803d1ef1e21d15ecae5550b872972cd5fd8e642f1e64ccb6bbcfe6ba65a7cf4fdbc772c2977e319ff8f2cc885c06cc0d16a110373fa6cff7b62d0d527d078b3154bfe4913a1a66b19475a0a4d0c5831d8f2c3697d547a24e519af5b610225e5ed8"])
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

9.593738498s ago: executing program 4 (id=1269):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
preadv(r0, 0x0, 0x0, 0x1000, 0x3f2f0fde)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDDELIO(r1, 0x4b34, 0x3bf)
ioctl$KDDISABIO(r1, 0x4b37)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
r3 = inotify_init1(0x80000)
inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0xaa)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
dup3(r3, r4, 0x0)
readv(r4, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x1a, 0x0, &(0x7f0000000b80)="f8ad48cc02cb29dcc8007f5b0800cfd6782bdb91b94088001652", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

7.54992297s ago: executing program 2 (id=1270):
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r3, 0x0, 0xa002a0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r3, 0x0, 0x1500}, 0x38)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0xba)
lseek(r4, 0x104, 0x0)
getdents(r4, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000a31000/0x4000)=nil, r6, 0x3000001, 0x810, r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[], 0x0)

7.548427763s ago: executing program 3 (id=1271):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdfc, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300))
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0})
dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x5}, 0x1c)
r5 = dup2(r4, r4)
write(r5, &(0x7f00000000c0)="6c6908f26cad4d8de004e888e5a9e197fe439e2a7a9407b84bf6c4ea29cc0cd2e445883bdf8be10ed32b71316d6cd4e293339f1270084d78d61134796daf4294701b6831df60364cc48bbffeb4627465eabed223877f7a404138d3a66c9e5f367cc3fa9e", 0x64)
sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4)
r7 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, 0x0)

7.425429532s ago: executing program 0 (id=1273):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_tgsigqueueinfo(r1, r1, 0x32, &(0x7f00000000c0)={0x9, 0x10001, 0x8})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0xfc5e)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300))
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x29, 0x10003, 0x204000, 0x0, 0x4, 0x8000080, 0x1}}, 0x50)

7.403189456s ago: executing program 5 (id=1274):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x48084)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x0)
write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2)

6.963275183s ago: executing program 4 (id=1275):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', 0x0})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005})

4.686115612s ago: executing program 5 (id=1276):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00')
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f0000000180))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = open(0x0, 0x2282, 0x80)
setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x3090040, 0x0)

4.652427724s ago: executing program 0 (id=1277):
socket$inet(0x2, 0x4000000805, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0)
syz_usb_disconnect(r0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x0, 0x2)
syz_emit_ethernet(0x114, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xb, 0x6, "511dc2", 0xde, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[@srh={0x32, 0x4, 0x4, 0x2, 0xb, 0x50, 0x80, [@dev={0xfe, 0x80, '\x00', 0x2e}, @dev={0xfe, 0x80, '\x00', 0xe}]}, @routing={0x3c, 0x0, 0x0, 0x8}, @fragment={0x84, 0x0, 0x7, 0x1, 0x0, 0x5, 0x68}], {0x4e20, 0x4e22, 0xa6, 0x0, @wg=@data={0x4, 0x1, 0x5, "b380bc0cfc3384039ecde2b0ac4cad180c3c4aa9c97c923a9c6cb13f6aa9fbf8c08fb700252ea7f0213a06dcbe9459c26c3d32e20f876ac1a8af8b062848da682f703220f6526c300ae9a1b65f9c84a6bd74f8cf0ebccbf3163defff0b96ad2daab94c255d861af6a702229ca46f95d13cba864c825a77be7bdcb040da246bb6f3f5b0d0c69a647e2388ad42324f"}}}}}}}, 0x0)
prctl$PR_GET_NAME(0x10, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40000)
syz_usb_ep_read(0xffffffffffffffff, 0x5, 0x0, 0x0)
ioctl$CEC_G_MODE(r2, 0x80046108, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000005c0)=<r4=>0x0)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
setpgid(r4, r5)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0)

4.583552504s ago: executing program 4 (id=1278):
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080))
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x2, 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
getpid()
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4)

3.808470825s ago: executing program 5 (id=1279):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382)
r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x1)
pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r1, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x1, 0x9, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]})
ioctl$LOOP_CLR_FD(r1, 0x4c01)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd273}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc801}, 0x84000bef968ff6f8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0xc)
setresuid(0x0, 0x0, r4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000c00083a0000000000000000000000ffffac1414aaff0100000000000000000000000000018000907800060400f29d840a4e4ba6852978d87ad15ac7734662f43ff0e9e5616f137f8954f97fa32cd482d7890b97be97b35206311972f2531a4a62b183460628c0ba00005244c7839cc1104e007d3099dc8bede008b519b46149134a3f154f0841b8683ef18c3a0baadb459630e79715203bedefa07ec1b3532fbd"], 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258})

2.861201076s ago: executing program 2 (id=1280):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c4, 0x10000000})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000180)=0xc000000, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.800897831s ago: executing program 4 (id=1281):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', 0x0})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005})

2.73021518s ago: executing program 3 (id=1282):
syz_open_dev$vivid(&(0x7f0000001040), 0x1, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000180)=0x3, 0x12)
openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008"], 0xe4}}, 0x0)

469.017881ms ago: executing program 2 (id=1283):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40)
creat(0x0, 0x40)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
setuid(0xee00)

348.953636ms ago: executing program 0 (id=1284):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000)=0x2, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
r2 = dup(0xffffffffffffffff)
r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})
write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'hsr0\x00'})
sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="05030006e8fe091c6202a0", 0xb, 0x0, 0x0, 0x0)
mkdir(0x0, 0x33)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="71756f74612c0076803d1ef1e21d15ecae5550b872972cd5fd8e642f1e64ccb6bbcfe6ba65a7cf4fdbc772c2977e319ff8f2cc885c06cc0d16a110373fa6cff7b62d0d527d078b3154bfe4913a1a66b19475a0a4d0c5831d8f2c3697d547a24e519af5b610225e5ed8"])
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

0s ago: executing program 4 (id=1285):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={<r2=>0x0, @in6={{0xa, 0x4e21, 0x8001, @empty, 0x7}}, 0x0, 0x4, 0x0, 0x400, 0x5}, &(0x7f0000000040)=0x98)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
execve(0x0, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100))
ioctl$VIDIOC_S_STD(r4, 0x40085618, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000019140)={0x54, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000)
syz_open_procfs$namespace(r5, &(0x7f0000019240)='ns/user\x00')
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000240)=0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x2000000}}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

 page write
[  253.086875][ T7340] netlink: 'syz.4.301': attribute type 10 has an invalid length.
[  253.095016][ T7340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.301'.
[  253.568889][ T7340] team0: Port device geneve0 added
[  254.181569][ T7350] netlink: 165 bytes leftover after parsing attributes in process `syz.0.302'.
[  254.204781][ T5831] Bluetooth: hci1: unexpected event for opcode 0x1003
[  255.245046][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.251598][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.321789][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  256.542633][ T5830] Bluetooth: Wrong link type (-57)
[  258.494424][ T5830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  258.504065][ T5830] Bluetooth: hci1: Injecting HCI hardware error event
[  258.514623][ T5830] Bluetooth: hci1: hardware error 0x00
[  259.861963][ T7414] loop7: detected capacity change from 0 to 16384
[  260.166297][ T7418] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0
[  260.177824][ T7418] buffer_io_error: 2 callbacks suppressed
[  260.177841][ T7418] Buffer I/O error on dev loop7, logical block 128, lost async page write
[  260.177932][ T7418] Buffer I/O error on dev loop7, logical block 129, lost async page write
[  260.178005][ T7418] Buffer I/O error on dev loop7, logical block 130, lost async page write
[  260.178067][ T7418] Buffer I/O error on dev loop7, logical block 131, lost async page write
[  260.178126][ T7418] Buffer I/O error on dev loop7, logical block 132, lost async page write
[  260.178191][ T7418] Buffer I/O error on dev loop7, logical block 133, lost async page write
[  260.178252][ T7418] Buffer I/O error on dev loop7, logical block 134, lost async page write
[  260.178313][ T7418] Buffer I/O error on dev loop7, logical block 135, lost async page write
[  260.178377][ T7418] Buffer I/O error on dev loop7, logical block 136, lost async page write
[  260.178439][ T7418] Buffer I/O error on dev loop7, logical block 137, lost async page write
[  260.527382][ T7418] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  260.527594][ T7418] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  260.527719][ T7418] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  260.527856][ T7418] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  260.527966][ T7418] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  260.528090][ T7418] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  260.528222][ T7418] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  260.528341][ T7418] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  260.528429][ T7418] ldm_validate_partition_table(): Disk read failed.
[  260.528498][ T7418] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  260.528994][ T7418] Dev loop7: unable to read RDB block 0
[  260.529554][ T7418]  loop7: unable to read partition table
[  260.529748][ T7418] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  260.691575][ T5830] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  261.218681][ T7430] netlink: 48 bytes leftover after parsing attributes in process `syz.1.318'.
[  261.225651][ T7430] GUP no longer grows the stack in syz.1.318 (7430): 200000006000-20000000a000 (200000005000)
[  261.225804][ T7430] CPU: 0 UID: 0 PID: 7430 Comm: syz.1.318 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  261.225825][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  261.225839][ T7430] Call Trace:
[  261.225851][ T7430]  <TASK>
[  261.225859][ T7430]  dump_stack_lvl+0x241/0x360
[  261.225900][ T7430]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.225923][ T7430]  ? __pfx__printk+0x10/0x10
[  261.225939][ T7430]  ? find_vma+0xfa/0x170
[  261.225972][ T7430]  __get_user_pages+0x3b46/0x4180
[  261.226026][ T7430]  ? __lock_acquire+0xad5/0xd80
[  261.226046][ T7430]  ? __pfx___get_user_pages+0x10/0x10
[  261.226063][ T7430]  ? __gup_longterm_locked+0xd86/0x1850
[  261.226082][ T7430]  ? __pfx_down_read_killable+0x10/0x10
[  261.226105][ T7430]  ? __lock_acquire+0xad5/0xd80
[  261.226139][ T7430]  __gup_longterm_locked+0xec1/0x1850
[  261.226173][ T7430]  ? try_get_folio+0xfd/0x6a0
[  261.226195][ T7430]  ? try_grab_folio_fast+0x1d6/0x500
[  261.226213][ T7430]  ? __pfx___gup_longterm_locked+0x10/0x10
[  261.226241][ T7430]  ? gup_fast_fallback+0x203f/0x2980
[  261.226262][ T7430]  gup_fast_fallback+0x2227/0x2980
[  261.226311][ T7430]  ? __pfx_gup_fast_fallback+0x10/0x10
[  261.226329][ T7430]  ? finish_task_switch+0x1e5/0x870
[  261.226348][ T7430]  ? lockdep_hardirqs_on+0x9d/0x150
[  261.226370][ T7430]  ? rcu_is_watching+0x15/0xb0
[  261.226390][ T7430]  ? trace_sched_exit_tp+0x3c/0x120
[  261.226412][ T7430]  ? __schedule+0x1b51/0x51f0
[  261.226442][ T7430]  ? __lock_acquire+0xad5/0xd80
[  261.226461][ T7430]  ? is_valid_gup_args+0x124/0x200
[  261.226483][ T7430]  get_user_pages_fast+0xd2/0x160
[  261.226504][ T7430]  ? __pfx_get_user_pages_fast+0x10/0x10
[  261.226523][ T7430]  ? rcu_is_watching+0x15/0xb0
[  261.226542][ T7430]  ? trace_contention_end+0x3c/0x120
[  261.226567][ T7430]  __iov_iter_get_pages_alloc+0x39d/0xa90
[  261.226594][ T7430]  ? schedule+0x90/0x360
[  261.226612][ T7430]  ? __se_sys_vmsplice+0x4bc/0x1430
[  261.226635][ T7430]  iov_iter_get_pages2+0xd1/0x130
[  261.226662][ T7430]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  261.226695][ T7430]  __se_sys_vmsplice+0x6c6/0x1430
[  261.226736][ T7430]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  261.226753][ T7430]  ? __pfx_futex_wait+0x10/0x10
[  261.226782][ T7430]  ? __lock_acquire+0xad5/0xd80
[  261.226858][ T7430]  ? do_syscall_64+0xb6/0x230
[  261.226881][ T7430]  do_syscall_64+0xf3/0x230
[  261.226900][ T7430]  ? clear_bhb_loop+0x45/0xa0
[  261.226920][ T7430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.226936][ T7430] RIP: 0033:0x7f13b058d169
[  261.226957][ T7430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.226971][ T7430] RSP: 002b:00007f13b14b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  261.226996][ T7430] RAX: ffffffffffffffda RBX: 00007f13b07a5fa0 RCX: 00007f13b058d169
[  261.227009][ T7430] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c
[  261.227020][ T7430] RBP: 00007f13b060e2a0 R08: 0000000000000000 R09: 0000000000000000
[  261.227030][ T7430] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  261.227040][ T7430] R13: 0000000000000000 R14: 00007f13b07a5fa0 R15: 00007ffc2ac3b3d8
[  261.227068][ T7430]  </TASK>
[  268.121413][   T56] Bluetooth: hci4: command 0x0405 tx timeout
[  268.184219][ T7475] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  268.184342][ T7475] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  270.140827][ T7500] loop7: detected capacity change from 0 to 16384
[  271.151049][ T7517] use of bytesused == 0 is deprecated and will be removed in the future,
[  271.159886][ T7517] use the actual size instead.
[  271.171017][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'.
[  271.649601][ T7503] blk_print_req_error: 14 callbacks suppressed
[  271.649622][ T7503] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  271.790126][ T7503] I/O error, dev loop7, sector 2560 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 0
[  271.871765][ T7503] buffer_io_error: 107 callbacks suppressed
[  271.871816][ T7503] Buffer I/O error on dev loop7, logical block 320, lost async page write
[  272.801501][ T7503] Buffer I/O error on dev loop7, logical block 321, lost async page write
[  273.281543][ T7503] Buffer I/O error on dev loop7, logical block 322, lost async page write
[  273.311576][ T7503] Buffer I/O error on dev loop7, logical block 323, lost async page write
[  273.685880][ T7503] Buffer I/O error on dev loop7, logical block 324, lost async page write
[  274.244400][ T7503] Buffer I/O error on dev loop7, logical block 325, lost async page write
[  274.297684][ T7503] Buffer I/O error on dev loop7, logical block 326, lost async page write
[  274.326743][ T7503] Buffer I/O error on dev loop7, logical block 327, lost async page write
[  274.383140][ T7503] Buffer I/O error on dev loop7, logical block 328, lost async page write
[  274.416142][ T7503] Buffer I/O error on dev loop7, logical block 329, lost async page write
[  274.736467][ T7543] loop9: detected capacity change from 0 to 7
[  274.764273][ T7543] ldm_validate_partition_table(): Disk read failed.
[  274.948036][ T7543] Dev loop9: unable to read RDB block 0
[  274.957095][ T7543]  loop9: unable to read partition table
[  274.966991][ T7543] loop9: partition table beyond EOD, truncated
[  274.973890][ T7543] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[  274.973890][ T7543] 
U�������) failed (rc=-5)
[  275.386325][ T7546] fuse: Bad value for 'fd'
[  280.666873][ T7563] xt_hashlimit: overflow, rate too high: 0
[  282.656821][ T7573] loop7: detected capacity change from 0 to 16384
[  282.713043][ T7579] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0
[  282.830956][ T7579] I/O error, dev loop7, sector 6912 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  282.846658][ T7579] I/O error, dev loop7, sector 7168 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  282.847336][ T7579] I/O error, dev loop7, sector 6912 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  282.847360][ T7579] buffer_io_error: 68 callbacks suppressed
[  282.847370][ T7579] Buffer I/O error on dev loop7, logical block 864, async page read
[  282.847465][ T7579] I/O error, dev loop7, sector 6920 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  282.847488][ T7579] Buffer I/O error on dev loop7, logical block 865, async page read
[  282.847580][ T7579] I/O error, dev loop7, sector 6928 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  282.847603][ T7579] Buffer I/O error on dev loop7, logical block 866, async page read
[  282.847722][ T7579] I/O error, dev loop7, sector 6936 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  282.847745][ T7579] Buffer I/O error on dev loop7, logical block 867, async page read
[  282.847835][ T7579] I/O error, dev loop7, sector 6944 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  282.847857][ T7579] Buffer I/O error on dev loop7, logical block 868, async page read
[  282.847945][ T7579] I/O error, dev loop7, sector 6952 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  282.847967][ T7579] Buffer I/O error on dev loop7, logical block 869, async page read
[  282.848056][ T7579] I/O error, dev loop7, sector 6960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  282.848078][ T7579] Buffer I/O error on dev loop7, logical block 870, async page read
[  282.848169][ T7579] Buffer I/O error on dev loop7, logical block 871, async page read
[  282.848260][ T7579] Buffer I/O error on dev loop7, logical block 872, async page read
[  282.848352][ T7579] Buffer I/O error on dev loop7, logical block 873, async page read
[  283.898606][ T7605] ip6erspan0: entered promiscuous mode
[  286.158380][ T7623] xt_hashlimit: overflow, rate too high: 0
[  288.314481][ T7632] netlink: 'syz.0.365': attribute type 11 has an invalid length.
[  288.403249][ T7647] overlayfs: failed to clone lowerpath
[  288.568614][ T7632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.365'.
[  288.682769][ T7652] overlayfs: failed to clone upperpath
[  292.224170][ T7682] loop7: detected capacity change from 0 to 16384
[  292.684640][ T7691] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  293.546815][ T7683] blk_print_req_error: 32 callbacks suppressed
[  293.546835][ T7683] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  293.623700][ T7683] buffer_io_error: 886 callbacks suppressed
[  293.623717][ T7683] Buffer I/O error on dev loop7, logical block 128, lost async page write
[  293.638550][ T7683] Buffer I/O error on dev loop7, logical block 129, lost async page write
[  293.709173][ T7683] Buffer I/O error on dev loop7, logical block 130, lost async page write
[  293.744110][ T7682] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  293.765289][ T7683] Buffer I/O error on dev loop7, logical block 131, lost async page write
[  293.798120][ T7682] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  293.815576][ T7683] Buffer I/O error on dev loop7, logical block 132, lost async page write
[  293.815653][ T7683] Buffer I/O error on dev loop7, logical block 133, lost async page write
[  293.815721][ T7683] Buffer I/O error on dev loop7, logical block 134, lost async page write
[  293.815788][ T7683] Buffer I/O error on dev loop7, logical block 135, lost async page write
[  293.815854][ T7683] Buffer I/O error on dev loop7, logical block 136, lost async page write
[  293.815945][ T7683] Buffer I/O error on dev loop7, logical block 137, lost async page write
[  293.854114][ T7706] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.381'.
[  293.854210][ T7706] netlink: zone id is out of range
[  293.854258][ T7706] netlink: zone id is out of range
[  293.854280][ T7706] netlink: zone id is out of range
[  293.854315][ T7706] netlink: zone id is out of range
[  293.854505][ T7706] netlink: zone id is out of range
[  293.907166][ T7682] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  293.907410][ T7682] I/O error, dev loop7, sector 7688 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  293.907522][ T7682] I/O error, dev loop7, sector 7696 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  293.907623][ T7682] I/O error, dev loop7, sector 7704 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  293.907720][ T7682] I/O error, dev loop7, sector 7712 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  293.907814][ T7682] I/O error, dev loop7, sector 7720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  293.907908][ T7682] I/O error, dev loop7, sector 7728 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  294.982776][ T7724] fuse: Bad value for 'fd'
[  297.630537][ T7753] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  297.737989][ T7750] sctp: failed to load transform for md5: -2
[  297.877440][ T7755] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  297.978413][ T5899] IPVS: starting estimator thread 0...
[  298.571581][ T7757] IPVS: using max 30 ests per chain, 72000 per kthread
[  302.313145][ T7804] sctp: failed to load transform for md5: -2
[  305.136294][ T7853] netlink: 116 bytes leftover after parsing attributes in process `syz.4.412'.
[  307.760466][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  307.781220][ T5878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  308.405013][ T5878] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  309.056191][ T7871] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  310.464858][ T7907] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  315.994027][ T7952] loop7: detected capacity change from 0 to 16384
[  316.843064][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  316.907536][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  318.208002][ T7952] blk_print_req_error: 31 callbacks suppressed
[  318.208024][ T7952] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  318.650403][ T7959] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  318.699948][ T7959] buffer_io_error: 854 callbacks suppressed
[  318.699975][ T7959] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  318.908077][ T7959] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  318.917725][ T7959] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  318.929405][ T7959] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  318.961392][ T7959] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  318.972036][ T7959] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  318.992118][ T7959] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  319.013652][ T7959] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  319.025640][ T7959] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  319.038439][ T7959] Buffer I/O error on dev loop7, logical block 9, lost async page write
[  319.116284][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'.
[  319.123396][ T7959] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0
[  319.166144][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[  319.255658][ T7959] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0
[  319.349707][ T7985] bridge0: port 3(syz_tun) entered blocking state
[  319.380528][ T5875] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  319.399521][ T7985] bridge0: port 3(syz_tun) entered disabled state
[  319.419734][ T5875] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  319.427858][ T7985] syz_tun: entered allmulticast mode
[  319.521032][ T7998] ntfs3: Unknown parameter '�"����a�0(ddZ��56�t@Xf���v6�}�������WV䝑qDy��63��<D3'
[  320.129711][ T7985] syz_tun: entered promiscuous mode
[  320.135421][ T5875] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  320.164358][ T7985] bridge0: port 3(syz_tun) entered blocking state
[  320.171112][ T7985] bridge0: port 3(syz_tun) entered forwarding state
[  320.978812][ T8015] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  321.004826][   T48] IPVS: starting estimator thread 0...
[  321.645656][ T8017] IPVS: using max 26 ests per chain, 62400 per kthread
[  322.306135][ T8027] vlan2: entered promiscuous mode
[  322.311493][ T8027] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  324.854927][ T8053] loop7: detected capacity change from 0 to 16384
[  325.149187][ T8053] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  325.166362][ T8055] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  325.167910][ T8053] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  325.208410][ T8055] buffer_io_error: 262 callbacks suppressed
[  325.208527][ T8055] Buffer I/O error on dev loop7, logical block 0, async page read
[  325.277742][ T8053] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  326.242243][ T8053] Buffer I/O error on dev loop7, logical block 384, async page read
[  326.270449][ T8053] I/O error, dev loop7, sector 3080 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  326.439269][ T8055] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  326.473566][ T8055] Buffer I/O error on dev loop7, logical block 0, async page read
[  326.512936][ T8053] Buffer I/O error on dev loop7, logical block 385, async page read
[  326.544668][ T8069] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  326.902729][ T8055] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  326.913370][ T8053] I/O error, dev loop7, sector 3088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  326.938863][ T8064] netlink: 316 bytes leftover after parsing attributes in process `syz.2.460'.
[  327.033338][ T8053] Buffer I/O error on dev loop7, logical block 386, async page read
[  327.082737][ T8055] Buffer I/O error on dev loop7, logical block 0, async page read
[  327.133691][ T8055] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.161420][ T8053] I/O error, dev loop7, sector 3096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  327.170843][ T8053] Buffer I/O error on dev loop7, logical block 387, async page read
[  327.252860][ T8055] Buffer I/O error on dev loop7, logical block 0, async page read
[  327.271819][ T8053] Buffer I/O error on dev loop7, logical block 388, async page read
[  327.316650][ T8055] Buffer I/O error on dev loop7, logical block 0, async page read
[  328.181018][ T8055] ldm_validate_partition_table(): Disk read failed.
[  328.292172][ T8055] Dev loop7: unable to read RDB block 0
[  329.023878][ T8055]  loop7: unable to read partition table
[  329.029809][ T8055] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  329.607072][ T8091] netlink: 'syz.3.465': attribute type 3 has an invalid length.
[  329.615626][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'.
[  331.833688][ T5878] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  331.918278][ T8113] overlayfs: failed to clone upperpath
[  332.023368][ T5878] usb 1-1: Using ep0 maxpacket: 16
[  332.198943][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0
[  332.246404][ T5878] usb 1-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.00
[  332.461358][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.916102][ T5878] usb 1-1: config 0 descriptor??
[  332.926081][ T5878] usb 1-1: can't set config #0, error -71
[  332.964711][ T5878] usb 1-1: USB disconnect, device number 2
[  334.801792][ T8140] pim6reg: entered allmulticast mode
[  335.231507][ T8131] pim6reg: left allmulticast mode
[  335.551097][ T8145] program syz.4.475 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.854279][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.479'.
[  342.218257][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'.
[  342.296200][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'.
[  342.351824][ T6841] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  342.988439][ T8203] fuse: Bad value for 'fd'
[  343.343725][ T6841] usb 5-1: device descriptor read/64, error -71
[  343.681230][ T6841] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  344.995182][ T6841] usb 5-1: device descriptor read/64, error -71
[  345.211251][ T6841] usb usb5-port1: attempt power cycle
[  346.535875][ T8227] netlink: 'syz.1.497': attribute type 10 has an invalid length.
[  346.551323][ T8227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.497'.
[  346.566636][ T8227] bridge0: port 4(veth1_vlan) entered blocking state
[  347.332010][ T8227] bridge0: port 4(veth1_vlan) entered disabled state
[  347.431795][ T8227] veth1_vlan: entered allmulticast mode
[  347.462387][ T8227] veth1_vlan: left allmulticast mode
[  347.492561][ T8227] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  350.890506][ T8279] fuse: Bad value for 'fd'
[  351.273522][ T8283] Driver unsupported XDP return value 0 on prog  (id 191) dev N/A, expect packet loss!
[  358.504143][ T8346] overlayfs: failed to clone upperpath
[  360.263093][ T8359] sctp: failed to load transform for md5: -2
[  363.444781][ T8402] netlink: 'syz.0.539': attribute type 21 has an invalid length.
[  364.060218][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.540'.
[  364.543275][ T8420] Cannot find del_set index 4 as target
[  364.569619][ T8420] xt_CT: You must specify a L4 protocol and not use inversions on it
[  366.304192][ T8434] sctp: failed to load transform for md5: -2
[  367.591994][ T8451] ubi31: attaching mtd0
[  367.609416][ T8451] ubi31: scanning is finished
[  367.614274][ T8451] ubi31: empty MTD device detected
[  368.073692][ T8457] overlayfs: failed to clone upperpath
[  368.212203][ T8451] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  368.221022][ T8451] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  368.228403][ T8451] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  368.235489][ T8451] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  368.243095][ T8451] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  368.249948][ T8451] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  368.258074][ T8451] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2433868074
[  368.268480][ T8451] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  368.470162][ T8461] ubi31: background thread "ubi_bgt31d" started, PID 8461
[  369.233106][ T8468] virtio-fs: tag <(null)> not found
[  372.206374][ T6841] IPVS: starting estimator thread 0...
[  372.801323][ T8497] IPVS: using max 31 ests per chain, 74400 per kthread
[  373.426528][ T8510] cgroup: none used incorrectly
[  374.916110][ T8506] sctp: failed to load transform for md5: -4
[  375.769174][ T8521] netlink: 124 bytes leftover after parsing attributes in process `syz.3.564'.
[  375.779292][ T8521] netlink: 80 bytes leftover after parsing attributes in process `syz.3.564'.
[  376.565453][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'.
[  377.444523][ T8543] xt_hashlimit: overflow, rate too high: 0
[  377.597372][ T8545] loop7: detected capacity change from 0 to 16384
[  378.326885][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.334663][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  378.356025][ T8545] blk_print_req_error: 42 callbacks suppressed
[  378.356042][ T8545] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  378.376104][ T8547] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  378.379925][ T8545] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  378.798433][ T8547] buffer_io_error: 135 callbacks suppressed
[  378.798713][ T8547] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  379.204089][ T8545] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  379.204112][ T8545] Buffer I/O error on dev loop7, logical block 288, async page read
[  379.204173][ T8545] I/O error, dev loop7, sector 2312 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  379.204186][ T8545] Buffer I/O error on dev loop7, logical block 289, async page read
[  379.204236][ T8545] I/O error, dev loop7, sector 2320 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  379.204248][ T8545] Buffer I/O error on dev loop7, logical block 290, async page read
[  379.204297][ T8545] I/O error, dev loop7, sector 2328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  379.204309][ T8545] Buffer I/O error on dev loop7, logical block 291, async page read
[  379.204358][ T8545] I/O error, dev loop7, sector 2336 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  379.204370][ T8545] Buffer I/O error on dev loop7, logical block 292, async page read
[  379.204419][ T8545] I/O error, dev loop7, sector 2344 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  379.204430][ T8545] Buffer I/O error on dev loop7, logical block 293, async page read
[  379.204479][ T8545] I/O error, dev loop7, sector 2352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  379.204498][ T8545] Buffer I/O error on dev loop7, logical block 294, async page read
[  379.204549][ T8545] Buffer I/O error on dev loop7, logical block 295, async page read
[  379.204601][ T8545] Buffer I/O error on dev loop7, logical block 296, async page read
[  385.588512][ T8602] fuse: Bad value for 'fd'
[  386.380631][ T8605] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  387.229974][ T8618] overlayfs: failed to clone upperpath
[  390.408876][ T8642] xt_bpf: check failed: parse error
[  391.657315][ T8651] fuse: Bad value for 'fd'
[  391.731078][ T8654] overlayfs: failed to clone upperpath
[  392.278558][ T8664] overlayfs: failed to clone upperpath
[  396.021043][ T8696] overlayfs: failed to clone upperpath
[  396.996027][ T8702] 9pnet_virtio: no channels available for device 127.0.0.1
[  398.715777][ T8702] xt_l2tp: invalid flags combination: 4
[  399.310433][ T8717] xt_hashlimit: overflow, rate too high: 0
[  399.574953][ T8720] xt_hashlimit: overflow, rate too high: 0
[  402.232516][ T8739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.756774][ T8746] netlink: 'syz.1.623': attribute type 6 has an invalid length.
[  403.692778][ T8767] 9pnet_fd: Insufficient options for proto=fd
[  406.377574][ T8788] overlayfs: failed to clone upperpath
[  407.315130][ T8798] Invalid ELF header magic: != ELF
[  409.885973][ T8812] netlink: 'syz.4.640': attribute type 11 has an invalid length.
[  409.896288][ T8812] netlink: 224 bytes leftover after parsing attributes in process `syz.4.640'.
[  411.926705][ T8843] netlink: 48 bytes leftover after parsing attributes in process `syz.3.647'.
[  414.418314][ T8872] loop9: detected capacity change from 0 to 7
[  414.427042][ T8872] buffer_io_error: 310 callbacks suppressed
[  414.433091][ T8872] Buffer I/O error on dev loop9, logical block 0, async page read
[  414.442092][ T8872] Buffer I/O error on dev loop9, logical block 0, async page read
[  414.451236][ T8872] Buffer I/O error on dev loop9, logical block 0, async page read
[  414.460237][ T8872] Buffer I/O error on dev loop9, logical block 0, async page read
[  414.469150][ T8872] Buffer I/O error on dev loop9, logical block 0, async page read
[  414.478007][ T8872] Buffer I/O error on dev loop9, logical block 0, async page read
[  414.486853][ T8872] Buffer I/O error on dev loop9, logical block 0, async page read
[  414.495237][ T8872] ldm_validate_partition_table(): Disk read failed.
[  414.503728][ T8872] Buffer I/O error on dev loop9, logical block 0, async page read
[  414.512630][ T8872] Buffer I/O error on dev loop9, logical block 0, async page read
[  414.521208][ T8872] Buffer I/O error on dev loop9, logical block 0, async page read
[  414.530667][ T8872] Dev loop9: unable to read RDB block 0
[  414.539095][ T8872]  loop9: unable to read partition table
[  414.546580][ T8872] loop9: partition table beyond EOD, truncated
[  414.553029][ T8872] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dƤ����ݡ�����
[  414.553029][ T8872] 
U�������) failed (rc=-5)
[  415.075546][ T8874] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  415.509469][ T8882] tipc: New replicast peer: 255.255.255.255
[  415.518125][ T8882] tipc: Enabled bearer <udp:syz2>, priority 10
[  419.944503][ T8925] program syz.0.662 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  420.937969][ T8934] loop7: detected capacity change from 0 to 16384
[  421.287192][ T8938] blk_print_req_error: 27 callbacks suppressed
[  421.287212][ T8938] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  421.312228][ T8934] I/O error, dev loop7, sector 5888 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  421.313295][ T8934] I/O error, dev loop7, sector 6144 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  421.324287][ T8934] I/O error, dev loop7, sector 5888 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  421.324318][ T8934] buffer_io_error: 4 callbacks suppressed
[  421.324328][ T8934] Buffer I/O error on dev loop7, logical block 736, async page read
[  421.324426][ T8934] I/O error, dev loop7, sector 5896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  421.324448][ T8934] Buffer I/O error on dev loop7, logical block 737, async page read
[  421.324538][ T8934] I/O error, dev loop7, sector 5904 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  421.324559][ T8934] Buffer I/O error on dev loop7, logical block 738, async page read
[  421.324648][ T8934] I/O error, dev loop7, sector 5912 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  421.324669][ T8934] Buffer I/O error on dev loop7, logical block 739, async page read
[  421.324830][ T8934] I/O error, dev loop7, sector 5920 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  421.324851][ T8934] Buffer I/O error on dev loop7, logical block 740, async page read
[  421.324944][ T8934] I/O error, dev loop7, sector 5928 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  421.324966][ T8934] Buffer I/O error on dev loop7, logical block 741, async page read
[  421.325056][ T8934] I/O error, dev loop7, sector 5936 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  421.325077][ T8934] Buffer I/O error on dev loop7, logical block 742, async page read
[  421.325173][ T8934] Buffer I/O error on dev loop7, logical block 743, async page read
[  421.325265][ T8934] Buffer I/O error on dev loop7, logical block 744, async page read
[  421.325361][ T8934] Buffer I/O error on dev loop7, logical block 745, async page read
[  423.127186][ T8964] overlayfs: failed to clone upperpath
[  426.688543][ T8988] netlink: 'syz.4.680': attribute type 11 has an invalid length.
[  427.467690][ T8988] netlink: 224 bytes leftover after parsing attributes in process `syz.4.680'.
[  429.766481][ T9019] block device autoloading is deprecated and will be removed.
[  429.777065][ T9019] bio_check_eod: 2 callbacks suppressed
[  429.777099][ T9019] syz.4.684: attempt to access beyond end of device
[  429.777099][ T9019] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  431.666194][ T9037] xt_hashlimit: max too large, truncated to 1048576
[  433.450213][ T9053] netlink: 'syz.2.691': attribute type 3 has an invalid length.
[  433.458063][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'.
[  434.311969][ T9062] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  439.513047][ T9098] input: syz1 as /devices/virtual/input/input7
[  439.567855][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  439.578016][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  440.117371][ T9110] netlink: 43 bytes leftover after parsing attributes in process `syz.2.701'.
[  440.127785][ T9110] tipc: Enabled bearer <eth:vlan0>, priority 10
[  445.430325][ T9142] atomic_op ffff88806116d998 conn xmit_atomic 0000000000000000
[  446.811058][ T9150] fuse: Bad value for 'fd'
[  449.492623][ T9176] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  451.024277][ T9185] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  456.855502][ T9227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.728'.
[  457.418968][ T9231] fuse: Bad value for 'fd'
[  457.479550][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.728'.
[  457.622050][ T9227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.728'.
[  457.692405][ T9227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.728'.
[  459.279669][ T9249] overlayfs: failed to resolve './file0': -2
[  460.146850][ T9246] xt_hashlimit: overflow, rate too high: 0
[  461.274197][ T9267] Invalid ELF header magic: != ELF
[  464.440556][ T9305] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  465.380603][ T9313] overlayfs: failed to resolve './file0': -2
[  471.012739][ T9364] overlayfs: failed to resolve './file0': -2
[  473.880393][ T9387] ubi31: detaching mtd0
[  473.939244][ T9387] ubi31: mtd0 is detached
[  475.313481][ T9435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.767'.
[  475.322579][ T9435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.767'.
[  475.332460][ T9435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.767'.
[  478.449407][ T9475] overlayfs: failed to resolve './file1': -2
[  480.547932][ T9489] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  483.596824][ T9530] Bluetooth: MGMT ver 1.23
[  484.222947][ T9531] loop7: detected capacity change from 0 to 16384
[  484.699145][ T9535] overlayfs: failed to clone lowerpath
[  484.707145][ T9534] blk_print_req_error: 31 callbacks suppressed
[  484.707163][ T9534] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 96 prio class 0
[  484.724065][ T9534] buffer_io_error: 758 callbacks suppressed
[  484.724080][ T9534] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  484.730609][ T9531] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  484.738646][ T9534] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  484.765143][ T9534] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  484.904973][ T9534] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  484.922358][ T9534] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  484.933560][ T9534] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  484.933638][ T9534] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  484.933700][ T9534] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  484.933773][ T9534] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  484.933861][ T9534] Buffer I/O error on dev loop7, logical block 9, lost async page write
[  484.935423][ T9531] I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  484.936086][ T9531] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  484.936188][ T9531] I/O error, dev loop7, sector 1544 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  484.936288][ T9531] I/O error, dev loop7, sector 1552 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  484.936384][ T9531] I/O error, dev loop7, sector 1560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  484.936481][ T9531] I/O error, dev loop7, sector 1568 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  484.936576][ T9531] I/O error, dev loop7, sector 1576 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  484.936667][ T9531] I/O error, dev loop7, sector 1584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  484.943218][ T9534] ldm_validate_partition_table(): Disk read failed.
[  484.943606][ T9534] Dev loop7: unable to read RDB block 0
[  484.944143][ T9534]  loop7: unable to read partition table
[  484.944335][ T9534] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  485.037618][ T9546] befs: (nullb0): No write support. Marking filesystem read-only
[  485.040427][ T9546] befs: (nullb0): invalid magic header
[  485.818530][ T9551] syz.1.791 uses obsolete (PF_INET,SOCK_PACKET)
[  486.689242][ T9563] overlayfs: failed to resolve './file1': -2
[  489.182121][ T9588] loop7: detected capacity change from 0 to 16384
[  490.269535][ T9598] blk_print_req_error: 43 callbacks suppressed
[  490.269554][ T9598] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  490.335350][ T9606] syz_tun: left allmulticast mode
[  490.340748][ T9606] syz_tun: left promiscuous mode
[  490.347325][ T9588] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  490.455390][ T9606] bridge0: port 3(syz_tun) entered disabled state
[  490.469188][ T9588] I/O error, dev loop7, sector 9216 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  490.484424][ T9588] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  490.516432][ T9598] buffer_io_error: 231 callbacks suppressed
[  490.516450][ T9598] Buffer I/O error on dev loop7, logical block 256, lost async page write
[  490.550372][ T9588] Buffer I/O error on dev loop7, logical block 1120, async page read
[  491.364405][ T9598] Buffer I/O error on dev loop7, logical block 257, lost async page write
[  491.388361][ T9588] I/O error, dev loop7, sector 8968 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  491.404798][ T9598] Buffer I/O error on dev loop7, logical block 258, lost async page write
[  491.589202][ T9598] Buffer I/O error on dev loop7, logical block 259, lost async page write
[  491.822663][ T9588] Buffer I/O error on dev loop7, logical block 1121, async page read
[  491.919882][ T9598] Buffer I/O error on dev loop7, logical block 260, lost async page write
[  491.929650][ T9598] Buffer I/O error on dev loop7, logical block 261, lost async page write
[  491.939178][ T9598] Buffer I/O error on dev loop7, logical block 262, lost async page write
[  491.947947][ T9598] Buffer I/O error on dev loop7, logical block 263, lost async page write
[  491.976099][ T9588] I/O error, dev loop7, sector 8976 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  491.985036][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'.
[  492.020297][ T9598] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  492.185807][ T9588] I/O error, dev loop7, sector 8984 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  492.196210][ T9588] I/O error, dev loop7, sector 8992 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  492.206010][ T9588] I/O error, dev loop7, sector 9000 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  493.271089][ T9606] bridge_slave_0: left allmulticast mode
[  494.259852][ T9606] bridge_slave_0: left promiscuous mode
[  494.305929][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.378884][ T9606] bridge_slave_1: left allmulticast mode
[  494.396218][ T9606] bridge_slave_1: left promiscuous mode
[  494.561961][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.520142][ T9606] bond0: (slave bond_slave_0): Releasing backup interface
[  495.612699][ T9606] bond0: (slave bond_slave_1): Releasing backup interface
[  495.662541][ T9652] loop7: detected capacity change from 0 to 16384
[  495.712935][ T9606] team0: Port device team_slave_0 removed
[  495.743943][ T9606] team0: Port device team_slave_1 removed
[  495.750510][ T9606] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.761003][ T9606] batman_adv: batadv0: Removing interface: batadv_slave_0
[  495.769620][ T9606] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  495.778866][ T9606] batman_adv: batadv0: Removing interface: batadv_slave_1
[  495.802263][ T9652] blk_print_req_error: 31 callbacks suppressed
[  495.802281][ T9652] I/O error, dev loop7, sector 5376 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  495.839496][ T9609] team0: Mode changed to "loadbalance"
[  495.846803][ T9616] vlan0: entered promiscuous mode
[  495.864721][ T9616] team0: Port device vlan0 added
[  495.880769][ T9653] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 0
[  495.880801][ T9653] buffer_io_error: 886 callbacks suppressed
[  495.880812][ T9653] Buffer I/O error on dev loop7, logical block 512, lost async page write
[  495.880908][ T9653] Buffer I/O error on dev loop7, logical block 513, lost async page write
[  495.880971][ T9653] Buffer I/O error on dev loop7, logical block 514, lost async page write
[  495.881034][ T9653] Buffer I/O error on dev loop7, logical block 515, lost async page write
[  495.881096][ T9653] Buffer I/O error on dev loop7, logical block 516, lost async page write
[  495.888611][ T9653] Buffer I/O error on dev loop7, logical block 517, lost async page write
[  495.888682][ T9653] Buffer I/O error on dev loop7, logical block 518, lost async page write
[  495.888744][ T9653] Buffer I/O error on dev loop7, logical block 519, lost async page write
[  495.888812][ T9653] Buffer I/O error on dev loop7, logical block 520, lost async page write
[  495.888896][ T9653] Buffer I/O error on dev loop7, logical block 521, lost async page write
[  495.920225][ T9653] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  495.920356][ T9653] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  495.920466][ T9653] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  495.920578][ T9653] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  495.920688][ T9653] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  495.920915][ T9653] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  495.921041][ T9653] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  495.929623][ T9653] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  495.929795][ T9653] ldm_validate_partition_table(): Disk read failed.
[  495.930240][ T9653] Dev loop7: unable to read RDB block 0
[  495.939377][ T9653]  loop7: unable to read partition table
[  495.939576][ T9653] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  498.286437][ T9622] team0 (unregistering): Port device vlan0 removed
[  499.596169][ T9687] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  500.625944][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  500.625961][   T30] audit: type=1326 audit(2000000068.800:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  500.756727][   T30] audit: type=1326 audit(2000000068.860:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  500.832360][   T30] audit: type=1326 audit(2000000068.860:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  501.088166][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  501.102673][   T30] audit: type=1326 audit(2000000068.860:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  501.111707][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  501.382093][ T9715] netlink: 'syz.3.827': attribute type 11 has an invalid length.
[  502.890101][ T9720] fuse: Bad value for 'fd'
[  502.946332][   T30] audit: type=1326 audit(2000000068.860:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  503.247045][   T30] audit: type=1326 audit(2000000068.860:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  503.873296][   T30] audit: type=1326 audit(2000000068.860:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  503.920684][   T30] audit: type=1326 audit(2000000068.860:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  503.942001][    C1] vkms_vblank_simulate: vblank timer overrun
[  504.130997][   T30] audit: type=1326 audit(2000000068.870:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  504.478412][   T30] audit: type=1326 audit(2000000068.870:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9692 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  507.051316][ T9753] lo speed is unknown, defaulting to 1000
[  507.057212][ T9753] lo speed is unknown, defaulting to 1000
[  507.063856][ T9753] lo speed is unknown, defaulting to 1000
[  507.083011][ T9753] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  507.203685][ T9753] lo speed is unknown, defaulting to 1000
[  507.211657][ T9753] lo speed is unknown, defaulting to 1000
[  507.234021][ T9753] lo speed is unknown, defaulting to 1000
[  507.241992][ T9753] lo speed is unknown, defaulting to 1000
[  507.249559][ T9753] lo speed is unknown, defaulting to 1000
[  507.481606][ T9743] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  507.495622][ T9743] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  507.734414][ T9743] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  507.743337][ T9743] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  508.291795][   T56] Bluetooth: hci2: command 0x0c1a tx timeout
[  508.371987][ T9743] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  508.400103][ T9743] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  509.829175][   T56] Bluetooth: hci3: command 0x0406 tx timeout
[  510.900187][   T56] Bluetooth: hci2: command 0x0c1a tx timeout
[  510.906368][   T56] Bluetooth: hci4: command 0x0405 tx timeout
[  511.288139][ T9804] overlayfs: failed to resolve './file1': -2
[  512.191166][ T5830] Bluetooth: hci3: command 0x0406 tx timeout
[  512.951415][ T5830] Bluetooth: hci4: command 0x0405 tx timeout
[  516.504858][ T9851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.858'.
[  516.516321][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.858'.
[  516.526607][ T9851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.858'.
[  516.543461][ T9851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.858'.
[  516.911686][ T9860] overlayfs: failed to resolve './file1': -2
[  517.229507][ T9864] loop7: detected capacity change from 0 to 16384
[  517.941599][ T9865] blk_print_req_error: 43 callbacks suppressed
[  517.942139][ T9865] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  518.136725][ T9864] I/O error, dev loop7, sector 5888 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  518.147688][ T9864] I/O error, dev loop7, sector 6144 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  518.158210][ T9864] I/O error, dev loop7, sector 5888 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  518.174179][ T9865] buffer_io_error: 199 callbacks suppressed
[  518.174193][ T9865] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  518.181875][ T9864] Buffer I/O error on dev loop7, logical block 736, async page read
[  518.435723][ T9865] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  518.435794][ T9865] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  518.435855][ T9865] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  518.435927][ T9865] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  518.435992][ T9865] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  518.436056][ T9865] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  518.436122][ T9865] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  518.436197][ T9865] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  518.941406][ T9864] I/O error, dev loop7, sector 5896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  518.941525][ T9864] I/O error, dev loop7, sector 5904 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  518.941626][ T9864] I/O error, dev loop7, sector 5912 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  518.941725][ T9864] I/O error, dev loop7, sector 5920 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  518.941822][ T9864] I/O error, dev loop7, sector 5928 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  518.941946][ T9864] I/O error, dev loop7, sector 5936 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  520.846999][ T9897] overlayfs: failed to clone upperpath
[  522.124781][ T9911] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  523.241373][ T9865] buffer_io_error: 738 callbacks suppressed
[  523.241393][ T9865] Buffer I/O error on dev loop7, logical block 716, lost async page write
[  523.411522][ T9865] Buffer I/O error on dev loop7, logical block 717, lost async page write
[  523.472345][ T9865] Buffer I/O error on dev loop7, logical block 718, lost async page write
[  523.551361][ T9865] Buffer I/O error on dev loop7, logical block 719, lost async page write
[  523.562109][ T9865] Buffer I/O error on dev loop7, logical block 720, lost async page write
[  523.570895][ T9865] Buffer I/O error on dev loop7, logical block 721, lost async page write
[  523.591398][ T9865] Buffer I/O error on dev loop7, logical block 722, lost async page write
[  523.641313][ T9865] Buffer I/O error on dev loop7, logical block 723, lost async page write
[  523.684527][ T9865] Buffer I/O error on dev loop7, logical block 724, lost async page write
[  523.737590][ T9865] Buffer I/O error on dev loop7, logical block 725, lost async page write
[  525.914978][ T9945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.881'.
[  525.929546][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'.
[  525.938561][ T9945] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  530.421528][ T9967] loop7: detected capacity change from 0 to 16384
[  530.882581][ T9978] fuse: Bad value for 'fd'
[  531.688486][ T9974] blk_print_req_error: 31 callbacks suppressed
[  531.688500][ T9974] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  531.731260][ T9974] buffer_io_error: 10 callbacks suppressed
[  531.731278][ T9974] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  531.731363][ T9974] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  531.731430][ T9974] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  531.731497][ T9974] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  531.731578][ T9974] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  531.731647][ T9974] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  531.731709][ T9974] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  531.731771][ T9974] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  531.731853][ T9974] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  531.731920][ T9974] Buffer I/O error on dev loop7, logical block 9, lost async page write
[  531.742989][ T9984] netlink: 'syz.1.896': attribute type 25 has an invalid length.
[  531.777744][ T9974] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  531.832083][ T9967] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  531.832999][ T9967] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  531.833607][ T9967] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  531.833713][ T9967] I/O error, dev loop7, sector 4616 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  531.833841][ T9967] I/O error, dev loop7, sector 4624 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  531.833941][ T9967] I/O error, dev loop7, sector 4632 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  531.834040][ T9967] I/O error, dev loop7, sector 4640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  531.834140][ T9967] I/O error, dev loop7, sector 4648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  532.031060][ T9991] siw: device registration error -23
[  532.130644][ T9974] ldm_validate_partition_table(): Disk read failed.
[  532.131017][ T9974] Dev loop7: unable to read RDB block 0
[  532.133185][ T9974]  loop7: unable to read partition table
[  532.133438][ T9974] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  533.423968][ T9988] ttynull ttynull: ldisc open failed (-12), clearing slot 0
[  533.461046][ T9999] overlayfs: failed to resolve './file1': -2
[  534.588093][T10014] siw: device registration error -23
[  535.243810][T10022] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 48808 - 0
[  535.254660][T10022] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 48808 - 0
[  535.269719][T10022] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 48808 - 0
[  535.283326][T10022] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 48808 - 0
[  535.293529][T10023] fuse: Bad value for 'fd'
[  535.315081][T10022] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 58796 - 0
[  535.411351][T10022] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 58796 - 0
[  535.420349][T10022] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 58796 - 0
[  535.434138][T10022] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 58796 - 0
[  535.455694][T10022] geneve2: entered promiscuous mode
[  535.460998][T10022] geneve2: entered allmulticast mode
[  538.161851][T10042] netlink: 'syz.3.907': attribute type 10 has an invalid length.
[  539.260876][T10042] hsr0: entered promiscuous mode
[  540.186967][T10054] loop7: detected capacity change from 0 to 16384
[  540.216286][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'.
[  540.726888][T10042] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  540.750624][ T5830] Bluetooth: hci3: unexpected event for opcode 0x1005
[  540.765996][T10054] blk_print_req_error: 46 callbacks suppressed
[  540.766014][T10054] I/O error, dev loop7, sector 5888 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  540.915882][T10042] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  540.923145][T10058] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  540.944487][T10042] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  541.035203][T10067] bridge0: port 3(hsr_slave_1) entered blocking state
[  541.042523][T10067] bridge0: port 3(hsr_slave_1) entered disabled state
[  541.051210][T10067] hsr_slave_1: entered allmulticast mode
[  541.076166][T10067] hsr_slave_1: left allmulticast mode
[  542.172822][T10054] I/O error, dev loop7, sector 6144 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  542.211422][T10058] buffer_io_error: 615 callbacks suppressed
[  542.211439][T10058] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  542.226655][T10054] I/O error, dev loop7, sector 5888 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  542.227201][T10058] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  542.245286][T10058] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  542.254460][T10058] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  542.263421][T10058] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  542.271958][T10058] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  542.280508][T10058] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  542.289496][T10058] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  542.313711][T10054] Buffer I/O error on dev loop7, logical block 736, async page read
[  542.313847][T10054] I/O error, dev loop7, sector 5896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  542.313871][T10054] Buffer I/O error on dev loop7, logical block 737, async page read
[  542.313970][T10054] I/O error, dev loop7, sector 5904 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  542.314069][T10054] I/O error, dev loop7, sector 5912 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  542.314167][T10054] I/O error, dev loop7, sector 5920 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  542.314268][T10054] I/O error, dev loop7, sector 5928 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  542.314366][T10054] I/O error, dev loop7, sector 5936 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  542.315241][T10077] netlink: 'syz.1.916': attribute type 5 has an invalid length.
[  545.641314][   T56] Bluetooth: hci4: command 0x0405 tx timeout
[  546.520184][T10090] overlayfs: failed to clone upperpath
[  546.846092][T10058] blk_print_req_error: 27 callbacks suppressed
[  546.846112][T10058] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  547.793543][T10058] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  547.803664][T10058] buffer_io_error: 534 callbacks suppressed
[  547.803680][T10058] Buffer I/O error on dev loop7, logical block 512, lost async page write
[  547.919743][T10058] Buffer I/O error on dev loop7, logical block 513, lost async page write
[  547.929308][T10058] Buffer I/O error on dev loop7, logical block 514, lost async page write
[  547.962183][T10058] Buffer I/O error on dev loop7, logical block 515, lost async page write
[  548.107695][T10104] overlayfs: failed to clone upperpath
[  548.133318][T10105] ALSA: mixer_oss: invalid OSS volume 'TREBL'
[  548.965229][T10058] Buffer I/O error on dev loop7, logical block 516, lost async page write
[  549.000032][T10058] Buffer I/O error on dev loop7, logical block 517, lost async page write
[  549.012280][T10058] Buffer I/O error on dev loop7, logical block 518, lost async page write
[  549.127901][T10058] Buffer I/O error on dev loop7, logical block 519, lost async page write
[  549.136636][T10058] Buffer I/O error on dev loop7, logical block 520, lost async page write
[  549.146816][T10058] Buffer I/O error on dev loop7, logical block 521, lost async page write
[  549.205919][T10058] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0
[  549.472822][T10058] I/O error, dev loop7, sector 5376 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 0
[  551.592444][T10125] loop7: detected capacity change from 0 to 16384
[  552.016502][T10130] overlayfs: failed to resolve './file1': -2
[  552.387527][   T56] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  552.414121][T10128] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  552.529170][T10128] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0
[  552.585653][T10125] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  552.606822][T10128] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  552.642670][T10125] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  552.653418][T10125] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  552.664312][T10125] I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  552.674126][T10125] I/O error, dev loop7, sector 2064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  552.694915][T10125] I/O error, dev loop7, sector 2072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  552.695034][T10125] I/O error, dev loop7, sector 2080 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  552.713443][T10128] ldm_validate_partition_table(): Disk read failed.
[  552.718469][T10128] Dev loop7: unable to read RDB block 0
[  552.719054][T10128]  loop7: unable to read partition table
[  552.719252][T10128] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  554.063503][T10120] buffer_io_error: 423 callbacks suppressed
[  554.063522][T10120] Buffer I/O error on dev loop7, logical block 160, lost async page write
[  554.063594][T10120] Buffer I/O error on dev loop7, logical block 161, lost async page write
[  554.063655][T10120] Buffer I/O error on dev loop7, logical block 162, lost async page write
[  554.063714][T10120] Buffer I/O error on dev loop7, logical block 163, lost async page write
[  554.063780][T10120] Buffer I/O error on dev loop7, logical block 164, lost async page write
[  554.063861][T10120] Buffer I/O error on dev loop7, logical block 165, lost async page write
[  554.063921][T10120] Buffer I/O error on dev loop7, logical block 166, lost async page write
[  554.063981][T10120] Buffer I/O error on dev loop7, logical block 167, lost async page write
[  554.064040][T10120] Buffer I/O error on dev loop7, logical block 168, lost async page write
[  554.064099][T10120] Buffer I/O error on dev loop7, logical block 169, lost async page write
[  554.547898][T10154] overlayfs: failed to clone upperpath
[  555.271677][T10156] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  558.490121][T10188] netlink: 'syz.1.944': attribute type 10 has an invalid length.
[  558.527639][T10188] batadv0: left allmulticast mode
[  558.646858][T10188] batadv0: left promiscuous mode
[  558.772815][T10188] bridge0: port 3(batadv0) entered disabled state
[  558.876654][T10188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  559.010275][T10188] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  561.587108][T10217] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  561.743266][T10223] tipc: Started in network mode
[  561.748305][T10223] tipc: Node identity 4, cluster identity 4711
[  561.757100][T10223] tipc: Node number set to 4
[  562.531878][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  562.538300][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  566.262217][T10257] Cannot find add_set index 0 as target
[  567.525569][T10266] netlink: 48 bytes leftover after parsing attributes in process `syz.1.964'.
[  568.680728][T10273] netlink: 'syz.0.965': attribute type 7 has an invalid length.
[  569.249857][T10273] netlink: 'syz.0.965': attribute type 5 has an invalid length.
[  569.257786][T10273] netlink: 17 bytes leftover after parsing attributes in process `syz.0.965'.
[  572.127241][T10289] ceph: No mds server is up or the cluster is laggy
[  572.312067][ T5878] libceph: connect (1)[c::]:6789 error -101
[  572.318696][ T5878] libceph: mon0 (1)[c::]:6789 connect error
[  573.467760][ T5878] libceph: connect (1)[c::]:6789 error -101
[  573.474473][ T5878] libceph: mon0 (1)[c::]:6789 connect error
[  574.365441][T10320] overlayfs: failed to clone upperpath
[  575.189780][T10324] fuse: Bad value for 'fd'
[  576.980101][T10342] x_tables: duplicate entry at hook 2
[  578.043174][T10351] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  579.005235][T10356] QAT: failed to copy from user.
[  579.521800][T10358] Invalid option length (1048055) for dns_resolver key
[  581.406597][T10377] fuse: Bad value for 'fd'
[  581.831236][   T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  582.944873][   T60] usb 5-1: Using ep0 maxpacket: 8
[  583.891739][   T60] usb 5-1: device descriptor read/all, error -71
[  583.946674][T10401] loop7: detected capacity change from 0 to 16384
[  585.142712][T10401] blk_print_req_error: 44 callbacks suppressed
[  585.142733][T10401] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  585.144237][T10401] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  585.144926][T10401] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  585.144951][T10401] buffer_io_error: 86 callbacks suppressed
[  585.144961][T10401] Buffer I/O error on dev loop7, logical block 544, async page read
[  585.145056][T10401] I/O error, dev loop7, sector 4360 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  585.145078][T10401] Buffer I/O error on dev loop7, logical block 545, async page read
[  585.145168][T10401] I/O error, dev loop7, sector 4368 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  585.145190][T10401] Buffer I/O error on dev loop7, logical block 546, async page read
[  585.145279][T10401] I/O error, dev loop7, sector 4376 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  585.145301][T10401] Buffer I/O error on dev loop7, logical block 547, async page read
[  585.145398][T10401] I/O error, dev loop7, sector 4384 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  585.145420][T10401] Buffer I/O error on dev loop7, logical block 548, async page read
[  585.145509][T10401] I/O error, dev loop7, sector 4392 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  585.145530][T10401] Buffer I/O error on dev loop7, logical block 549, async page read
[  585.145641][T10401] I/O error, dev loop7, sector 4400 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  585.145662][T10401] Buffer I/O error on dev loop7, logical block 550, async page read
[  585.265359][T10407] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  585.265393][T10407] Buffer I/O error on dev loop7, logical block 0, async page read
[  585.265510][T10407] Buffer I/O error on dev loop7, logical block 0, async page read
[  585.265898][T10407] Buffer I/O error on dev loop7, logical block 0, async page read
[  585.266453][T10407] ldm_validate_partition_table(): Disk read failed.
[  585.266848][T10407] Dev loop7: unable to read RDB block 0
[  585.267369][T10407]  loop7: unable to read partition table
[  585.267559][T10407] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  585.480505][T10425] overlayfs: failed to clone upperpath
[  586.215916][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  586.215934][   T30] audit: type=1326 audit(2000000154.080:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  586.215984][   T30] audit: type=1326 audit(2000000154.080:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  586.216022][   T30] audit: type=1326 audit(2000000154.080:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb1698bad0 code=0x7ffc0000
[  586.216060][   T30] audit: type=1326 audit(2000000154.080:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  586.216098][   T30] audit: type=1326 audit(2000000154.080:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  586.216136][   T30] audit: type=1326 audit(2000000154.080:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  586.216174][   T30] audit: type=1326 audit(2000000154.080:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  586.216213][   T30] audit: type=1326 audit(2000000154.090:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  586.216258][   T30] audit: type=1326 audit(2000000154.090:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  586.216296][   T30] audit: type=1326 audit(2000000154.090:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10418 comm="syz.3.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  587.305165][T10432] fuse: Bad value for 'fd'
[  587.896221][    C1] vkms_vblank_simulate: vblank timer overrun
[  588.383021][    C1] vkms_vblank_simulate: vblank timer overrun
[  588.429588][    C1] vkms_vblank_simulate: vblank timer overrun
[  589.334602][T10456] vhci_hcd vhci_hcd.0: port 0 already used
[  589.346489][T10456] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11)
[  589.346531][T10456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  589.347801][T10456] vhci_hcd vhci_hcd.0: Device attached
[  589.348556][T10456] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  589.361004][T10456] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15)
[  589.361025][T10456] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  589.361091][T10456] vhci_hcd vhci_hcd.0: Device attached
[  589.379699][T10456] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17)
[  589.379726][T10456] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  589.379794][T10456] vhci_hcd vhci_hcd.0: Device attached
[  589.394502][T10456] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19)
[  589.394532][T10456] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  589.427364][T10456] vhci_hcd vhci_hcd.0: Device attached
[  589.455151][T10456] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  589.455936][T10456] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  589.463328][T10456] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  590.198863][T10456] vhci_hcd vhci_hcd.0: port 0 already used
[  590.212767][T10461] vhci_hcd: connection closed
[  590.215924][T10465] vhci_hcd: connection closed
[  590.219431][T10459] vhci_hcd: connection closed
[  590.227578][ T1164] vhci_hcd: stop threads
[  590.228436][ T1164] vhci_hcd: release socket
[  590.229367][ T1164] vhci_hcd: disconnect device
[  590.235747][T10467] vhci_hcd: connection closed
[  590.236000][ T1164] vhci_hcd: stop threads
[  590.236012][ T1164] vhci_hcd: release socket
[  590.236545][ T1164] vhci_hcd: disconnect device
[  590.237071][ T1164] vhci_hcd: stop threads
[  590.237083][ T1164] vhci_hcd: release socket
[  590.237122][ T1164] vhci_hcd: disconnect device
[  590.240796][ T1164] vhci_hcd: stop threads
[  590.240808][ T1164] vhci_hcd: release socket
[  590.240967][ T1164] vhci_hcd: disconnect device
[  591.762991][T10482] ip6t_srh: unknown srh match flags  4000
[  592.196968][T10488] loop7: detected capacity change from 0 to 16384
[  592.915072][T10488] blk_print_req_error: 43 callbacks suppressed
[  592.915094][T10488] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  592.959198][T10494] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 0
[  592.987459][T10494] buffer_io_error: 199 callbacks suppressed
[  592.987479][T10494] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  593.053422][T10494] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  593.064974][T10494] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  593.073774][T10494] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  593.082896][T10494] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  593.102386][T10494] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  593.118765][T10494] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  593.130259][T10494] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  593.144778][T10494] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  593.155902][T10494] Buffer I/O error on dev loop7, logical block 9, lost async page write
[  593.500137][T10494] I/O error, dev loop7, sector 512 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0
[  596.739232][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'.
[  596.748180][T10514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1023'.
[  598.002900][T10543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1029'.
[  604.573771][T10592] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  606.711508][   T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  607.895109][   T60] usb 3-1: Using ep0 maxpacket: 16
[  607.914202][   T60] usb 3-1: device descriptor read/all, error -71
[  607.935994][T10626] fuse: Bad value for 'fd'
[  608.850341][T10638] fuse: Unknown parameter 'group_i00000000000000000000'
[  609.154543][T10641] 9pnet_fd: Insufficient options for proto=fd
[  610.244032][T10644] siw: device registration error -23
[  611.567747][T10665] siw: device registration error -23
[  612.711762][T10667] overlayfs: failed to resolve './file1': -2
[  613.967875][T10684] vhci_hcd vhci_hcd.0: port 0 already used
[  613.978996][T10684] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11)
[  613.985642][T10684] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  613.995960][T10689] fuse: Bad value for 'fd'
[  614.001995][T10684] vhci_hcd vhci_hcd.0: Device attached
[  614.008988][T10684] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  614.023304][T10684] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15)
[  614.029931][T10684] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  614.038288][T10684] vhci_hcd vhci_hcd.0: Device attached
[  614.050511][T10684] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17)
[  614.057129][T10684] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  614.146367][T10684] vhci_hcd vhci_hcd.0: Device attached
[  614.235781][T10684] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  614.245893][T10684] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  614.255716][T10684] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  614.286891][T10694] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(28)
[  614.293531][T10694] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  614.331527][T10684] vhci_hcd vhci_hcd.0: port 0 already used
[  614.409205][T10694] vhci_hcd vhci_hcd.0: Device attached
[  614.447786][T10696] vhci_hcd: connection closed
[  614.449542][T10690] vhci_hcd: connection closed
[  614.464003][T10692] vhci_hcd: connection closed
[  614.472442][T10687] vhci_hcd: connection closed
[  614.505480][ T1164] vhci_hcd: stop threads
[  614.527587][ T1164] vhci_hcd: release socket
[  614.549238][ T1164] vhci_hcd: disconnect device
[  614.573420][ T1164] vhci_hcd: stop threads
[  614.594536][ T1164] vhci_hcd: release socket
[  614.695630][ T1164] vhci_hcd: disconnect device
[  614.841892][ T1164] vhci_hcd: stop threads
[  614.923553][ T1164] vhci_hcd: release socket
[  615.043582][ T1164] vhci_hcd: disconnect device
[  615.113796][ T1164] vhci_hcd: stop threads
[  615.118094][ T1164] vhci_hcd: release socket
[  615.123499][ T1164] vhci_hcd: disconnect device
[  615.500413][T10715] siw: device registration error -23
[  615.875854][T10719] syz.2.1069: attempt to access beyond end of device
[  615.875854][T10719] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0
[  615.888940][T10719] ADFS-fs (nbd2): error: unable to read block 3, try 0
[  616.505771][T10725] vhci_hcd vhci_hcd.0: port 0 already used
[  616.824799][T10734] xt_hashlimit: max too large, truncated to 1048576
[  617.492754][T10736] loop7: detected capacity change from 0 to 16384
[  617.508647][T10731] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11)
[  617.515299][T10731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  617.562086][T10725] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  617.592433][T10731] vhci_hcd vhci_hcd.0: Device attached
[  617.620637][T10741] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17)
[  617.627283][T10741] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  617.676866][T10731] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(13)
[  617.683515][T10731] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  617.783000][T10731] vhci_hcd vhci_hcd.0: Device attached
[  617.808993][T10741] vhci_hcd vhci_hcd.0: Device attached
[  617.821511][T10740] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  617.859593][T10736] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  617.860216][T10731] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  617.861641][T10736] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  617.862267][T10736] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  617.862292][T10736] buffer_io_error: 86 callbacks suppressed
[  617.862302][T10736] Buffer I/O error on dev loop7, logical block 96, async page read
[  617.862398][T10736] I/O error, dev loop7, sector 776 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  617.862420][T10736] Buffer I/O error on dev loop7, logical block 97, async page read
[  617.862504][T10736] I/O error, dev loop7, sector 784 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  617.862525][T10736] Buffer I/O error on dev loop7, logical block 98, async page read
[  617.862615][T10736] I/O error, dev loop7, sector 792 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  617.862637][T10736] Buffer I/O error on dev loop7, logical block 99, async page read
[  617.862718][T10736] I/O error, dev loop7, sector 800 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  617.862738][T10736] Buffer I/O error on dev loop7, logical block 100, async page read
[  617.862820][T10736] I/O error, dev loop7, sector 808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  617.862840][T10736] Buffer I/O error on dev loop7, logical block 101, async page read
[  617.862920][T10736] I/O error, dev loop7, sector 816 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  617.862941][T10736] Buffer I/O error on dev loop7, logical block 102, async page read
[  617.863045][T10736] Buffer I/O error on dev loop7, logical block 103, async page read
[  617.863137][T10736] Buffer I/O error on dev loop7, logical block 104, async page read
[  617.863226][T10736] Buffer I/O error on dev loop7, logical block 105, async page read
[  617.863497][T10731] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  617.867297][T10731] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  617.867751][T10725] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(23)
[  617.867773][T10725] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  617.867904][T10725] vhci_hcd vhci_hcd.0: Device attached
[  617.930096][T10740] Dev loop7: unable to read RDB block 8
[  617.930341][T10740]  loop7: unable to read partition table
[  617.930524][T10740] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  618.579335][T10750] vhci_hcd: connection closed
[  618.596082][T10743] vhci_hcd: connection closed
[  618.596816][T10737] vhci_hcd: connection closed
[  618.600340][T10725] vhci_hcd vhci_hcd.0: port 0 already used
[  618.600600][T10746] vhci_hcd: connection closed
[  618.606276][  T179] vhci_hcd: stop threads
[  618.749564][  T179] vhci_hcd: release socket
[  618.749652][  T179] vhci_hcd: disconnect device
[  618.749882][  T179] vhci_hcd: stop threads
[  618.749892][  T179] vhci_hcd: release socket
[  618.749966][  T179] vhci_hcd: disconnect device
[  618.751478][  T179] vhci_hcd: stop threads
[  618.751490][  T179] vhci_hcd: release socket
[  618.751566][  T179] vhci_hcd: disconnect device
[  618.877901][  T179] vhci_hcd: stop threads
[  618.877924][  T179] vhci_hcd: release socket
[  618.877969][  T179] vhci_hcd: disconnect device
[  621.072522][T10777] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  624.435976][T10798] siw: device registration error -23
[  625.130921][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  625.138012][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  625.500143][T10818] loop7: detected capacity change from 0 to 16384
[  626.453371][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  626.453391][   T30] audit: type=1326 audit(2000000194.170:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10809 comm="syz.1.1089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13b058d169 code=0x0
[  626.652729][T10827] blk_print_req_error: 27 callbacks suppressed
[  626.652748][T10827] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  626.849529][T10818] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0
[  626.918195][T10818] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  626.934627][T10827] buffer_io_error: 104 callbacks suppressed
[  626.934684][T10827] Buffer I/O error on dev loop7, logical block 0, async page read
[  627.089282][T10818] Buffer I/O error on dev loop7, logical block 32, async page read
[  627.220825][T10832] 9pnet_fd: Insufficient options for proto=fd
[  627.886135][T10827] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  627.886167][T10827] Buffer I/O error on dev loop7, logical block 0, async page read
[  627.886285][T10827] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  627.886308][T10827] Buffer I/O error on dev loop7, logical block 0, async page read
[  627.886410][T10827] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  627.886433][T10827] Buffer I/O error on dev loop7, logical block 0, async page read
[  627.886540][T10827] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  627.886562][T10827] Buffer I/O error on dev loop7, logical block 0, async page read
[  627.886690][T10827] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  627.886712][T10827] Buffer I/O error on dev loop7, logical block 0, async page read
[  627.886830][T10827] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  627.886851][T10827] Buffer I/O error on dev loop7, logical block 0, async page read
[  627.886956][T10827] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  627.886977][T10827] Buffer I/O error on dev loop7, logical block 0, async page read
[  627.887057][T10827] ldm_validate_partition_table(): Disk read failed.
[  627.887110][T10827] Buffer I/O error on dev loop7, logical block 0, async page read
[  627.887446][T10827] Dev loop7: unable to read RDB block 0
[  627.887972][T10827]  loop7: unable to read partition table
[  627.888142][T10827] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  628.289071][T10839] siw: device registration error -23
[  629.757520][T10849] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.766295][T10849] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.242879][T10876] loop7: detected capacity change from 0 to 16384
[  634.346695][T10876] blk_print_req_error: 13 callbacks suppressed
[  634.346740][T10876] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  634.346821][T10876] buffer_io_error: 27 callbacks suppressed
[  634.346855][T10876] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  634.347261][T10876] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  634.347639][T10876] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  634.347942][T10876] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  634.348351][T10876] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  634.348696][T10876] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  634.348998][T10876] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  634.349350][T10876] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  634.349723][T10876] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  634.350047][T10876] Buffer I/O error on dev loop7, logical block 9, lost async page write
[  634.980856][T10879] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  635.114254][T10879] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  635.158084][T10879] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  635.158157][T10879] I/O error, dev loop7, sector 4616 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  635.158214][T10879] I/O error, dev loop7, sector 4624 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  635.158276][T10879] I/O error, dev loop7, sector 4632 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  635.158336][T10879] I/O error, dev loop7, sector 4640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  635.158395][T10879] I/O error, dev loop7, sector 4648 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  635.158452][T10879] I/O error, dev loop7, sector 4656 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  638.178422][T10925] overlayfs: missing 'lowerdir'
[  640.154382][T10938] can0: slcan on ttyS3.
[  640.678875][T10937] 8021q: adding VLAN 0 to HW filter on device bond2
[  640.937952][T10946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  643.580997][T10954] loop7: detected capacity change from 0 to 16384
[  645.367349][T10968] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  645.617355][T10954] blk_print_req_error: 29 callbacks suppressed
[  645.617377][T10954] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  645.618355][T10954] I/O error, dev loop7, sector 2816 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  645.619088][T10954] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  645.619222][T10954] buffer_io_error: 598 callbacks suppressed
[  645.619238][T10954] Buffer I/O error on dev loop7, logical block 320, async page read
[  645.619368][T10954] I/O error, dev loop7, sector 2568 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  645.619393][T10954] Buffer I/O error on dev loop7, logical block 321, async page read
[  645.619488][T10954] I/O error, dev loop7, sector 2576 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  645.619510][T10954] Buffer I/O error on dev loop7, logical block 322, async page read
[  645.619601][T10954] I/O error, dev loop7, sector 2584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  645.619623][T10954] Buffer I/O error on dev loop7, logical block 323, async page read
[  645.619712][T10954] I/O error, dev loop7, sector 2592 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  645.619733][T10954] Buffer I/O error on dev loop7, logical block 324, async page read
[  645.619823][T10954] I/O error, dev loop7, sector 2600 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  645.619877][T10954] Buffer I/O error on dev loop7, logical block 325, async page read
[  645.619969][T10954] I/O error, dev loop7, sector 2608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  645.619991][T10954] Buffer I/O error on dev loop7, logical block 326, async page read
[  645.620080][T10954] I/O error, dev loop7, sector 2616 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  645.620102][T10954] Buffer I/O error on dev loop7, logical block 327, async page read
[  645.620201][T10954] Buffer I/O error on dev loop7, logical block 328, async page read
[  645.620291][T10954] Buffer I/O error on dev loop7, logical block 329, async page read
[  648.442219][T10993] xt_socket: unknown flags 0x50
[  649.472056][T11000] random: crng reseeded on system resumption
[  653.282252][T10998] tty tty20: ldisc open failed (-12), clearing slot 19
[  655.759863][T11032] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  658.165483][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1141'.
[  658.174925][T11051] netlink: 'syz.3.1141': attribute type 2 has an invalid length.
[  658.183065][T11051] netlink: 'syz.3.1141': attribute type 1 has an invalid length.
[  658.606083][T11053] netlink: 'syz.2.1142': attribute type 11 has an invalid length.
[  658.855723][T11053] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1142'.
[  660.330309][   T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  660.348515][   T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  660.357383][   T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  660.372675][   T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  660.380572][   T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  662.196336][T11084] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1147'.
[  662.521925][T10400] Bluetooth: hci0: command tx timeout
[  663.517526][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'.
[  664.186018][T11064] lo speed is unknown, defaulting to 1000
[  664.402679][T11094] Smack: duplicate mount options
[  665.133218][T10400] Bluetooth: hci0: command tx timeout
[  665.411950][T11081] can0 (unregistered): slcan off ttyS3.
[  666.856144][T11112] syz.0.1153: attempt to access beyond end of device
[  666.856144][T11112] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0
[  666.869464][T11112] MINIX-fs: unable to read superblock
[  667.163207][   T56] Bluetooth: hci0: command tx timeout
[  667.564542][T11118] (unnamed net_device) (uninitialized): option ad_select: invalid value (105)
[  668.325619][T11064] chnl_net:caif_netlink_parms(): no params data found
[  668.617302][T11135] overlayfs: missing 'lowerdir'
[  669.181012][T10400] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  669.181088][T10400] Bluetooth: hci4: Injecting HCI hardware error event
[  669.182948][T10400] Bluetooth: hci4: hardware error 0x00
[  669.241709][   T56] Bluetooth: hci0: command tx timeout
[  669.467330][T11064] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.467439][T11064] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.467931][T11064] bridge_slave_0: entered allmulticast mode
[  669.467959][T11147] netlink: 'syz.0.1158': attribute type 11 has an invalid length.
[  669.467993][T11147] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1158'.
[  669.469846][T11064] bridge_slave_0: entered promiscuous mode
[  669.524618][T11064] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.524726][T11064] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.524905][T11064] bridge_slave_1: entered allmulticast mode
[  669.530551][T11064] bridge_slave_1: entered promiscuous mode
[  669.704145][T11064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  669.728447][T11064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  671.200380][T11064] team0: Port device team_slave_0 added
[  671.223522][T11064] team0: Port device team_slave_1 added
[  671.241414][T10400] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  671.405597][T11064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.378930][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.404915][    C0] vkms_vblank_simulate: vblank timer overrun
[  672.793119][T11064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.805961][T11064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  672.813122][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.839068][    C0] vkms_vblank_simulate: vblank timer overrun
[  672.903572][T11064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  672.982640][T11192] trusted_key: syz.2.1165 sent an empty control message without MSG_MORE.
[  674.525995][T11204] overlayfs: missing 'lowerdir'
[  675.051659][T11210] loop7: detected capacity change from 0 to 16384
[  675.054213][T11064] hsr_slave_0: entered promiscuous mode
[  675.087543][T11064] hsr_slave_1: entered promiscuous mode
[  675.098488][T11064] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  675.135327][T11064] Cannot create hsr debugfs directory
[  675.187779][T11210] blk_print_req_error: 27 callbacks suppressed
[  675.187798][T11210] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  675.188814][T11214] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  675.195543][T11210] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  675.255008][T11210] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  675.301189][T11214] buffer_io_error: 342 callbacks suppressed
[  675.301210][T11214] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  675.321258][T11210] Buffer I/O error on dev loop7, logical block 544, async page read
[  675.353838][T11210] I/O error, dev loop7, sector 4360 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  675.353875][T11210] Buffer I/O error on dev loop7, logical block 545, async page read
[  675.353978][T11210] I/O error, dev loop7, sector 4368 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  675.354000][T11210] Buffer I/O error on dev loop7, logical block 546, async page read
[  675.354098][T11210] I/O error, dev loop7, sector 4376 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  675.354120][T11210] Buffer I/O error on dev loop7, logical block 547, async page read
[  675.354209][T11210] I/O error, dev loop7, sector 4384 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  675.354231][T11210] Buffer I/O error on dev loop7, logical block 548, async page read
[  675.354322][T11210] I/O error, dev loop7, sector 4392 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  675.354342][T11210] Buffer I/O error on dev loop7, logical block 549, async page read
[  675.354433][T11210] I/O error, dev loop7, sector 4400 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  675.354456][T11210] Buffer I/O error on dev loop7, logical block 550, async page read
[  675.354548][T11210] Buffer I/O error on dev loop7, logical block 551, async page read
[  675.354640][T11210] Buffer I/O error on dev loop7, logical block 552, async page read
[  675.752910][T11225] Cannot find del_set index 4 as target
[  675.846332][T11226] xt_CT: You must specify a L4 protocol and not use inversions on it
[  675.884446][T11226] syz.2.1172 uses old SIOCAX25GETINFO
[  676.346222][T11214] ldm_validate_partition_table(): Disk read failed.
[  676.346604][T11214] Dev loop7: unable to read RDB block 0
[  676.347348][T11214]  loop7: unable to read partition table
[  676.347539][T11214] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  677.374187][T11064] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  677.397116][T11064] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  677.405975][T11064] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  677.646304][T11064] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  678.338134][T11249] loop7: detected capacity change from 0 to 16384
[  679.376106][T11064] 8021q: adding VLAN 0 to HW filter on device bond0
[  679.544764][T11064] 8021q: adding VLAN 0 to HW filter on device team0
[  680.103711][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.110980][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  680.268133][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.275407][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  681.020256][T11064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  681.195621][T11281] overlayfs: missing 'lowerdir'
[  681.246192][T11064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  681.441495][   T56] Bluetooth: hci0: command 0x0405 tx timeout
[  683.932576][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'.
[  684.302003][T10400] Bluetooth: hci2: Malformed Event: 0x02
[  684.304229][T11305] pim6reg: entered allmulticast mode
[  684.314510][T11305] pim6reg: left allmulticast mode
[  685.335147][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  686.887900][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  687.877377][T11064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  687.900438][T11323] loop7: detected capacity change from 0 to 16384
[  687.967410][T11325] netlink: 'syz.4.1190': attribute type 1 has an invalid length.
[  688.003452][T11325] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1190'.
[  688.119138][T11323] blk_print_req_error: 83 callbacks suppressed
[  688.119159][T11323] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  688.137208][T11327] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  688.137241][T11327] buffer_io_error: 807 callbacks suppressed
[  688.137251][T11327] Buffer I/O error on dev loop7, logical block 256, lost async page write
[  688.137334][T11327] Buffer I/O error on dev loop7, logical block 257, lost async page write
[  688.137406][T11327] Buffer I/O error on dev loop7, logical block 258, lost async page write
[  688.137473][T11327] Buffer I/O error on dev loop7, logical block 259, lost async page write
[  688.137542][T11327] Buffer I/O error on dev loop7, logical block 260, lost async page write
[  688.137605][T11327] Buffer I/O error on dev loop7, logical block 261, lost async page write
[  688.137667][T11327] Buffer I/O error on dev loop7, logical block 262, lost async page write
[  688.137735][T11327] Buffer I/O error on dev loop7, logical block 263, lost async page write
[  688.137804][T11327] Buffer I/O error on dev loop7, logical block 264, lost async page write
[  688.137873][T11327] Buffer I/O error on dev loop7, logical block 265, lost async page write
[  688.147944][T11327] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  688.169869][T11327] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  688.249270][T11323] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  688.260408][T11323] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  688.260538][T11323] I/O error, dev loop7, sector 7688 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  688.260640][T11323] I/O error, dev loop7, sector 7696 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  688.260740][T11323] I/O error, dev loop7, sector 7704 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  688.260875][T11323] I/O error, dev loop7, sector 7712 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  690.205287][T11352] tty tty29: ldisc open failed (-12), clearing slot 28
[  690.262792][T11359] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  690.378958][T11359] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  690.928909][T11064] veth0_vlan: entered promiscuous mode
[  691.054840][T11064] veth1_vlan: entered promiscuous mode
[  691.636204][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'.
[  691.645911][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'.
[  691.839426][T11064] veth0_macvtap: entered promiscuous mode
[  691.849627][T11064] veth1_macvtap: entered promiscuous mode
[  692.365405][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  692.393040][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  692.605956][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  692.842173][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  692.961239][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  693.010839][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  693.090056][T11064] batman_adv: batadv0: Interface activated: batadv_slave_0
[  693.731455][T11385] overlayfs: failed to resolve './file1': -2
[  694.031789][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  694.072514][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  694.174297][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  694.199592][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  694.261497][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  694.272174][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  694.282506][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  694.293147][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  694.395225][T11395] 9pnet_fd: Insufficient options for proto=fd
[  695.019212][T11064] batman_adv: batadv0: Interface activated: batadv_slave_1
[  695.038595][T11064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  695.047754][T11064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  695.059968][T11064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  695.081988][T11401] ieee802154 phy0 wpan0: encryption failed: -22
[  695.094933][T11064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  695.918952][T11406] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1201'.
[  696.687159][T11440] loop7: detected capacity change from 0 to 16384
[  697.267569][T11448] overlayfs: failed to clone upperpath
[  697.366159][   T30] audit: type=1326 audit(2000000265.350:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  697.827479][   T30] audit: type=1326 audit(2000000265.350:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  697.859231][T11440] blk_print_req_error: 30 callbacks suppressed
[  697.859250][T11440] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  697.984150][T11440] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  697.984565][T11440] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.984591][T11440] buffer_io_error: 726 callbacks suppressed
[  697.984601][T11440] Buffer I/O error on dev loop7, logical block 32, async page read
[  697.984703][T11440] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.984724][T11440] Buffer I/O error on dev loop7, logical block 33, async page read
[  697.984817][T11440] I/O error, dev loop7, sector 272 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.984838][T11440] Buffer I/O error on dev loop7, logical block 34, async page read
[  697.984933][T11440] I/O error, dev loop7, sector 280 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.984955][T11440] Buffer I/O error on dev loop7, logical block 35, async page read
[  697.985056][T11440] I/O error, dev loop7, sector 288 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.985078][T11440] Buffer I/O error on dev loop7, logical block 36, async page read
[  697.985175][T11440] I/O error, dev loop7, sector 296 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.985197][T11440] Buffer I/O error on dev loop7, logical block 37, async page read
[  697.985290][T11440] I/O error, dev loop7, sector 304 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.985311][T11440] Buffer I/O error on dev loop7, logical block 38, async page read
[  697.985411][T11440] I/O error, dev loop7, sector 312 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  697.985435][T11440] Buffer I/O error on dev loop7, logical block 39, async page read
[  697.985528][T11440] Buffer I/O error on dev loop7, logical block 40, async page read
[  697.985622][T11440] Buffer I/O error on dev loop7, logical block 41, async page read
[  698.060447][   T30] audit: type=1326 audit(2000000265.350:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  698.097640][T11446] ldm_validate_partition_table(): Disk read failed.
[  698.152259][T11460] ntfs3: Unknown parameter '�"����a�0(ddZ��56�t@Xf���v6�}�������WV䝑qDy��63��<D3'
[  698.245245][T11446] Dev loop7: unable to read RDB block 0
[  698.293471][ T6031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  698.293494][ T6031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  698.473568][   T30] audit: type=1326 audit(2000000265.350:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  698.497966][   T30] audit: type=1326 audit(2000000265.350:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  698.519891][   T30] audit: type=1326 audit(2000000265.350:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  698.685129][T11446]  loop7: unable to read partition table
[  698.725686][T11446] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  698.753384][   T30] audit: type=1326 audit(2000000265.350:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  698.865803][T11472] kAFS: No cell specified
[  699.659763][   T30] audit: type=1326 audit(2000000265.350:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  699.938164][   T30] audit: type=1326 audit(2000000265.350:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  699.973256][   T30] audit: type=1326 audit(2000000265.350:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11442 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1698d169 code=0x7ffc0000
[  699.994886][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.002021][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.002042][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  700.610803][T11485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  700.623109][T11485] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  701.156443][T11487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  701.214358][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'.
[  701.469252][T11499] program syz.4.1215 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  704.400613][T11522] loop7: detected capacity change from 0 to 16384
[  704.527241][T11526] netlink: 'syz.4.1221': attribute type 4 has an invalid length.
[  705.103310][T11528] IPVS: Error connecting to the multicast addr
[  705.205441][T11522] blk_print_req_error: 26 callbacks suppressed
[  705.205455][T11522] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  705.318231][T11522] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  705.344721][T11527] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  705.463459][T11527] buffer_io_error: 39 callbacks suppressed
[  705.463480][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  706.006889][T11551] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  706.386172][T11527] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  706.442356][T11522] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  706.474811][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  706.490868][T11541] 8021q: adding VLAN 0 to HW filter on device bond0
[  706.628365][T11541] bond0: (slave rose0): Enslaving as an active interface with an up link
[  706.641574][T11522] Buffer I/O error on dev loop7, logical block 416, async page read
[  706.670059][T11527] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  706.679739][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  706.687893][T11522] I/O error, dev loop7, sector 3336 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  706.688240][T11527] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  706.708652][T11522] Buffer I/O error on dev loop7, logical block 417, async page read
[  706.858785][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  707.171369][T11522] I/O error, dev loop7, sector 3344 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  707.269097][T11527] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  707.387195][T11522] Buffer I/O error on dev loop7, logical block 418, async page read
[  707.453709][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  707.686178][T11522] Buffer I/O error on dev loop7, logical block 419, async page read
[  707.788680][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  713.711997][T11522] blk_print_req_error: 2 callbacks suppressed
[  713.712017][T11522] I/O error, dev loop7, sector 3360 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  713.728144][T11522] Buffer I/O error on dev loop7, logical block 420, async page read
[  713.736442][T11522] I/O error, dev loop7, sector 3368 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  713.751205][T11522] Buffer I/O error on dev loop7, logical block 421, async page read
[  713.759463][T11522] I/O error, dev loop7, sector 3376 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  713.761705][T11527] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  713.775697][T11522] Buffer I/O error on dev loop7, logical block 422, async page read
[  714.020085][T11522] I/O error, dev loop7, sector 3384 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  714.092863][T11575] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  714.102192][T11575] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  714.349273][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  714.510825][T11522] Buffer I/O error on dev loop7, logical block 423, async page read
[  714.533558][T11527] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  714.543207][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  714.551158][T11527] ldm_validate_partition_table(): Disk read failed.
[  714.557849][T11527] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  714.580696][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  714.589489][T11527] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  714.599011][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  714.649738][T11527] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  714.667417][T11522] I/O error, dev loop7, sector 3392 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  714.705552][T11522] Buffer I/O error on dev loop7, logical block 424, async page read
[  714.739409][T11527] Buffer I/O error on dev loop7, logical block 0, async page read
[  714.800518][T11527] Dev loop7: unable to read RDB block 0
[  714.811226][T11527]  loop7: unable to read partition table
[  714.817479][T11527] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  715.691608][T11584] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  715.706732][T11584] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  715.728371][T11591] lo speed is unknown, defaulting to 1000
[  717.187371][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  717.187390][   T30] audit: type=1326 audit(2000000285.350:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de218d169 code=0x7fc00000
[  717.377295][T11616] overlayfs: failed to resolve './file1': -2
[  718.021279][   T30] audit: type=1326 audit(2000000285.350:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9de218d169 code=0x7fc00000
[  718.241227][   T30] audit: type=1326 audit(2000000286.400:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de218d169 code=0x7fc00000
[  719.019231][   T30] audit: type=1326 audit(2000000286.400:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9de218d169 code=0x7fc00000
[  719.078235][   T30] audit: type=1326 audit(2000000286.400:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de218d169 code=0x7fc00000
[  720.062391][   T30] audit: type=1326 audit(2000000286.400:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de218d169 code=0x7fc00000
[  720.234805][   T30] audit: type=1326 audit(2000000286.400:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de218d169 code=0x7fc00000
[  720.539137][   T30] audit: type=1326 audit(2000000286.400:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de218d169 code=0x7fc00000
[  721.532843][   T30] audit: type=1326 audit(2000000286.400:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9de218d169 code=0x7fc00000
[  721.574092][T11638] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  724.385334][   T56] Bluetooth: hci0: command 0x0405 tx timeout
[  726.490484][T11680] netlink: 'syz.5.1250': attribute type 3 has an invalid length.
[  726.498437][T11680] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1250'.
[  727.111437][ T5830] Bluetooth: hci3: unexpected event for opcode 0x0c7b
[  727.242517][T11680] Falling back ldisc for ttyS3.
[  727.250094][T11687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1252'.
[  727.307423][T11689] NILFS (nullb0): couldn't find nilfs on the device
[  727.779231][T11705] vhci_hcd vhci_hcd.0: port 0 already used
[  728.563718][T11716] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13)
[  728.570373][T11716] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  728.613365][T11716] vhci_hcd vhci_hcd.0: Device attached
[  728.644643][T11705] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  728.726901][T11716] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18)
[  728.733555][T11716] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  728.785817][T11716] vhci_hcd vhci_hcd.0: Device attached
[  729.430677][T11728] loop7: detected capacity change from 0 to 16384
[  729.437397][T11705] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20)
[  729.444021][T11705] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  729.497933][T11705] vhci_hcd vhci_hcd.0: Device attached
[  729.542915][T11716] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(22)
[  729.549562][T11716] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  729.618665][T11716] vhci_hcd vhci_hcd.0: Device attached
[  729.635874][T11728] blk_print_req_error: 30 callbacks suppressed
[  729.635892][T11728] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  729.653088][T11705] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  729.680310][T11732] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  729.706362][T11716] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  729.716201][T11728] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  729.739882][T11705] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  729.797286][T11732] buffer_io_error: 125 callbacks suppressed
[  729.797328][T11732] Buffer I/O error on dev loop7, logical block 128, lost async page write
[  729.797639][T11732] Buffer I/O error on dev loop7, logical block 129, lost async page write
[  729.797968][T11732] Buffer I/O error on dev loop7, logical block 130, lost async page write
[  729.798270][T11732] Buffer I/O error on dev loop7, logical block 131, lost async page write
[  729.798602][T11732] Buffer I/O error on dev loop7, logical block 132, lost async page write
[  729.841083][T11732] Buffer I/O error on dev loop7, logical block 133, lost async page write
[  729.841897][T11732] Buffer I/O error on dev loop7, logical block 134, lost async page write
[  729.842265][T11732] Buffer I/O error on dev loop7, logical block 135, lost async page write
[  729.844269][T11732] Buffer I/O error on dev loop7, logical block 136, lost async page write
[  729.845511][T11732] Buffer I/O error on dev loop7, logical block 137, lost async page write
[  730.683591][T11728] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  730.683717][T11728] I/O error, dev loop7, sector 3848 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  730.683821][T11728] I/O error, dev loop7, sector 3856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  730.683950][T11728] I/O error, dev loop7, sector 3864 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  730.684082][T11728] I/O error, dev loop7, sector 3872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  730.684184][T11728] I/O error, dev loop7, sector 3880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  730.684287][T11728] I/O error, dev loop7, sector 3888 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  730.768926][T11732] ldm_validate_partition_table(): Disk read failed.
[  730.769439][T11732] Dev loop7: unable to read RDB block 0
[  730.769969][T11732]  loop7: unable to read partition table
[  730.770224][T11732] loop_reread_partitions: partition scan of loop7 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  730.934252][T11733] vhci_hcd: connection closed
[  730.941830][T11723] vhci_hcd: connection closed
[  730.942015][T11730] vhci_hcd: connection closed
[  730.958967][T11717] vhci_hcd: connection closed
[  731.363481][ T6780] vhci_hcd: stop threads
[  731.363718][ T6780] vhci_hcd: release socket
[  731.363846][ T6780] vhci_hcd: disconnect device
[  731.364857][ T6780] vhci_hcd: stop threads
[  731.364869][ T6780] vhci_hcd: release socket
[  731.364964][ T6780] vhci_hcd: disconnect device
[  731.365699][ T6780] vhci_hcd: stop threads
[  731.365794][ T6780] vhci_hcd: release socket
[  731.365885][ T6780] vhci_hcd: disconnect device
[  731.366534][ T6780] vhci_hcd: stop threads
[  731.366545][ T6780] vhci_hcd: release socket
[  731.366596][ T6780] vhci_hcd: disconnect device
[  731.413440][T11750] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  731.560676][T11750] netlink: 'syz.0.1261': attribute type 10 has an invalid length.
[  731.560714][T11750] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[  731.578686][T11750] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  731.698775][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1261'.
[  732.160758][T11778] netlink: 'syz.0.1266': attribute type 11 has an invalid length.
[  732.160781][T11778] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1266'.
[  733.020260][T11773] ceph: No mds server is up or the cluster is laggy
[  733.027621][ T5876] libceph: connect (1)[c::]:6789 error -101
[  733.038027][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[  733.061742][T11787] bridge0: port 3(netdevsim0) entered blocking state
[  733.069118][T11787] bridge0: port 3(netdevsim0) entered disabled state
[  733.077164][T11787] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  733.088516][T11787] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  733.096628][T11787] bridge0: port 3(netdevsim0) entered blocking state
[  733.103585][T11787] bridge0: port 3(netdevsim0) entered forwarding state
[  733.314392][ T5876] libceph: connect (1)[c::]:6789 error -101
[  733.320576][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[  733.547974][T11797] siw: device registration error -23
[  738.245510][ T5876] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  738.410320][ T5876] usb 3-1: device descriptor read/64, error -71
[  740.012372][T11843] loop7: detected capacity change from 0 to 16384
[  740.165368][T11846] blk_print_req_error: 45 callbacks suppressed
[  740.165397][T11846] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  740.200529][T11843] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  740.994181][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'.
[  741.005956][T11859] bridge_slave_1: left allmulticast mode
[  741.011704][T11859] bridge_slave_1: left promiscuous mode
[  741.017537][T11859] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.371905][T11846] buffer_io_error: 391 callbacks suppressed
[  741.371925][T11846] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  741.442469][T11843] I/O error, dev loop7, sector 2816 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  741.453628][T11843] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  741.464712][T11843] Buffer I/O error on dev loop7, logical block 320, async page read
[  742.449952][T11846] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  742.466297][T11846] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  742.471406][T11843] I/O error, dev loop7, sector 2568 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  742.475088][T11846] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  742.494290][T11846] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  742.505205][T11846] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  742.542369][T11843] Buffer I/O error on dev loop7, logical block 321, async page read
[  742.578165][T11843] I/O error, dev loop7, sector 2576 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  742.600377][T11843] Buffer I/O error on dev loop7, logical block 322, async page read
[  742.609059][T11843] I/O error, dev loop7, sector 2584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  742.630246][T11846] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  742.652500][T11843] I/O error, dev loop7, sector 2592 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  742.696437][T11843] I/O error, dev loop7, sector 2600 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  742.696544][T11843] I/O error, dev loop7, sector 2608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  742.961002][   T30] audit: type=1804 audit(2000000311.110:152): pid=11872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1283" name="/newroot/236/file0" dev="tmpfs" ino=1372 res=1 errno=0
[  743.561769][   T31] INFO: task kworker/1:6:6841 blocked for more than 143 seconds.
[  743.561794][   T31]       Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0
[  743.561807][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  743.561816][   T31] task:kworker/1:6     state:D stack:24296 pid:6841  tgid:6841  ppid:2      task_flags:0x4208060 flags:0x00004000
[  743.561869][   T31] Workqueue: usb_hub_wq hub_event
[  743.561895][   T31] Call Trace:
[  743.561902][   T31]  <TASK>
[  743.561916][   T31]  __schedule+0x1b33/0x51f0
[  743.561947][   T31]  ? do_raw_spin_lock+0x70/0x370
[  743.561978][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  743.561999][   T31]  ? schedule+0x163/0x360
[  743.562022][   T31]  ? __pfx___schedule+0x10/0x10
[  743.562056][   T31]  ? schedule+0x90/0x360
[  743.562076][   T31]  ? schedule+0x90/0x360
[  743.562091][   T31]  schedule+0x163/0x360
[  743.562108][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  743.562128][   T31]  schedule_preempt_disabled+0x13/0x30
[  743.562145][   T31]  __mutex_lock+0x805/0x10c0
[  743.562172][   T31]  ? __mutex_lock+0x5f3/0x10c0
[  743.562195][   T31]  ? hub_event+0x24cd/0x50f0
[  743.562214][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  743.562234][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  743.562273][   T31]  hub_event+0x24cd/0x50f0
[  743.562352][   T31]  ? __pfx_hub_event+0x10/0x10
[  743.562373][   T31]  ? __lock_acquire+0xad5/0xd80
[  743.562415][   T31]  ? process_scheduled_works+0x9cb/0x18e0
[  743.562435][   T31]  process_scheduled_works+0xac3/0x18e0
[  743.562484][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  743.562514][   T31]  ? assign_work+0x367/0x3d0
[  743.562540][   T31]  worker_thread+0x870/0xd50
[  743.562575][   T31]  ? __kthread_parkme+0x1a8/0x200
[  743.562599][   T31]  ? __pfx_worker_thread+0x10/0x10
[  743.562620][   T31]  kthread+0x7b7/0x940
[  743.562672][   T31]  ? __pfx_worker_thread+0x10/0x10
[  743.562694][   T31]  ? __pfx_kthread+0x10/0x10
[  743.562712][   T31]  ? __pfx_kthread+0x10/0x10
[  743.562733][   T31]  ? __pfx_kthread+0x10/0x10
[  743.562754][   T31]  ? __pfx_kthread+0x10/0x10
[  743.562774][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  743.562790][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  743.562809][   T31]  ? __pfx_kthread+0x10/0x10
[  743.562831][   T31]  ret_from_fork+0x4b/0x80
[  743.562849][   T31]  ? __pfx_kthread+0x10/0x10
[  743.562870][   T31]  ret_from_fork_asm+0x1a/0x30
[  743.562910][   T31]  </TASK>
[  743.562936][   T31] 
[  743.562936][   T31] Showing all locks held in the system:
[  743.562947][   T31] 2 locks held by rcu_tasks_trace/29:
[  743.562959][   T31]  #0: ffffffff8ed3e5b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xb13/0xe40
[  743.563015][   T31]  #1: ffffffff8ed434f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830
[  743.563068][   T31] 1 lock held by khungtaskd/31:
[  743.563078][   T31]  #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180
[  743.563128][   T31] 3 locks held by kworker/1:2/60:
[  743.563139][   T31]  #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  743.563186][   T31]  #1: ffffc9000136fc60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  743.563259][   T31]  #2: ffffffff900ea588 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  743.563336][   T31] 2 locks held by dhcpcd/5496:
[  743.563348][   T31]  #0: ffff88807da226c8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x119/0x790
[  743.563400][   T31]  #1: ffffffff900ea588 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x99/0x200
[  743.563451][   T31] 2 locks held by getty/5583:
[  743.563461][   T31]  #0: ffff88814d3560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  743.563511][   T31]  #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700
[  743.563567][   T31] 5 locks held by kworker/0:6/5877:
[  743.563578][   T31]  #0: ffff888145285148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  743.563627][   T31]  #1: ffffc9000437fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  743.563675][   T31]  #2: ffff888029d41198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0
[  743.563721][   T31]  #3: ffff888029d44510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0
[  743.563768][   T31]  #4: ffff888029a06868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0
[  743.563816][   T31] 2 locks held by kworker/u8:15/6780:
[  743.563828][   T31] 5 locks held by kworker/1:6/6841:
[  743.563838][   T31]  #0: ffff888145285148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  743.563886][   T31]  #1: ffffc9000bb1fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  743.563933][   T31]  #2: ffff888029d4f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0
[  743.563979][   T31]  #3: ffff888029d62510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2494/0x50f0
[  743.564026][   T31]  #4: ffff888029a06868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x24cd/0x50f0
[  743.564072][   T31] 2 locks held by kworker/u8:16/9421:
[  743.564084][   T31] 1 lock held by syz.5.1279/11846:
[  743.564095][   T31] 2 locks held by syz.5.1279/11848:
[  743.564106][   T31] 2 locks held by syz.3.1282/11859:
[  743.564117][   T31] 1 lock held by dhcpcd/11873:
[  743.564128][   T31]  #0: ffff888034594408 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240
[  743.564184][   T31] 1 lock held by dhcpcd/11874:
[  743.564194][   T31]  #0: ffff888034592c08 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240
[  743.564248][   T31] 1 lock held by dhcpcd/11875:
[  743.564259][   T31]  #0: ffff888034596e08 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240
[  743.564312][   T31] 1 lock held by dhcpcd/11876:
[  743.564323][   T31]  #0: ffff888034593e08 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240
[  743.564383][   T31] 1 lock held by syz.4.1285/11877:
[  743.564394][   T31]  #0: ffff88807c3ddbe0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x530
[  743.564441][   T31] 1 lock held by syz.4.1285/11878:
[  743.564453][   T31] 2 locks held by syz-executor/11879:
[  743.564464][   T31] 
[  743.564470][   T31] =============================================
[  743.564470][   T31] 
[  743.564488][   T31] NMI backtrace for cpu 0
[  743.564504][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  743.564523][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  743.564533][   T31] Call Trace:
[  743.564539][   T31]  <TASK>
[  743.564546][   T31]  dump_stack_lvl+0x241/0x360
[  743.564569][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  743.564590][   T31]  ? __pfx__printk+0x10/0x10
[  743.564622][   T31]  nmi_cpu_backtrace+0x4ab/0x4e0
[  743.564649][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  743.564669][   T31]  ? _printk+0xd5/0x120
[  743.564686][   T31]  ? touch_all_softlockup_watchdogs+0x4a/0xf0
[  743.564705][   T31]  ? __wake_up_klogd+0xcc/0x110
[  743.564726][   T31]  ? __pfx__printk+0x10/0x10
[  743.564746][   T31]  ? debug_show_all_locks+0x30/0x180
[  743.564764][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  743.564780][   T31]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  743.564805][   T31]  watchdog+0x1058/0x10a0
[  743.564823][   T31]  ? watchdog+0x1ea/0x10a0
[  743.564843][   T31]  ? __pfx_watchdog+0x10/0x10
[  743.564858][   T31]  kthread+0x7b7/0x940
[  743.564879][   T31]  ? __pfx_watchdog+0x10/0x10
[  743.564895][   T31]  ? __pfx_kthread+0x10/0x10
[  743.564912][   T31]  ? __pfx_kthread+0x10/0x10
[  743.564930][   T31]  ? __pfx_kthread+0x10/0x10
[  743.564948][   T31]  ? __pfx_kthread+0x10/0x10
[  743.564967][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  743.564981][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  743.564997][   T31]  ? __pfx_kthread+0x10/0x10
[  743.565017][   T31]  ret_from_fork+0x4b/0x80
[  743.565031][   T31]  ? __pfx_kthread+0x10/0x10
[  743.565050][   T31]  ret_from_fork_asm+0x1a/0x30
[  743.565084][   T31]  </TASK>
[  743.565091][   T31] Sending NMI from CPU 0 to CPUs 1:
[  743.565115][    C1] NMI backtrace for cpu 1
[  743.565128][    C1] CPU: 1 UID: 0 PID: 11878 Comm: syz.4.1285 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  743.565147][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  743.565156][    C1] RIP: 0010:memcg_rstat_updated+0x69/0x2f0
[  743.565176][    C1] Code: 8d ee f7 ff 48 8b 3b 89 ee e8 b3 dc 88 ff 48 81 c3 b0 06 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 df e8 5d ee f7 ff 48 8b 1b e8 15 5e f5 09 89 c5 83 f8
[  743.565190][    C1] RSP: 0018:ffffc9000c676d18 EFLAGS: 00000046
[  743.565203][    C1] RAX: 1ffff110055160d6 RBX: ffff88802a8b06b0 RCX: dffffc0000000000
[  743.565215][    C1] RDX: ffffc9000c8c9000 RSI: 000000000007ffff RDI: 0000000000080000
[  743.565226][    C1] RBP: 0000000000000001 R08: ffffffff81bbce4b R09: 0000000000000001
[  743.565236][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  743.565246][    C1] R13: ffff88807ec95808 R14: 0000000000000001 R15: ffffffff93654020
[  743.565257][    C1] FS:  00007f610ff4c6c0(0000) GS:ffff8881250cc000(0000) knlGS:0000000000000000
[  743.565271][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  743.565282][    C1] CR2: 000000110c26a4fc CR3: 000000003612c000 CR4: 00000000003526f0
[  743.565295][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  743.565304][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  743.565314][    C1] Call Trace:
[  743.565320][    C1]  <TASK>
[  743.565329][    C1]  __mod_memcg_lruvec_state+0x2c2/0x4f0
[  743.565349][    C1]  ? __pfx___mod_memcg_lruvec_state+0x10/0x10
[  743.565370][    C1]  ? __mod_node_page_state+0xf2/0x170
[  743.565389][    C1]  __lruvec_stat_mod_folio+0x1ab/0x300
[  743.565407][    C1]  ? __lruvec_stat_mod_folio+0x7d/0x300
[  743.565425][    C1]  shmem_add_to_page_cache+0x91f/0xcc0
[  743.565448][    C1]  ? __pfx_shmem_add_to_page_cache+0x10/0x10
[  743.565467][    C1]  ? percpu_ref_put+0x19/0x180
[  743.565486][    C1]  shmem_alloc_and_add_folio+0x958/0x1070
[  743.565509][    C1]  ? shmem_huge_global_enabled+0x175/0x3b0
[  743.565525][    C1]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  743.565545][    C1]  ? shmem_allowable_huge_orders+0x41b/0x430
[  743.565564][    C1]  shmem_get_folio_gfp+0x655/0x1800
[  743.565590][    C1]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  743.565611][    C1]  shmem_fault+0x223/0x5c0
[  743.565633][    C1]  ? __pfx_shmem_fault+0x10/0x10
[  743.565658][    C1]  __do_fault+0x135/0x390
[  743.565678][    C1]  handle_pte_fault+0x3f0c/0x61c0
[  743.565697][    C1]  ? handle_pte_fault+0x2b0a/0x61c0
[  743.565721][    C1]  ? __pfx_cgroup_rstat_updated+0x10/0x10
[  743.565741][    C1]  ? __pfx_handle_pte_fault+0x10/0x10
[  743.565768][    C1]  ? __lock_acquire+0xad5/0xd80
[  743.565789][    C1]  ? __lock_acquire+0xad5/0xd80
[  743.565805][    C1]  ? do_raw_spin_lock+0x151/0x370
[  743.565834][    C1]  handle_mm_fault+0x1030/0x1aa0
[  743.565862][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  743.565877][    C1]  ? follow_page_pte+0x9ff/0x15e0
[  743.565902][    C1]  ? __get_user_pages+0x707/0x4180
[  743.565916][    C1]  ? __get_user_pages+0x712/0x4180
[  743.565935][    C1]  __get_user_pages+0x1adc/0x4180
[  743.565969][    C1]  ? __pfx___get_user_pages+0x10/0x10
[  743.565986][    C1]  ? __pfx_mt_find+0x10/0x10
[  743.566012][    C1]  populate_vma_page_range+0x266/0x340
[  743.566030][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[  743.566045][    C1]  ? userfaultfd_unmap_complete+0x30e/0x360
[  743.566069][    C1]  ? vm_mmap_pgoff+0x340/0x530
[  743.566090][    C1]  __mm_populate+0x27d/0x460
[  743.566109][    C1]  ? __pfx___mm_populate+0x10/0x10
[  743.566129][    C1]  vm_mmap_pgoff+0x390/0x530
[  743.566148][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  743.566167][    C1]  ? ksys_mmap_pgoff+0xdf/0x720
[  743.566182][    C1]  ? __x64_sys_mmap+0x7f/0x140
[  743.566201][    C1]  do_syscall_64+0xf3/0x230
[  743.566218][    C1]  ? clear_bhb_loop+0x45/0xa0
[  743.566235][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.566250][    C1] RIP: 0033:0x7f610f18d169
[  743.566264][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  743.566276][    C1] RSP: 002b:00007f610ff4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  743.566291][    C1] RAX: ffffffffffffffda RBX: 00007f610f3a5fa0 RCX: 00007f610f18d169
[  743.566302][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  743.566314][    C1] RBP: 00007f610f20e2a0 R08: ffffffffffffffff R09: 0000000000000000
[  743.566325][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  743.566334][    C1] R13: 0000000000000000 R14: 00007f610f3a5fa0 R15: 00007ffe23938b38
[  743.566353][    C1]  </TASK>
[  743.567117][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  743.567130][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  743.567149][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  743.567159][   T31] Call Trace:
[  743.567167][   T31]  <TASK>
[  743.567174][   T31]  dump_stack_lvl+0x241/0x360
[  743.567200][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  743.567221][   T31]  ? __pfx__printk+0x10/0x10
[  743.567248][   T31]  ? vscnprintf+0x5d/0x90
[  743.567274][   T31]  panic+0x349/0x880
[  743.567295][   T31]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  743.567319][   T31]  ? __pfx_panic+0x10/0x10
[  743.567352][   T31]  ? irq_work_queue+0xd1/0x150
[  743.567369][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  743.567387][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  743.567403][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  743.567418][   T31]  ? nmi_trigger_cpumask_backtrace+0x251/0x320
[  743.567443][   T31]  watchdog+0x1097/0x10a0
[  743.567462][   T31]  ? watchdog+0x1ea/0x10a0
[  743.567483][   T31]  ? __pfx_watchdog+0x10/0x10
[  743.567499][   T31]  kthread+0x7b7/0x940
[  743.567522][   T31]  ? __pfx_watchdog+0x10/0x10
[  743.567539][   T31]  ? __pfx_kthread+0x10/0x10
[  743.567557][   T31]  ? __pfx_kthread+0x10/0x10
[  743.567577][   T31]  ? __pfx_kthread+0x10/0x10
[  743.567596][   T31]  ? __pfx_kthread+0x10/0x10
[  743.567616][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  743.567630][   T31]  ? lockdep_hardirqs_on+0x9d/0x150
[  743.567647][   T31]  ? __pfx_kthread+0x10/0x10
[  743.567669][   T31]  ret_from_fork+0x4b/0x80
[  743.567684][   T31]  ? __pfx_kthread+0x10/0x10
[  743.567704][   T31]  ret_from_fork_asm+0x1a/0x30
[  743.567740][   T31]  </TASK>
[  743.567987][   T31] Kernel Offset: disabled