last executing test programs:

25m40.829944484s ago: executing program 4 (id=5):
landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
gettid()
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50)
r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x5, 0x9, 0x0, r6, 0x100}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20)
request_key(&(0x7f00000000c0)='rxrpc_s\x00', 0x0, 0x0, r5)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378)

25m37.443971011s ago: executing program 4 (id=22):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x28280, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a})
syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0)
io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
r5 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x8006605, 0x10000, 0x1, 0x36}, 0x0, &(0x7f0000000140)=<r6=>0x0, 0x0)
syz_io_uring_submit(0x0, r6, 0x0, 0x0)
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100)

25m30.57242834s ago: executing program 32 (id=14):
syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="ff0012ffffffaaaaaaaaaa2b08004502005800000000002f9078ac1414bbffffffff248065580000000000000800000086dd080088be08000000100000000100000000000000080022eb00000000200000000200000000000004000000000800655800000000"], 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'user.', '/dev/ocfs2_control\x00'}, 0x0, 0x0, 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
accept$inet(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000)
write$UHID_INPUT2(r1, &(0x7f0000000900), 0x6)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xa00)
ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000040)={0x1, 0x6})
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

25m20.519228997s ago: executing program 33 (id=22):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x28280, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a})
syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0)
io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
r5 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @raw32={[0x0, 0x100]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x8006605, 0x10000, 0x1, 0x36}, 0x0, &(0x7f0000000140)=<r6=>0x0, 0x0)
syz_io_uring_submit(0x0, r6, 0x0, 0x0)
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100)

21m47.005492936s ago: executing program 5 (id=302):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
r1 = socket(0x2b, 0x1, 0xa0c7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00'})
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x100, 0x2000004, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x264, 0x7, 0x1, 0x6, 0xfd, 0x40009, 0x1, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0xa, 0x20001e58, 0x8, 0x0, 0x3, 0x1539b804, 0x3e, 0x1, 0x2]})
r2 = socket(0xa, 0x3, 0x3a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
recvfrom(r2, &(0x7f0000000140)=""/62, 0x3e, 0x120, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
pipe2(&(0x7f00000000c0), 0x80000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"})

21m45.214539194s ago: executing program 5 (id=305):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0x10)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0xc1}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3, 0x80000}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38)
socket$inet6_tcp(0xa, 0x1, 0x0)

21m44.571732795s ago: executing program 5 (id=306):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt(0xffffffffffffffff, 0x114, 0x271d, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00'})
r6 = fcntl$dupfd(r3, 0x406, r3)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)

21m43.191741538s ago: executing program 5 (id=307):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
timer_settime(0x0, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x9e9d1000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)

21m40.317574703s ago: executing program 5 (id=310):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
timer_settime(0x0, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x9e9d1000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)

21m24.481292354s ago: executing program 34 (id=310):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
timer_settime(0x0, 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x9e9d1000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)

19m41.255326141s ago: executing program 6 (id=448):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='pcspkr', 0x6)
close(r1)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0x1d6b', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6)
close(r3)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')

19m37.462680955s ago: executing program 6 (id=453):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = mq_open(0x0, 0x2, 0x40, 0x0)
mq_notify(r3, &(0x7f0000000640)={0x0, 0x30, 0x0, @tid=r0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x4)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='ext4\x00', 0x0, &(0x7f0000000300)='overlay\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0)
r4 = semget$private(0x0, 0x4000, 0x0)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140))
chdir(&(0x7f0000000140)='./bus\x00')
r5 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$FUSE_CREATE_OPEN(r5, 0x0, 0x0)

19m35.498175042s ago: executing program 6 (id=455):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x6, 0x0)
close(0xffffffffffffffff)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xb618, 0x20fc, 0x8, 0xe, 0xd619, 0x10009, 0x3, 0xfffdfffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @remote}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @mcast1, 0x1}}}, 0xe9)
close_range(r2, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

19m33.014334554s ago: executing program 6 (id=459):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(&(0x7f0000000040), 0x0)
setns(0xc9, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x40c48, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback, 0x54}, 0x1c)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x4e21, 0xa, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x800, 0x5a, 0x2, 0xfffffffffffffe90, 0x7, 0x3, 0x980, 0x5}, {0x1, 0x3, 0x5, 0x1}, 0x9, 0x6e6bb9, 0x2, 0x0, 0x2, 0x2}, {{@in6=@mcast2, 0x4d4, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x0, 0x0, 0x8, 0x80, 0x5, 0x5}}, 0xe8)
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0)
bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

19m31.324512319s ago: executing program 6 (id=461):
r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x20040, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0)
r1 = gettid()
migrate_pages(r1, 0x3, 0x0, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@loopback, @initdev={0xac, 0x1e, 0xfe, 0x0}, @multicast2}, 0xc)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe00000"], 0x110)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))

19m29.047230037s ago: executing program 6 (id=467):
r0 = socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40)
syslog(0x4, &(0x7f0000000140)=""/179, 0xb3)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20)

19m11.823659197s ago: executing program 35 (id=467):
r0 = socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40)
syslog(0x4, &(0x7f0000000140)=""/179, 0xb3)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20)

16m49.28142954s ago: executing program 36 (id=654):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2)
close(0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x2, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f0000000900)={{0x6, 0x8}, 'port0\x00', 0x1, 0x20, 0x9, 0x8, 0x30, 0xfffffffb, 0x59, 0x0, 0x5, 0xb})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
msgrcv(0x0, &(0x7f0000000100)={0x0, ""/181}, 0xb9, 0x2, 0x1000)

14m58.280968589s ago: executing program 37 (id=799):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000300)={[{@prjquota}, {@nogrpid}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}, 0x0}, {@orlov}, {@debug}, {@usrquota}, {@grpid}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@mblk_io_submit}, {@usrjquota_path={'usrjquota', 0x3d, './file0/../file0/../file0'}}], [], 0x2c}, 0xfe, 0x513, &(0x7f0000000b00)="$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")
mmap$IORING_OFF_SQ_RING(0x0, 0xf, 0x2000007, 0x20010, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(0x0, 0x7, 0x80)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8002, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})

13m26.530424346s ago: executing program 4 (id=816):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt(0xffffffffffffffff, 0x114, 0x271d, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00'})
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
r7 = fcntl$dupfd(r3, 0x406, r3)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)

13m21.027893669s ago: executing program 4 (id=932):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x759e, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$sock_int(r1, 0x1, 0x45, 0x0, &(0x7f0000000040))
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x1, 0x5, 0x0)
setreuid(0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
listns(&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x0, 0x0, 0x8000000000000001}, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
epoll_create1(0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400885d)

13m17.221946014s ago: executing program 4 (id=937):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020)
rename(&(0x7f0000000580)='./file0\x00', 0x0)
mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

13m1.450390952s ago: executing program 38 (id=937):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020)
rename(&(0x7f0000000580)='./file0\x00', 0x0)
mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

12m35.587688804s ago: executing program 39 (id=980):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4000010)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
sysinfo(&(0x7f00000000c0)=""/8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000018000103010c7002fadbdf2501"], 0x14}}, 0x8854)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004041)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd)
mkdirat$cgroup(r0, 0x0, 0x1ff)
syz_open_dev$vcsa(&(0x7f0000000000), 0x100000000000, 0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x2808080, &(0x7f00000000c0)=ANY=[], 0x83, 0x2b0, &(0x7f0000000680)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180))
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0xffffffff}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x4008080)
r5 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000180)='THAWED\x00', 0x7)

10m27.547429489s ago: executing program 8 (id=1142):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x7b0c, 0x80)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0x3}, {0xa, 0x4e21, 0x9, @mcast1, 0x30}, r3, 0x8004}}, 0x48)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

10m26.871600211s ago: executing program 8 (id=1145):
syz_open_pts(0xffffffffffffffff, 0x81)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'})
r1 = syz_io_uring_setup(0xf0c, 0x0, 0x0, &(0x7f0000000000)=<r2=>0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x3208}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0xa)
fchdir(r6)
ftruncate(0xffffffffffffffff, 0x2007ffb)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

10m24.805541838s ago: executing program 8 (id=1146):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x4800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r5 = socket(0xa, 0x3, 0xff)
recvmmsg(r5, 0x0, 0x0, 0x62, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r6, 0x2000009)
sendfile(r0, r6, 0x0, 0x7ffff004)

10m23.064415191s ago: executing program 8 (id=1147):
sched_setscheduler(0x0, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000740)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(0x0, 0xdafbe5d6891b6e4)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)='^\x00', 0xfffffffffffffffb)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00')

10m21.043127814s ago: executing program 8 (id=1149):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=""/245, &(0x7f0000000a00)=""/75, &(0x7f0000000a80)=""/45, 0x80a0000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0000000400000008000000070000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f70000000000000000000000fff50000000000000000"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/55, 0x37}, {0x0}, {0x0}], 0x3, 0x4, 0x7e, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[{0x0, 0x3, 0x9, 0x1}, {0x3, 0x4, 0xb, 0xa}, {0x3, 0x4, 0x8, 0xc}, {0x0, 0x1, 0xf, 0x1}, {0x4, 0x3, 0x1, 0xb}, {0x2, 0x1, 0xc, 0xc}], 0x10, 0x7fff}, 0x94)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
r8 = dup(r7)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x7}, {0xeb4, 0x8007}, 0x10000004, 0x7})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0)

10m13.093829518s ago: executing program 8 (id=1157):
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008008)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0x90e, 0x4)
sendto$inet(r6, &(0x7f0000000100)="1ce0", 0xffeb, 0x90c, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xc, 0x5, 0xf497})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001010000000000000700000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x8fab185, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904"], 0x0)

9m54.818144192s ago: executing program 40 (id=1157):
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008008)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0x90e, 0x4)
sendto$inet(r6, &(0x7f0000000100)="1ce0", 0xffeb, 0x90c, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xc, 0x5, 0xf497})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001010000000000000700000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x8fab185, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904"], 0x0)

9m28.408499283s ago: executing program 9 (id=1206):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)=0x5)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x1}}, 0x30)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./nfsd\x00', 0x910)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x31)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
pipe2$9p(&(0x7f0000000240), 0x84000)
r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
mknodat(r5, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x4)
r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r6, 0x0, 0x0)

9m27.026849228s ago: executing program 9 (id=1208):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0xc1}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x80000}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38)
socket$inet6_tcp(0xa, 0x1, 0x0)

9m25.672917668s ago: executing program 9 (id=1210):
syz_open_pts(0xffffffffffffffff, 0x81)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'})
r1 = syz_io_uring_setup(0xf0c, 0x0, 0x0, &(0x7f0000000000)=<r2=>0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x3208}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0)
ftruncate(r6, 0x2007ffb)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

9m24.802477275s ago: executing program 9 (id=1212):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000200)={'pcmda12\x00', [0x80000005, 0xe00, 0xffff, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x2, 0x21, 0x0, 0x2, 0x36683148, 0x3800000, 0x5, 0x100, 0x102, 0x401, 0x1, 0x81, 0x1, 0x6, 0xc, 0x9, 0x40, 0x7, 0x6, 0xa4, 0x7, 0x6, 0xbc, 0x1]})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0)
r4 = syz_clone(0x20000000, &(0x7f00000009c0)="31c56fb6278b2d04c74f608b1bb0c74c57e4a4d3831c2abd7282ff493ba6bd5524cc38928036d0b8f9788ecd586b41cd47b346b147d5c2af131122a7e0ac4aab6445e7f882244c44625dbcb28d9bbaedae06c30088fda4404eef7df4f60c4e9d8b19a818b457b46db8e0fe136b96723b7cbe4f882d6d93c4d4ce942de085a0864db1a45e1e533d78fddead05801eea6d92d5783b77c3d699a9caa3fbfbb204c301ef29ac62524ad0fd33e51eefa2df57d991fb113ea6b93930f7dfae47be369766d15e7a6cef6ce12953b3ee5f5a7b923ab7d3f9eabbe0c33eb9ed3517f81b0f29c83a920a1a8d39a8a4102e2c38e5d725232855fceda8122fdc8dfe3b364ef594c8fc850b1b0d576762c777defd05f2db32c985724735b67018198a36a1a183a7b054ee0c92a3630c94a27f68f5cb7dc1fa24ef0fd770369c226771cce066508c8da28050475f0f356d6117b0bdde88d715b880e2ba539cfe8a6803eaa842cdab5dc35460dcfd0c152755cba154fd86b91a5206936770d4279cebcd4f683444be52d08159cae87f036a9cf98b4282953db18da0fd0e257721f3160e75b08a0cc83a4d8af79e2b32244346ac39d56006fdd0ee5a928bf15a8502153ed965d66d328f46964234e241c5ecc2a3e0f22f4e7f32aa8696b2631a1ea4550f0000000000000068bcf844c84e883bc1b530935a413b35f06cc66f17efd951b1d6fd678551d3c5b4c71b7e8fa77f7ab0bc823c544147a18c4f948403521e73051a1ace9cd2f86fdad6e37d5c0aaf50d9c81336f5c749c4bb2299d167bec5e3cfe63e945809a0e2abfba592a6486bb834c4b8425fab7fa4230839d1978872f5710c8a8fb7bc100f1f57d221a0267da37ebbe67c2998f8103020f4d48b1c004a6b732529a0400f19a6f8d51210bd71eaa7594970ffa3a746ef5656417d9cf158a2cf8394569814f46936fb4b401139759d40325a4f61053869be04000000000000000000", 0x2bf, 0x0, &(0x7f0000000040), &(0x7f0000000640)="87f86ad54ee0261301c23b3c8746c90026a82e48e738afbf01f000474531bc881eb05a34e6ddfb6b9a44be6c94ab176e64797e02eb61203b8e89efc641304045fc2cfef3fb56b318d331d08a196c150a9f4f508cc6b8f30008cc377ba5fe42a36b0be39cc1736a26f4130b9615fa058e95a600ad94253d2187c33875128327fda7d26723f9404e0c3f6f612437e0dcdbea61d05cb8bebeb5b2733b6392f0af08be")
write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_open_procfs(r4, &(0x7f0000000700)='net/netfilter\x00')
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0)
unshare(0x26020480)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff)
rmdir(&(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.0\x00')

9m22.732146437s ago: executing program 9 (id=1213):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0xc1}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3, 0x80000}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38)
socket$inet6_tcp(0xa, 0x1, 0x0)

9m21.995297003s ago: executing program 9 (id=1216):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$pppoe(0x18, 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x57da, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x17}, 0x0, &(0x7f00000000c0), &(0x7f00000001c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x1411, 0x1, 0x70bd29, 0x20003}, 0x10}}, 0x0)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000003c0)={0x6, 0xc, [0xa1, 0x6, 0x4]})
sendmsg$SOCK_DIAG_BY_FAMILY(r5, 0x0, 0x54840)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x25b, 0x10000, {0xffffffffffffffff}, {<r6=>0x0}, 0x1, 0x8})
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@mcast1, 0x4e20, 0x9, 0x4e24, 0x2, 0x2, 0x0, 0xa0, 0x4, 0x0, r6}, {0x3d46, 0x4, 0xfffffffffffffff7, 0x6, 0x80, 0x1, 0x98e, 0x5}, {0x8, 0xfffffffffffffff9, 0x0, 0x3}, 0x2, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x32}, 0xa, @in6=@private2, 0x3503, 0x0, 0x2, 0x5, 0xfae, 0x101, 0xc}}, 0xe4)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

9m6.577343577s ago: executing program 41 (id=1216):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$pppoe(0x18, 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x57da, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x17}, 0x0, &(0x7f00000000c0), &(0x7f00000001c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x1411, 0x1, 0x70bd29, 0x20003}, 0x10}}, 0x0)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000003c0)={0x6, 0xc, [0xa1, 0x6, 0x4]})
sendmsg$SOCK_DIAG_BY_FAMILY(r5, 0x0, 0x54840)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x25b, 0x10000, {0xffffffffffffffff}, {<r6=>0x0}, 0x1, 0x8})
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@mcast1, 0x4e20, 0x9, 0x4e24, 0x2, 0x2, 0x0, 0xa0, 0x4, 0x0, r6}, {0x3d46, 0x4, 0xfffffffffffffff7, 0x6, 0x80, 0x1, 0x98e, 0x5}, {0x8, 0xfffffffffffffff9, 0x0, 0x3}, 0x2, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x32}, 0xa, @in6=@private2, 0x3503, 0x0, 0x2, 0x5, 0xfae, 0x101, 0xc}}, 0xe4)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

4m7.631131767s ago: executing program 0 (id=1527):
syz_open_pts(0xffffffffffffffff, 0x81)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'})
r1 = syz_io_uring_setup(0xf0c, 0x0, 0x0, &(0x7f0000000000)=<r2=>0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x3208}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r6 = fsmount(r5, 0x1, 0xa)
fchdir(r6)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0)
ftruncate(r7, 0x2007ffb)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

4m0.621471087s ago: executing program 0 (id=1531):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt(0xffffffffffffffff, 0x114, 0x271d, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00'})
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
r5 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)

3m58.603541202s ago: executing program 0 (id=1534):
syz_usb_connect(0x3, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x2c, 0xaa, 0xa2, 0x10, 0x52b, 0x1803, 0xf50f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x66, 0x8, 0x10, 0x0, "", [{{0x9, 0x4, 0x10, 0xff, 0x0, 0xf1, 0x4b, 0x39, 0xd}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0})

3m57.188567113s ago: executing program 5 (id=961):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4000010)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
sysinfo(&(0x7f00000000c0)=""/8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000018000103010c7002fadbdf2501"], 0x14}}, 0x8854)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004041)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd)
mkdirat$cgroup(r0, 0x0, 0x1ff)
syz_open_dev$vcsa(&(0x7f0000000000), 0x100000000000, 0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x2808080, &(0x7f00000000c0)=ANY=[], 0x83, 0x2b0, &(0x7f0000000680)="$eJzs3c9qK1UYAPBvmkmbqJAsXInggC5cldv7BLdIhYtdKbPQjYo3F6QJFxoIXBXjXbkXXPkOvoMP4MY3cOFScOddiCPJTP52EhqpqfT+fpt+mXO+b845c9qu5uST1wcXj54MHz/76tdotZI4eBAP4nkS3TiImW8CALhLnhdF/FGUIg639k2n7UWn+nSwnxECADdt9f8/APAi+ODDj947PT8/ez/LWhGDb0d5EhGDZJSX7aeP4/PoRy/uRSf+iijmyviVh+dnkWbprN6oHXnE4OOfq8+nv0dM80+iE92r+e8+PD87yUrx1mA8yid3nvxsxktJxGmRlIXuRydejSiaURVZ5N+vyY/8MN5+84dq/H/34jg68ctn8ST68WhaYpH/9UmWvVN8/+eX5QzyiGQ8yo+m/RaKxr6eCQAAAAAAAAAAAAAAAAAAAAAAd99xNtddPj9ndhrg8XF9+/R8oEbN+UDVCT/jpfN17mVZNjvGZ5Q3o8xP47U00ludPAAAAAAAAAAAAAAAAAAAAPxPDJ9+cfFpv9+7XAl+Ktav1ATVG/1RXUmXmtLVpu11aoKLHyN2z7pOEI1qaP3kyi1mE7p2wXRz56NdBtauqxMHm9Yw7Uc5+O92X4Q3dprgJCj+xTrPdtdkk2zp3Ijh01b9Jlname2q2OVw+oDamzbtalDULF1jY9bhdSfY3t7n8OWb3bSTGTfni7napzV5kktXmjf8m7Im+S/+/AAAAAAAAAAAAAAAAAAAAEsWL/3Gb1can93KkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg7xbf/z8Port+ZT0YV8m9uvS14OhyWHPb7p6nCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB33TwAAAP//L+lWtg==")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180))
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0xffffffff}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x4008080)
r5 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000180)='THAWED\x00', 0x7)

3m53.187180512s ago: executing program 0 (id=1539):
r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x20040, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0)
r1 = gettid()
migrate_pages(r1, 0x3, 0x0, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@loopback, @initdev={0xac, 0x1e, 0xfe, 0x0}, @multicast2}, 0xc)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe00000"], 0x110)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))

3m51.048604902s ago: executing program 0 (id=1542):
syz_open_pts(0xffffffffffffffff, 0x81)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'})
r1 = syz_io_uring_setup(0xf0c, 0x0, 0x0, &(0x7f0000000000)=<r2=>0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x3208}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0xa)
fchdir(r5)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0)
ftruncate(r6, 0x2007ffb)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

3m42.579801234s ago: executing program 0 (id=1549):
sched_setscheduler(0x0, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000740)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(0x0, 0xdafbe5d6891b6e4)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)='^\x00', 0xfffffffffffffffb)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00')

3m39.447532362s ago: executing program 42 (id=961):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4000010)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
sysinfo(&(0x7f00000000c0)=""/8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000018000103010c7002fadbdf2501"], 0x14}}, 0x8854)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004041)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd)
mkdirat$cgroup(r0, 0x0, 0x1ff)
syz_open_dev$vcsa(&(0x7f0000000000), 0x100000000000, 0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x2808080, &(0x7f00000000c0)=ANY=[], 0x83, 0x2b0, &(0x7f0000000680)="$eJzs3c9qK1UYAPBvmkmbqJAsXInggC5cldv7BLdIhYtdKbPQjYo3F6QJFxoIXBXjXbkXXPkOvoMP4MY3cOFScOddiCPJTP52EhqpqfT+fpt+mXO+b845c9qu5uST1wcXj54MHz/76tdotZI4eBAP4nkS3TiImW8CALhLnhdF/FGUIg639k2n7UWn+nSwnxECADdt9f8/APAi+ODDj947PT8/ez/LWhGDb0d5EhGDZJSX7aeP4/PoRy/uRSf+iijmyviVh+dnkWbprN6oHXnE4OOfq8+nv0dM80+iE92r+e8+PD87yUrx1mA8yid3nvxsxktJxGmRlIXuRydejSiaURVZ5N+vyY/8MN5+84dq/H/34jg68ctn8ST68WhaYpH/9UmWvVN8/+eX5QzyiGQ8yo+m/RaKxr6eCQAAAAAAAAAAAAAAAAAAAAAAd99xNtddPj9ndhrg8XF9+/R8oEbN+UDVCT/jpfN17mVZNjvGZ5Q3o8xP47U00ludPAAAAAAAAAAAAAAAAAAAAPxPDJ9+cfFpv9+7XAl+Ktav1ATVG/1RXUmXmtLVpu11aoKLHyN2z7pOEI1qaP3kyi1mE7p2wXRz56NdBtauqxMHm9Yw7Uc5+O92X4Q3dprgJCj+xTrPdtdkk2zp3Ijh01b9Jlname2q2OVw+oDamzbtalDULF1jY9bhdSfY3t7n8OWb3bSTGTfni7napzV5kktXmjf8m7Im+S/+/AAAAAAAAAAAAAAAAAAAAEsWL/3Gb1can93KkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg7xbf/z8Port+ZT0YV8m9uvS14OhyWHPb7p6nCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB33TwAAAP//L+lWtg==")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180))
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0xffffffff}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x4008080)
r5 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000180)='THAWED\x00', 0x7)

3m27.364644462s ago: executing program 43 (id=1549):
sched_setscheduler(0x0, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000740)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(0x0, 0xdafbe5d6891b6e4)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)='^\x00', 0xfffffffffffffffb)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00')

32.754400449s ago: executing program 3 (id=1715):
syz_open_pts(0xffffffffffffffff, 0x81)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'})
syz_io_uring_setup(0xf0c, 0x0, 0x0, &(0x7f0000000000)=<r1=>0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
syz_io_uring_submit(0x0, r1, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x3208}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0xa)
fchdir(r5)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0)
ftruncate(r6, 0x2007ffb)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

26.198101702s ago: executing program 2 (id=1718):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
pipe2$watch_queue(0x0, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x4)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65", 0xb}], 0x1)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r5, 0x0, r4})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0)
unshare(0x20040600)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfffffffdffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$pptp(0x18, 0x1, 0x2)
sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="6a7e85686c70a0abce731f4fb2b1e7d5b47079a65602e22d72ae4b315e3b12562d9da1a04d60b3a2f8c5515e76ae8ea05e4a9f598b8e235f582c566c66ca40ee5c82c6f886dbf8abba74a62ade10b1f71173a714ea0fadab908f0ab3d5c3a0ad6dae216850eb8bbbd3a01de180042be2590bfd718ddd1de7bddcb184686aa54d9dee44c7d315848e29c5f89adde9548c6fc330b98d73bc07", 0x98}], 0x1, &(0x7f0000000540)=[{0xd0, 0x109, 0xfff, "7f003f154a94a3266c00c79de143d1122822693c3d6354ace3dc41ccd1accf5fb123221b616b40ff018d968e01e6c853ec1103b714a48abce9566b6adc4ab1c698322d493e3e45385a6e7b133e1e1fd2e540a9c176e37ebbe1d91a0b239422ed8a6640d72dd6b8cd1c454b74d00c473fecd8514b0fd82234d21169df7be11f3ae5de1571bca66b27c5e85aee8bf8e650d9d4e1c4cdeb76bca776e92e96e246c266dff08ab083994a899696500b7217a1e511d2c69f48adc27b78145225"}, {0x48, 0x119, 0x8, "edf238a4a5b6b03a582119b1937bcde008beb0380603b841b90be5600a918e3485c4c70bd24bced104f1be817feca48dae14e693ab53a7f6"}], 0x118}, 0x10)
bind$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
openat(0xffffffffffffffff, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0)

26.196353171s ago: executing program 3 (id=1732):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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")
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x119)
write$UHID_INPUT2(r1, &(0x7f0000000900), 0x6)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xa00)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)

23.028754551s ago: executing program 3 (id=1724):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0)
readahead(r0, 0x7f, 0x803)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shutdown(0xffffffffffffffff, 0x32ce970513f32900)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4005)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4)
connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000406)
pwritev(r3, &(0x7f00000002c0)=[{0x0}], 0x1, 0x7, 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
open_by_handle_at(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000fe00020007"], 0x2241c2)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x0)
setresuid(0x0, 0xee01, 0x0)

22.295935108s ago: executing program 2 (id=1726):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1c5, &(0x7f0000000340)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
dup(r0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0)
landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x0, 0x6d}, 0x2c)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
setns(0xc9, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xd0)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x7800)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x403e, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x82\xefZn\xb1\xa2\xaa\xe6Z\xeaF\r\xc6\xe5w\x7f\xb8O\x106\x19yP\x8d\xc1\xce\xac\xa0\xc1\xa1\x80<Qe\x14\x00\x10\x7f\x18\x90\x9b\xcc.\xc9\xa1\xbe\xce\vmq\xb5\xfa-\xa6\x9c\xb9\xfa{\xed\xd0\xce\x1e\xe8\xef\x16c\x00\xc0zH\x12\xf9\xffr\xd8')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='(:^.!!\x00')
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0xc1000, 0x0, 0x0, 0x0, &(0x7f0000000000))
rmdir(&(0x7f0000000080)='./bus\x00')
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

22.295579942s ago: executing program 7 (id=1727):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540001001809a71cfc55ba49b6cb96a4909110c213ec1789fb3267195d5dac2e74f536b40584c53090064bac656bc624375ff0d26f6025f722f9f0a24eb3e98f304f2b4333ac846e7e40933ead63a6867e6bc37c50bb323693f4a6e978fe4dec860a7b2a303668c5bd249c3b6d6534477959bd7205b3542a0fb829971363e7039c5a830ad7be76fd16dad3a136904a629fc74164b8f216ebbcebdcd51b56", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2503000000400001802c000400140001000200fffcac14142f00000000000000001400020002004e21ac1414aa00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r2, 0x0, 0x2400c000)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
recvmsg$unix(r4, &(0x7f0000000540)={&(0x7f0000000180), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x3, &(0x7f00000005c0)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x40)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_connect$uac3(0x2, 0x9d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100300000010d118042d40000102030109028b000301090008080b0202012430010904000000010130000a0400000000000000ff0904010000010230000904010101010230000a2402016a020c2489070a2402029a200200080309240201360f050908090501090004007f090a25250700000003060009040200000102300009040201010102300009"], &(0x7f0000000900)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0x8, 0x3, 0x10, 0x40, 0x4}, 0x35, &(0x7f0000000a00)=ANY=[@ANYBLOB="050f35000214100a002201f6ff0000090080400000cf0000001c100a0224fcedff0087c29c7aea7200300000003f0000851e3182f40100c000008ef96d8bfac1a67852a96662aa9292c95073a30f4a659521f44ffc0f7974ae2829ea5dc8c979de47acfd79260ed95ea2aa09b39d402d1a17d4bb57dea7f0bb52dcb9006b937cb98b0b1f67d181b89c18da154ca192f58e742a97a3cb4ef5d2754a2995a0102b5d5b2814e2badd90ece558f3212f6393ac"], 0x3, [{0x8f, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xad, &(0x7f0000000800)=@string={0xad, 0x3, "f20250e8199595377001cb1f94b91e749f7675bcf4e9dea7343008b20c25ba29a9418356d4940edc36430cc7a2564d74e6866f96e86c30a7620290a4366ca1686a896a5fc8768bb01a3ba41181b1c4ee4bba6a91d5271ac89da91d718d843a7e00ccfd0dd827b122b7f79046083945c6d1cd01df62b99898facbe92cc4a82d81f837f1ed513a1f25a24864db6e55c2c402624bc6fa23d65254ceee73551d33d34715741b045a54fe5a3283"}}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, 0x0, 0x20040800)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000000))
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000003c0)={&(0x7f00000007c0)=[{0x6, 0x4201, 0x0, 0x0}], 0x1})

17.534360335s ago: executing program 7 (id=1729):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x7b0c, 0x80)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0x3}, {0xa, 0x4e21, 0x9, @mcast1, 0x30}, r3, 0x8004}}, 0x48)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

17.399039697s ago: executing program 3 (id=1731):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0x10)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3, 0x80000}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38)
socket$inet6_tcp(0xa, 0x1, 0x0)

17.292813624s ago: executing program 2 (id=1733):
sched_setscheduler(0x0, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000740)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(0x0, 0xdafbe5d6891b6e4)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)='^\x00', 0xfffffffffffffffb)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00')

17.188391173s ago: executing program 7 (id=1734):
syz_open_pts(0xffffffffffffffff, 0x81)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'})
r1 = syz_io_uring_setup(0xf0c, 0x0, 0x0, &(0x7f0000000000), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0xa)
fchdir(r5)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0)
ftruncate(r6, 0x2007ffb)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x21)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

12.889050134s ago: executing program 3 (id=1735):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
read$FUSE(r0, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x3)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x0, 0x5004)
syz_emit_vhci(0x0, 0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x480c5)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20008845)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340)='1t', 0x2)
r4 = syz_open_dev$hiddev(0x0, 0x6, 0x400000)
ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000001700)={{0x3, 0x100, 0x0, 0x2, 0x2, 0x2}, 0x1af, [0x6, 0x3, 0x5, 0x0, 0x90, 0x2290, 0xb, 0x2, 0x107, 0x1, 0x0, 0x1000, 0x0, 0x8e, 0x0, 0x2, 0x4, 0x8, 0x1, 0x10, 0xfffff801, 0x6, 0x7, 0xffffff81, 0x2, 0x1000, 0x3, 0x8, 0x1, 0x8, 0x1, 0x6, 0xd, 0x7, 0x3, 0x5, 0x7, 0x5, 0x0, 0x3ff, 0xff, 0x3f, 0x9, 0x1bb, 0x2, 0x3, 0x2, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1, 0x0, 0x3, 0x374, 0x9, 0x1, 0xfffffff8, 0x67a, 0x2, 0x6, 0x9, 0x6, 0x10001, 0x18f0, 0x5, 0x4, 0x5, 0x60de162a, 0x401, 0x6ce, 0xd, 0x6, 0xb, 0x2, 0x4, 0x10, 0x7ff, 0x3, 0x4, 0x5, 0x0, 0x8, 0x40000000, 0x6, 0x3, 0x6, 0x0, 0x101, 0x7, 0x3, 0x5, 0x0, 0x0, 0x1000000, 0x2, 0x7, 0x2, 0x2, 0x7, 0x2, 0x80000000, 0x81, 0x7fffffff, 0x5, 0x998, 0x8, 0x3b76, 0x2, 0x6, 0xbd21, 0x7, 0x5, 0xfff, 0x5, 0x10001, 0x8001, 0x8, 0xff, 0x921b, 0x3, 0x80000001, 0x9, 0x81, 0xf0c, 0xd87, 0x10, 0x4c, 0x7fffffff, 0xfffffe01, 0xfffffffe, 0x7, 0xd, 0x2, 0x6, 0x243a, 0x2, 0x6, 0x3, 0x0, 0x0, 0x6, 0x2, 0x6, 0x6, 0xb, 0x0, 0x6, 0x2, 0x2, 0x2, 0x6, 0xfff, 0x6, 0xffff, 0x8825, 0x6, 0xe62c, 0x5, 0x4, 0x115, 0x40, 0xe4, 0xff, 0x37c, 0x8, 0xf3, 0x3, 0x2, 0x9, 0x877, 0x9, 0x2, 0x4, 0x7ff, 0xffff828b, 0x5, 0x15a, 0x8, 0x8, 0x5, 0x8, 0xd95, 0x2, 0xfffffff3, 0x80000000, 0x2, 0x101, 0x4, 0x2, 0x5, 0x9, 0x0, 0xc64, 0xfffffffc, 0x8b, 0x57, 0xfffffff8, 0x8000, 0x4, 0xf, 0x4, 0x8cbc, 0x9, 0x9, 0x4, 0x1, 0x6, 0x2ae, 0x0, 0xca5, 0x7, 0x6, 0x18, 0x200000, 0x3, 0xffffffff, 0x2, 0xffff, 0x5, 0x4, 0x3, 0x9, 0x80000001, 0x7ff, 0x7ed8, 0xfff, 0x2, 0x4, 0x8a, 0x7fff, 0x0, 0x9, 0x6, 0x0, 0x80, 0xe9f4, 0x1, 0x2, 0x4, 0x8000, 0x40, 0xfffffffe, 0x3, 0x2, 0x5e, 0xca, 0x6, 0xfffff000, 0x5, 0x8000, 0x8, 0x10, 0xfffff6dd, 0x2, 0x2, 0x0, 0x2, 0x8000, 0x0, 0x83a9, 0x2, 0x7, 0x5, 0x1, 0xe73f, 0x9, 0x4, 0x7, 0x2, 0x6, 0x6, 0x6, 0x3, 0x35fc, 0x3, 0x454, 0x6, 0x6, 0xc75, 0x9, 0x9, 0xea75, 0x2, 0xa4, 0x1, 0x5, 0x8, 0x6, 0xc, 0x0, 0x3db, 0x899a, 0x50, 0x10001, 0x9, 0x4, 0xa5, 0xb0, 0x4, 0xfffffff7, 0x9, 0x1, 0x0, 0xbd79dc, 0x1ff, 0x4, 0x5, 0x9, 0xe, 0x7, 0x8, 0x10001, 0x5790225a, 0x5, 0x1ff, 0x8, 0x919, 0x6910, 0x0, 0xff, 0x9, 0x9, 0x7, 0x5, 0x2b5, 0xaff, 0x9, 0xfffffffe, 0x4, 0xffff, 0x5, 0x6, 0xdc, 0x3, 0x5, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x70, 0x5, 0x8000, 0x8, 0x8000, 0xffffffff, 0x0, 0x1000, 0xe4, 0x1, 0x18, 0x0, 0x31, 0x6, 0xb7f, 0x1, 0x4, 0x7fff, 0x101, 0xb86, 0x7, 0x3, 0x1, 0x0, 0x1, 0x4, 0xc, 0x4, 0x400, 0xffffffff, 0x0, 0x1, 0x8, 0x5, 0x3, 0x2, 0x1ed, 0x101, 0x3, 0x6d4f, 0x373a, 0x3ff, 0x7, 0x1, 0x4, 0x4, 0xe, 0x1bb, 0x4, 0x9023, 0x4, 0x8, 0x3, 0x401, 0x4, 0x1, 0xb, 0xb, 0x42d7, 0x300000, 0x7, 0x9, 0x9, 0xc8b, 0x4, 0x10, 0x6, 0x200, 0xd, 0xa, 0x4, 0xd46, 0x8, 0x9, 0x9, 0x1, 0x7, 0x100, 0x2, 0xfffffff7, 0xfffffff7, 0x0, 0x2e00, 0x80, 0x6, 0x5f1c8e65, 0xe51, 0x0, 0x6, 0x9a9, 0xe87, 0x5, 0x6, 0x7, 0x8, 0x10000, 0x200, 0xfffff365, 0x800, 0xffffffff, 0x6, 0xfffffe01, 0x8, 0x40, 0x1000, 0x5, 0x1fffc, 0x9, 0x1, 0x800, 0x1, 0x6, 0x2e2, 0x1, 0x0, 0xef, 0x4e2, 0x4, 0x1, 0x5, 0x7, 0x0, 0x3, 0x4, 0x7, 0x44a, 0x8, 0x400000, 0x8, 0x7, 0x1, 0x7fff, 0x1, 0x814, 0x8, 0x6, 0xd, 0x8001, 0x8, 0x2, 0x9, 0x3, 0xffff092d, 0xffffffc0, 0x5, 0x8, 0x4059, 0x8, 0x5d45, 0x7, 0x7fffffff, 0x7fff, 0x59, 0x7, 0x8, 0xb, 0x2, 0x3, 0x6, 0xffff, 0x40, 0x5, 0xad, 0x7fff, 0x400, 0xfffffff8, 0x1, 0xd02d, 0xffffffff, 0x7f, 0x0, 0x7f, 0x8, 0x3, 0xff, 0x8, 0x7d, 0x6, 0x40, 0xffffffff, 0x3, 0xb, 0x9, 0x6, 0x1, 0x266, 0xfff, 0x1, 0x4, 0x1ff, 0x7ec, 0x6, 0x7, 0xffffffff, 0x3, 0x7, 0x7, 0xa, 0xfffffff8, 0x0, 0xfd74, 0x80000001, 0x2, 0x8, 0x4f0, 0x1, 0x4, 0x8, 0x9, 0x80000001, 0x6, 0x6, 0x2, 0x88000000, 0x7000, 0x7b, 0x0, 0x3ff, 0x1, 0x8, 0x2, 0x3, 0x2, 0xf, 0x81, 0x80000001, 0x7, 0x3, 0xfffffff0, 0x2, 0x78, 0x2, 0xfffffeff, 0x2, 0xc, 0xc8d, 0x22dd, 0x5fe1, 0x800, 0x6, 0x488, 0x2, 0x5, 0x8000, 0x4, 0x2, 0xfffffff7, 0x0, 0xda, 0xde, 0x6, 0x80, 0x200, 0x6, 0x6, 0xd, 0x1, 0x1ff, 0x0, 0x8, 0xab, 0x6, 0x19722852, 0x7, 0x9503, 0x1, 0x0, 0x5, 0x7, 0xfffffffe, 0xd, 0x101, 0x0, 0xeb, 0x40, 0x4000000, 0xfffffffb, 0x6, 0x1, 0x3, 0x4, 0xc, 0x10001, 0x9, 0x9, 0xfbe, 0x7, 0x5d58, 0x8000, 0x8000, 0xfffffffc, 0x73ca, 0x6, 0x401, 0x3, 0xc, 0xffffd725, 0x5, 0x800, 0x3, 0x7, 0x7, 0x400, 0x3, 0x30, 0x3, 0x3, 0xed8, 0x8, 0x8001, 0x3, 0x1d3f, 0x7, 0xfcf4, 0xffffff7f, 0x6, 0x8, 0x8, 0x1e90, 0x401, 0x0, 0x100, 0x6, 0xfdf5, 0x7, 0xf, 0x8, 0x7ff, 0x8, 0x7, 0xffffff6a, 0x9, 0x8, 0xc, 0x2, 0x4, 0x100, 0xffff, 0x1000, 0x5, 0x997, 0x1000, 0x2, 0x4, 0x436e, 0x2, 0x9ffe, 0x7, 0x4, 0x7, 0x4, 0x9, 0x101, 0x8, 0xb0, 0x400, 0x3, 0x2, 0xfffffff3, 0x6, 0x4, 0xfd4, 0xfffffffe, 0x895, 0x7, 0x8, 0x10, 0x0, 0xf8e, 0x3ff, 0x8, 0x1, 0x200, 0xffffec2f, 0x6, 0x47, 0x40, 0x6d, 0xf992, 0x0, 0x0, 0x2, 0x7f, 0x1d1, 0x8, 0x3, 0x1, 0x9, 0x4, 0x5, 0x85f7, 0x8, 0x4, 0x3, 0x8, 0x1, 0x8, 0x6, 0x5, 0x8, 0x0, 0x3254, 0x5, 0x7, 0x8000, 0x5, 0xfffffffa, 0x5, 0x0, 0x3, 0x100, 0xd763, 0xfffffff2, 0x1000, 0x1, 0x7, 0x6de, 0x44, 0x3, 0x935, 0xffffffff, 0x0, 0x5, 0x8, 0x1, 0xfffffff9, 0x0, 0x6, 0x0, 0x0, 0x8, 0x6, 0x80, 0x0, 0x5, 0x200, 0xa4df, 0x2, 0x9, 0x6, 0x9f2, 0x1, 0x58000000, 0xfffffffe, 0x8, 0x9, 0xfff, 0x9, 0x85, 0x4, 0xcf02, 0x4, 0x6, 0xfff, 0x1, 0x0, 0xf46e, 0xfff, 0xc36, 0x9, 0xc4000000, 0x9cc7, 0x2, 0x40, 0x7, 0x4dbd, 0x7, 0x4, 0x80, 0xb, 0x1, 0x5, 0x9, 0x3, 0x9349, 0xf, 0x8, 0x1, 0x7fff, 0x6, 0x7f, 0x7, 0x10001, 0x1c, 0x3f, 0x2, 0x73, 0x7f, 0xfffffffc, 0x7, 0x5, 0x0, 0x27, 0x0, 0x3, 0x3, 0x8, 0x8, 0x6, 0x4, 0xfffffffc, 0x8, 0x7f, 0x6, 0xfffffff4, 0xb, 0xfffffe01, 0x9, 0x4c, 0x4, 0x1, 0xae, 0x29, 0x4, 0x8001, 0x3, 0x5, 0x2, 0x1, 0x3, 0x0, 0x6, 0x1, 0x2400, 0xd, 0x2, 0x10001, 0xa3, 0xffffffff, 0x1, 0x6, 0x7, 0x2, 0x4, 0x0, 0x401, 0x8, 0x5, 0x6, 0xb27, 0x100, 0x2, 0x6, 0x81, 0x0, 0xb1, 0xfff, 0x8, 0x1, 0x5, 0xfffff800, 0x5, 0xbe3, 0x5, 0x1000, 0x6f, 0x9, 0x5ce9, 0x2, 0x10001, 0x6, 0x7fff, 0x3, 0x887, 0x401, 0xff, 0x1, 0x2, 0x7, 0xffffffff, 0xab, 0x9, 0x3e, 0x6, 0x7fffffff, 0xfff, 0x3ff, 0x1, 0x4, 0x6, 0x800, 0xffffffff, 0x100, 0x6, 0x8, 0x7fff, 0x9, 0x400, 0x3, 0x8001, 0xb9, 0x7, 0x7, 0x4, 0x80000001, 0x6, 0x2, 0x7f, 0x7fff, 0x9, 0x7fff, 0x1, 0x8, 0x5, 0x8, 0x159, 0x1000, 0x7, 0xe, 0x4d, 0x20008, 0x80000001, 0x887b, 0x8, 0xfa3, 0x9, 0x8, 0x9, 0x0, 0x6, 0x5, 0x6, 0x105, 0xff, 0xfe0, 0x7ff, 0xb, 0x3, 0x63, 0x1, 0x7, 0x0, 0xb677, 0x5, 0x3, 0x551d, 0x3, 0x4, 0xe47b, 0xfffffffe, 0x4, 0x101, 0x7, 0x9, 0x401, 0xb, 0x9, 0x1, 0xfffffff9, 0x80000000, 0xc, 0x0, 0x2, 0x75f04fe0, 0xfff, 0x40, 0xb, 0x2, 0x401, 0x7fff, 0x5, 0xff, 0x7fff, 0x80, 0x3, 0x2, 0xd, 0xb433, 0x5, 0x2, 0x3ff, 0xf02, 0x5, 0xf419, 0x2b, 0x6, 0x7, 0x8, 0x1, 0x5, 0x6]})

12.888051285s ago: executing program 2 (id=1737):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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")
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x119)
write$UHID_INPUT2(r1, &(0x7f0000000900), 0x6)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xa00)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)

12.886283875s ago: executing program 1 (id=1746):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0x10)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3, 0x80000}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38)
socket$inet6_tcp(0xa, 0x1, 0x0)

12.810150918s ago: executing program 7 (id=1738):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff)
ftruncate(r2, 0xf4240)
close(r2)
mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)='file0', 0x5)
close(r4)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
close(r5)
nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffd, 0x0, 0x10, @buffer={0x0, 0x0, &(0x7f0000000600)}, &(0x7f0000000640), &(0x7f0000000680), 0x4e20, 0x0, 0x0, &(0x7f00000006c0)})
close(r6)
write(r1, &(0x7f0000000300)='p:_est/event1 ./file0:0x0', 0x19)
getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280))

11.130064031s ago: executing program 1 (id=1739):
r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x20040, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0)
r1 = gettid()
migrate_pages(r1, 0x3, 0x0, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@loopback, @initdev={0xac, 0x1e, 0xfe, 0x0}, @multicast2}, 0xc)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe00000"], 0x110)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))

10.104219746s ago: executing program 1 (id=1740):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000400)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "ddbccf094c550200000000df4e4dbd0026249a6ebed6cc47890c190000000000000000000000000000000000000000ffffffff00", 0x40000025}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r1, 0xffffffffffffffff, 0xee01)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
sendfile(r2, r3, 0x0, 0x201f00)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="400c2300000002"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)={0x20, 0xe, 0xc3, "9e0fa81f2407029b621835ada5a2fbc0896da1a0d1a34c0599031d008d69f4fa16861aa680257546d209c4280e8924f0390338c72d3c6c760f23b2aa2dec51037a99c0ae88d6b3f173db53081651d383265f5d49a4898a304d4b08952625318286ee3e4d1e38156867dfaa75d2195334730ddcf9ebdf4a4aad7bc664b512afab04d12d6f586072efc85de33ab9b56b8f1f90c058736f7dd5cdd6eec59dda6a05af96ec8690446f157d911d483a1278e49a0936e427c7a3aa7873966d0dcdd99b5b9544"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0xc0, 0x1}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000640)={0x40, 0xb, 0x2, "ed80"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x4406}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, 0x0, &(0x7f0000000740)={0x40, 0x19, 0x2, ':2'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x401}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x79}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x4}})
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)="bc4b0d44f96f172b9fe425edcfa8ca98556ac3ca5a960a09335bdfe0c1b5751d0cf27765c20aafbeedf318e2e836e1820701f0dd8d9ad6fd6978d1ead6ab2dee28f75353736ccc0716680c4ba2330b62f00476ccf03a43bf", 0x58}, {&(0x7f0000000ac0)="b812420d61edb97e01962072c321db24498032f062cde90f7325542589cdf3a8eaacdfd83f8f92", 0x27}], 0x2, &(0x7f0000001040)}, 0x40004)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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")
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001140))
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
r7 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file1\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})
fallocate(r6, 0x20, 0x0, 0x8000)
truncate(&(0x7f0000002540)='./file2\x00', 0xe)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2)

10.100690467s ago: executing program 3 (id=1751):
r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x20040, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, 0x0)
r1 = gettid()
migrate_pages(r1, 0x3, 0x0, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@loopback, @initdev={0xac, 0x1e, 0xfe, 0x0}, @multicast2}, 0xc)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe00000"], 0x110)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))

10.086519228s ago: executing program 7 (id=1752):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
read$FUSE(r0, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x3)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x0, 0x5004)
syz_emit_vhci(0x0, 0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x480c5)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20008845)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340)='1t', 0x2)
r4 = syz_open_dev$hiddev(0x0, 0x6, 0x400000)
ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000001700)={{0x3, 0x100, 0x0, 0x2, 0x2, 0x2}, 0x1af, [0x6, 0x3, 0x5, 0x0, 0x90, 0x2290, 0xb, 0x2, 0x107, 0x1, 0x0, 0x1000, 0x0, 0x8e, 0x0, 0x2, 0x4, 0x8, 0x1, 0x10, 0xfffff801, 0x6, 0x7, 0xffffff81, 0x2, 0x1000, 0x3, 0x8, 0x1, 0x8, 0x1, 0x6, 0xd, 0x7, 0x3, 0x5, 0x7, 0x5, 0x0, 0x3ff, 0xff, 0x3f, 0x9, 0x1bb, 0x2, 0x3, 0x2, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1, 0x0, 0x3, 0x374, 0x9, 0x1, 0xfffffff8, 0x67a, 0x2, 0x6, 0x9, 0x6, 0x10001, 0x18f0, 0x5, 0x4, 0x5, 0x60de162a, 0x401, 0x6ce, 0xd, 0x6, 0xb, 0x2, 0x4, 0x10, 0x7ff, 0x3, 0x4, 0x5, 0x0, 0x8, 0x40000000, 0x6, 0x3, 0x6, 0x0, 0x101, 0x7, 0x3, 0x5, 0x0, 0x0, 0x1000000, 0x2, 0x7, 0x2, 0x2, 0x7, 0x2, 0x80000000, 0x81, 0x7fffffff, 0x5, 0x998, 0x8, 0x3b76, 0x2, 0x6, 0xbd21, 0x7, 0x5, 0xfff, 0x5, 0x10001, 0x8001, 0x8, 0xff, 0x921b, 0x3, 0x80000001, 0x9, 0x81, 0xf0c, 0xd87, 0x10, 0x4c, 0x7fffffff, 0xfffffe01, 0xfffffffe, 0x7, 0xd, 0x2, 0x6, 0x243a, 0x2, 0x6, 0x3, 0x0, 0x0, 0x6, 0x2, 0x6, 0x6, 0xb, 0x0, 0x6, 0x2, 0x2, 0x2, 0x6, 0xfff, 0x6, 0xffff, 0x8825, 0x6, 0xe62c, 0x5, 0x4, 0x115, 0x40, 0xe4, 0xff, 0x37c, 0x8, 0xf3, 0x3, 0x2, 0x9, 0x877, 0x9, 0x2, 0x4, 0x7ff, 0xffff828b, 0x5, 0x15a, 0x8, 0x8, 0x5, 0x8, 0xd95, 0x2, 0xfffffff3, 0x80000000, 0x2, 0x101, 0x4, 0x2, 0x5, 0x9, 0x0, 0xc64, 0xfffffffc, 0x8b, 0x57, 0xfffffff8, 0x8000, 0x4, 0xf, 0x4, 0x8cbc, 0x9, 0x9, 0x4, 0x1, 0x6, 0x2ae, 0x0, 0xca5, 0x7, 0x6, 0x18, 0x200000, 0x3, 0xffffffff, 0x2, 0xffff, 0x5, 0x4, 0x3, 0x9, 0x80000001, 0x7ff, 0x7ed8, 0xfff, 0x2, 0x4, 0x8a, 0x7fff, 0x0, 0x9, 0x6, 0x0, 0x80, 0xe9f4, 0x1, 0x2, 0x4, 0x8000, 0x40, 0xfffffffe, 0x3, 0x2, 0x5e, 0xca, 0x6, 0xfffff000, 0x5, 0x8000, 0x8, 0x10, 0xfffff6dd, 0x2, 0x2, 0x0, 0x2, 0x8000, 0x0, 0x83a9, 0x2, 0x7, 0x5, 0x1, 0xe73f, 0x9, 0x4, 0x7, 0x2, 0x6, 0x6, 0x6, 0x3, 0x35fc, 0x3, 0x454, 0x6, 0x6, 0xc75, 0x9, 0x9, 0xea75, 0x2, 0xa4, 0x1, 0x5, 0x8, 0x6, 0xc, 0x0, 0x3db, 0x899a, 0x50, 0x10001, 0x9, 0x4, 0xa5, 0xb0, 0x4, 0xfffffff7, 0x9, 0x1, 0x0, 0xbd79dc, 0x1ff, 0x4, 0x5, 0x9, 0xe, 0x7, 0x8, 0x10001, 0x5790225a, 0x5, 0x1ff, 0x8, 0x919, 0x6910, 0x0, 0xff, 0x9, 0x9, 0x7, 0x5, 0x2b5, 0xaff, 0x9, 0xfffffffe, 0x4, 0xffff, 0x5, 0x6, 0xdc, 0x3, 0x5, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x70, 0x5, 0x8000, 0x8, 0x8000, 0xffffffff, 0x0, 0x1000, 0xe4, 0x1, 0x18, 0x0, 0x31, 0x6, 0xb7f, 0x1, 0x4, 0x7fff, 0x101, 0xb86, 0x7, 0x3, 0x1, 0x0, 0x1, 0x4, 0xc, 0x4, 0x400, 0xffffffff, 0x0, 0x1, 0x8, 0x5, 0x3, 0x2, 0x1ed, 0x101, 0x3, 0x6d4f, 0x373a, 0x3ff, 0x7, 0x1, 0x4, 0x4, 0xe, 0x1bb, 0x4, 0x9023, 0x4, 0x8, 0x3, 0x401, 0x4, 0x1, 0xb, 0xb, 0x42d7, 0x300000, 0x7, 0x9, 0x9, 0xc8b, 0x4, 0x10, 0x6, 0x200, 0xd, 0xa, 0x4, 0xd46, 0x8, 0x9, 0x9, 0x1, 0x7, 0x100, 0x2, 0xfffffff7, 0xfffffff7, 0x0, 0x2e00, 0x80, 0x6, 0x5f1c8e65, 0xe51, 0x0, 0x6, 0x9a9, 0xe87, 0x5, 0x6, 0x7, 0x8, 0x10000, 0x200, 0xfffff365, 0x800, 0xffffffff, 0x6, 0xfffffe01, 0x8, 0x40, 0x1000, 0x5, 0x1fffc, 0x9, 0x1, 0x800, 0x1, 0x6, 0x2e2, 0x1, 0x0, 0xef, 0x4e2, 0x4, 0x1, 0x5, 0x7, 0x0, 0x3, 0x4, 0x7, 0x44a, 0x8, 0x400000, 0x8, 0x7, 0x1, 0x7fff, 0x1, 0x814, 0x8, 0x6, 0xd, 0x8001, 0x8, 0x2, 0x9, 0x3, 0xffff092d, 0xffffffc0, 0x5, 0x8, 0x4059, 0x8, 0x5d45, 0x7, 0x7fffffff, 0x7fff, 0x59, 0x7, 0x8, 0xb, 0x2, 0x3, 0x6, 0xffff, 0x40, 0x5, 0xad, 0x7fff, 0x400, 0xfffffff8, 0x1, 0xd02d, 0xffffffff, 0x7f, 0x0, 0x7f, 0x8, 0x3, 0xff, 0x8, 0x7d, 0x6, 0x40, 0xffffffff, 0x3, 0xb, 0x9, 0x6, 0x1, 0x266, 0xfff, 0x1, 0x4, 0x1ff, 0x7ec, 0x6, 0x7, 0xffffffff, 0x3, 0x7, 0x7, 0xa, 0xfffffff8, 0x0, 0xfd74, 0x80000001, 0x2, 0x8, 0x4f0, 0x1, 0x4, 0x8, 0x9, 0x80000001, 0x6, 0x6, 0x2, 0x88000000, 0x7000, 0x7b, 0x0, 0x3ff, 0x1, 0x8, 0x2, 0x3, 0x2, 0xf, 0x81, 0x80000001, 0x7, 0x3, 0xfffffff0, 0x2, 0x78, 0x2, 0xfffffeff, 0x2, 0xc, 0xc8d, 0x22dd, 0x5fe1, 0x800, 0x6, 0x488, 0x2, 0x5, 0x8000, 0x4, 0x2, 0xfffffff7, 0x0, 0xda, 0xde, 0x6, 0x80, 0x200, 0x6, 0x6, 0xd, 0x1, 0x1ff, 0x0, 0x8, 0xab, 0x6, 0x19722852, 0x7, 0x9503, 0x1, 0x0, 0x5, 0x7, 0xfffffffe, 0xd, 0x101, 0x0, 0xeb, 0x40, 0x4000000, 0xfffffffb, 0x6, 0x1, 0x3, 0x4, 0xc, 0x10001, 0x9, 0x9, 0xfbe, 0x7, 0x5d58, 0x8000, 0x8000, 0xfffffffc, 0x73ca, 0x6, 0x401, 0x3, 0xc, 0xffffd725, 0x5, 0x800, 0x3, 0x7, 0x7, 0x400, 0x3, 0x30, 0x3, 0x3, 0xed8, 0x8, 0x8001, 0x3, 0x1d3f, 0x7, 0xfcf4, 0xffffff7f, 0x6, 0x8, 0x8, 0x1e90, 0x401, 0x0, 0x100, 0x6, 0xfdf5, 0x7, 0xf, 0x8, 0x7ff, 0x8, 0x7, 0xffffff6a, 0x9, 0x8, 0xc, 0x2, 0x4, 0x100, 0xffff, 0x1000, 0x5, 0x997, 0x1000, 0x2, 0x4, 0x436e, 0x2, 0x9ffe, 0x7, 0x4, 0x7, 0x4, 0x9, 0x101, 0x8, 0xb0, 0x400, 0x3, 0x2, 0xfffffff3, 0x6, 0x4, 0xfd4, 0xfffffffe, 0x895, 0x7, 0x8, 0x10, 0x0, 0xf8e, 0x3ff, 0x8, 0x1, 0x200, 0xffffec2f, 0x6, 0x47, 0x40, 0x6d, 0xf992, 0x0, 0x0, 0x2, 0x7f, 0x1d1, 0x8, 0x3, 0x1, 0x9, 0x4, 0x5, 0x85f7, 0x8, 0x4, 0x3, 0x8, 0x1, 0x8, 0x6, 0x5, 0x8, 0x0, 0x3254, 0x5, 0x7, 0x8000, 0x5, 0xfffffffa, 0x5, 0x0, 0x3, 0x100, 0xd763, 0xfffffff2, 0x1000, 0x1, 0x7, 0x6de, 0x44, 0x3, 0x935, 0xffffffff, 0x0, 0x5, 0x8, 0x1, 0xfffffff9, 0x0, 0x6, 0x0, 0x0, 0x8, 0x6, 0x80, 0x0, 0x5, 0x200, 0xa4df, 0x2, 0x9, 0x6, 0x9f2, 0x1, 0x58000000, 0xfffffffe, 0x8, 0x9, 0xfff, 0x9, 0x85, 0x4, 0xcf02, 0x4, 0x6, 0xfff, 0x1, 0x0, 0xf46e, 0xfff, 0xc36, 0x9, 0xc4000000, 0x9cc7, 0x2, 0x40, 0x7, 0x4dbd, 0x7, 0x4, 0x80, 0xb, 0x1, 0x5, 0x9, 0x3, 0x9349, 0xf, 0x8, 0x1, 0x7fff, 0x6, 0x7f, 0x7, 0x10001, 0x1c, 0x3f, 0x2, 0x73, 0x7f, 0xfffffffc, 0x7, 0x5, 0x0, 0x27, 0x0, 0x3, 0x3, 0x8, 0x8, 0x6, 0x4, 0xfffffffc, 0x8, 0x7f, 0x6, 0xfffffff4, 0xb, 0xfffffe01, 0x9, 0x4c, 0x4, 0x1, 0xae, 0x29, 0x4, 0x8001, 0x3, 0x5, 0x2, 0x1, 0x3, 0x0, 0x6, 0x1, 0x2400, 0xd, 0x2, 0x10001, 0xa3, 0xffffffff, 0x1, 0x6, 0x7, 0x2, 0x4, 0x0, 0x401, 0x8, 0x5, 0x6, 0xb27, 0x100, 0x2, 0x6, 0x81, 0x0, 0xb1, 0xfff, 0x8, 0x1, 0x5, 0xfffff800, 0x5, 0xbe3, 0x5, 0x1000, 0x6f, 0x9, 0x5ce9, 0x2, 0x10001, 0x6, 0x7fff, 0x3, 0x887, 0x401, 0xff, 0x1, 0x2, 0x7, 0xffffffff, 0xab, 0x9, 0x3e, 0x6, 0x7fffffff, 0xfff, 0x3ff, 0x1, 0x4, 0x6, 0x800, 0xffffffff, 0x100, 0x6, 0x8, 0x7fff, 0x9, 0x400, 0x3, 0x8001, 0xb9, 0x7, 0x7, 0x4, 0x80000001, 0x6, 0x2, 0x7f, 0x7fff, 0x9, 0x7fff, 0x1, 0x8, 0x5, 0x8, 0x159, 0x1000, 0x7, 0xe, 0x4d, 0x20008, 0x80000001, 0x887b, 0x8, 0xfa3, 0x9, 0x8, 0x9, 0x0, 0x6, 0x5, 0x6, 0x105, 0xff, 0xfe0, 0x7ff, 0xb, 0x3, 0x63, 0x1, 0x7, 0x0, 0xb677, 0x5, 0x3, 0x551d, 0x3, 0x4, 0xe47b, 0xfffffffe, 0x4, 0x101, 0x7, 0x9, 0x401, 0xb, 0x9, 0x1, 0xfffffff9, 0x80000000, 0xc, 0x0, 0x2, 0x75f04fe0, 0xfff, 0x40, 0xb, 0x2, 0x401, 0x7fff, 0x5, 0xff, 0x7fff, 0x80, 0x3, 0x2, 0xd, 0xb433, 0x5, 0x2, 0x3ff, 0xf02, 0x5, 0xf419, 0x2b, 0x6, 0x7, 0x8, 0x1, 0x5, 0x6]})

9.877299998s ago: executing program 2 (id=1741):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
tee(r0, r0, 0xffff, 0x1)
r2 = open(0x0, 0x0, 0x0)
flock(r2, 0x2)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0)
syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
semget$private(0x0, 0x2, 0x0)
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7)
mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000474000/0x1000)=nil)
flock(r1, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xf00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r7, &(0x7f0000000080)="e87499cb636ef1cf2b2a60d4cb099a34fb084ba90924422e5d04157cc65130700bae5502a3917c9f581116a301520c90b65ce73e0e453eecdf89877ed061fbaefeffcd0497f03d87bd67255c204e4428c4ff33a8570831904ac6e1e247ab", &(0x7f00000001c0)=""/75, 0x4}, 0x20)

2.732592916s ago: executing program 2 (id=1742):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket(0xa, 0x3, 0x87)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x4000001, 'wrr\x00', 0x9, 0x821}, 0x2c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28)
recvfrom$inet6(r0, 0x0, 0x0, 0x40012301, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0xfffffff0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0xfffffffe, 0x10001, 0x50323234, 0x6, 0x8, [{0x873, 0xffffffff}, {0x101, 0x5}, {0xfc7, 0x4}, {0x2, 0x73}, {0x6, 0x7}, {0x5, 0x4}, {0xa, 0x8}, {0x0, 0x500abea2}], 0x3, 0x8, 0x0, 0x1}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r7, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/114, 0x72}, {&(0x7f0000001a80)=""/4111, 0x100f}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000003ac0)=""/4093, 0xffd}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/20, 0x14}, {&(0x7f0000001540)=""/165, 0xa5}, {&(0x7f0000001600)=""/62, 0x3e}, {&(0x7f0000001640)=""/126, 0x7e}, {&(0x7f00000016c0)=""/214, 0xd6}], 0xb}, 0x9}], 0x1, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)

2.732385189s ago: executing program 7 (id=1743):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="540001001809a71cfc55ba49b6cb96a4909110c213ec1789fb3267195d5dac2e74f536b40584c53090064bac656bc624375ff0d26f6025f722f9f0a24eb3e98f304f2b4333ac846e7e40933ead63a6867e6bc37c50bb323693f4a6e978fe4dec860a7b2a303668c5bd249c3b6d6534477959bd7205b3542a0fb829971363e7039c5a830ad7be76fd16dad3a136904a629fc74164b8f216ebbcebdcd51b56", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2503000000400001802c000400140001000200fffcac14142f00000000000000001400020002004e21ac1414aa00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x2400c000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

2.313958886s ago: executing program 1 (id=1744):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0)
readahead(r0, 0x7f, 0x803)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shutdown(0xffffffffffffffff, 0x32ce970513f32900)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4005)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4)
connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000406)
pwritev(r3, &(0x7f00000002c0)=[{0x0}], 0x1, 0x7, 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
open_by_handle_at(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000fe00020007"], 0x2241c2)
r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x0)
setresuid(0x0, 0xee01, 0x0)

522.746668ms ago: executing program 1 (id=1745):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x7b0c, 0x80)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0x3}, {0xa, 0x4e21, 0x9, @mcast1, 0x30}, r3, 0x8004}}, 0x48)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

0s ago: executing program 1 (id=1747):
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04f34120", @ANYRESDEC], 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df)
mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='myproc/iomem\x00', 0xca180, 0xc3)
read(r0, &(0x7f0000000500), 0xfa0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='Mid', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='2\n', 0x2)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x49)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000940)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000680)="29a96e74", 0x4}], 0x1}}], 0x2, 0x0)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc)
syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
userfaultfd(0x80001)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7})
mkdir(&(0x7f0000000280)='./config\x00', 0x0)

kernel console output (not intermixed with test programs):

] usb 4-1: USB disconnect, device number 8
[ 1314.516507][T15210] loop7: detected capacity change from 0 to 32768
[ 1314.565292][T15210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1451 (15210)
[ 1314.680300][T15210] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1314.695736][T15210] BTRFS info (device loop7): using crc32c checksum algorithm
[ 1314.758170][T15040] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1314.780144][T15040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1314.789687][T15040] bridge_slave_0: entered allmulticast mode
[ 1314.799328][T15040] bridge_slave_0: entered promiscuous mode
[ 1314.810546][T15040] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1314.818601][T15040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1314.830082][T15040] bridge_slave_1: entered allmulticast mode
[ 1314.848159][T15040] bridge_slave_1: entered promiscuous mode
[ 1315.046093][T15210] BTRFS info (device loop7): rebuilding free space tree
[ 1315.096422][T14759] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1315.169445][T15210] BTRFS info (device loop7): disabling free space tree
[ 1315.189482][T15210] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1315.201941][T15210] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1315.343136][T15210] BTRFS info (device loop7): turning on sync discard
[ 1315.368959][T15210] BTRFS info (device loop7): force clearing of disk cache
[ 1315.377170][T15210] BTRFS info (device loop7): use zlib compression, level 3
[ 1315.394027][T15210] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1315.511810][T15040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1315.568298][T15040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1315.882042][T15220] loop3: detected capacity change from 0 to 40427
[ 1315.918445][T15220] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1315.938541][T15220] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1315.951236][T11074] Bluetooth: hci6: command tx timeout
[ 1315.962359][T15220] F2FS-fs (loop3): invalid crc value
[ 1316.215763][T15040] team0: Port device team_slave_0 added
[ 1316.244474][T15040] team0: Port device team_slave_1 added
[ 1316.261957][T15088] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1316.279996][T15088] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1316.300384][T15088] bridge_slave_0: entered allmulticast mode
[ 1316.303967][T15220] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1316.315642][T15088] bridge_slave_0: entered promiscuous mode
[ 1316.349188][T15088] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1316.379066][T15088] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1316.390648][T15220] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1316.390669][T15088] bridge_slave_1: entered allmulticast mode
[ 1316.394218][T15088] bridge_slave_1: entered promiscuous mode
[ 1316.409157][T15220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1316.646561][T14759] 8021q: adding VLAN 0 to HW filter on device team0
[ 1316.686238][T15040] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1316.707031][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1316.754216][T15040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1316.802738][T15088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1316.830401][T15040] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1316.840186][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1316.869317][T15040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1316.896532][T15088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1317.202409][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1317.210347][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1317.255768][T15088] team0: Port device team_slave_0 added
[ 1317.296626][T15040] hsr_slave_0: entered promiscuous mode
[ 1317.304738][T15040] hsr_slave_1: entered promiscuous mode
[ 1317.314427][T15040] debugfs: 'hsr0' already exists in 'hsr'
[ 1317.322630][T15040] Cannot create hsr debugfs directory
[ 1317.357479][T15088] team0: Port device team_slave_1 added
[ 1317.372670][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1317.380616][ T8822] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1317.402090][T14924] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1317.418992][T14924] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1317.428293][T14924] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1317.440270][T14924] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1317.528867][T14924] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1317.545563][T14924] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1317.556123][T14924] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1317.573009][T14924] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1317.599844][T15088] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1317.610426][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1317.641739][T15088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1317.674251][ T1159] bridge_slave_1: left allmulticast mode
[ 1317.680511][ T1159] bridge_slave_1: left promiscuous mode
[ 1317.688096][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1317.704351][ T1159] bridge_slave_0: left allmulticast mode
[ 1317.710564][ T1159] bridge_slave_0: left promiscuous mode
[ 1317.719307][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1317.759233][ T1159] bridge_slave_1: left allmulticast mode
[ 1317.765539][ T1159] bridge_slave_1: left promiscuous mode
[ 1317.772655][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1317.785051][ T1159] bridge_slave_0: left allmulticast mode
[ 1317.791601][ T1159] bridge_slave_0: left promiscuous mode
[ 1317.799511][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1318.134565][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1318.147336][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1318.164757][ T1159] bond0 (unregistering): Released all slaves
[ 1318.348394][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1318.370190][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1318.396015][ T1159] bond0 (unregistering): Released all slaves
[ 1318.427638][T15088] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1318.435538][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1318.466459][T15088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1318.640314][T15273] loop3: detected capacity change from 0 to 256
[ 1320.132176][ T1159] hsr_slave_0: left promiscuous mode
[ 1320.164385][ T1159] hsr_slave_1: left promiscuous mode
[ 1320.185335][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1320.213376][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1320.251792][ T1159] hsr_slave_0: left promiscuous mode
[ 1320.261878][ T1159] hsr_slave_1: left promiscuous mode
[ 1320.273456][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1320.292920][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1320.402859][T15283] loop7: detected capacity change from 0 to 512
[ 1320.790201][T15283] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1321.059148][T15283] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1321.635415][T15283] EXT4-fs (loop7): 1 truncate cleaned up
[ 1321.692118][T15283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1323.261779][ T7733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1323.299895][ T1159] team0 (unregistering): Port device team_slave_1 removed
[ 1323.413588][ T1159] team0 (unregistering): Port device team_slave_0 removed
[ 1325.696456][ T1159] team0 (unregistering): Port device team_slave_1 removed
[ 1325.737604][ T1159] team0 (unregistering): Port device team_slave_0 removed
[ 1325.813756][T15300] loop3: detected capacity change from 0 to 4096
[ 1325.839377][T15300] ntfs3(loop3): Primary boot: start of MFT 0x4 (0xff) is out of volume 0x3.
[ 1325.858150][T15300] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[ 1326.473444][T15088] hsr_slave_0: entered promiscuous mode
[ 1326.488663][T15088] hsr_slave_1: entered promiscuous mode
[ 1326.508858][T15088] debugfs: 'hsr0' already exists in 'hsr'
[ 1326.530437][T15088] Cannot create hsr debugfs directory
[ 1326.647400][T15308] loop7: detected capacity change from 0 to 256
[ 1326.655971][T15308] vfat: Unknown parameter '/'
[ 1329.046297][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'.
[ 1329.056253][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'.
[ 1331.533820][T15321] loop7: detected capacity change from 0 to 1764
[ 1332.049056][T15324] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1332.427798][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1332.432264][T15327] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1332.450985][T15327] Bluetooth: hci5: Injecting HCI hardware error event
[ 1332.462684][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1332.464820][T15327] Bluetooth: hci5: hardware error 0x00
[ 1332.494987][T15328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1332.512032][T15328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1332.576287][T15328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1333.479870][T15335] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1475'.
[ 1334.450261][T14924] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1334.524050][T15340] Bluetooth: MGMT ver 1.23
[ 1334.593492][T15327] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1334.654891][T15341] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1476'.
[ 1334.671801][T15327] Bluetooth: hci2: command tx timeout
[ 1334.845853][T14924] 8021q: adding VLAN 0 to HW filter on device team0
[ 1335.526069][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1335.534014][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1336.040524][T15349] UDC core: g1: couldn't find an available UDC or it's busy
[ 1336.823065][T15328] Bluetooth: hci2: command tx timeout
[ 1338.360120][T14924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1338.372200][T14924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1338.415904][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1338.423916][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1338.994658][T15328] Bluetooth: hci2: command tx timeout
[ 1339.857747][T15325] lo speed is unknown, defaulting to 1000
[ 1340.311604][T15356] loop7: detected capacity change from 0 to 40427
[ 1340.354500][T15356] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1340.363164][T15040] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1340.392582][T15356] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1340.408065][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1340.421321][T15356] F2FS-fs (loop7): invalid crc value
[ 1340.475685][T15040] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1340.537834][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1340.563617][T15040] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1340.606457][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1340.701912][T15356] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1340.783752][T15362] loop3: detected capacity change from 0 to 40427
[ 1340.799215][T15362] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1340.803019][T15356] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1340.810120][T15362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1340.835206][T15356] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1340.845915][T15362] F2FS-fs (loop3): invalid crc value
[ 1340.918042][T15040] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1340.956025][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1341.051970][T15362] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1341.072558][T15328] Bluetooth: hci2: command tx timeout
[ 1341.119145][T15362] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1341.156169][T15362] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1341.581285][ T1159] bridge_slave_1: left allmulticast mode
[ 1341.588716][ T1159] bridge_slave_1: left promiscuous mode
[ 1341.605837][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1341.630500][ T1159] bridge_slave_0: left allmulticast mode
[ 1341.642853][ T1159] bridge_slave_0: left promiscuous mode
[ 1341.968143][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.404515][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1342.432156][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1342.453289][ T1159] bond0 (unregistering): Released all slaves
[ 1342.524172][T14924] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1342.656493][ T1159] hsr_slave_0: left promiscuous mode
[ 1342.702210][ T1159] hsr_slave_1: left promiscuous mode
[ 1342.721136][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1342.767197][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1343.393393][ T1159] team0 (unregistering): Port device team_slave_1 removed
[ 1343.467914][ T1159] team0 (unregistering): Port device team_slave_0 removed
[ 1344.854904][T15404] loop7: detected capacity change from 0 to 512
[ 1344.889045][T15404] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1344.896861][T15404] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1344.939931][T15404] EXT4-fs (loop7): 1 truncate cleaned up
[ 1344.981659][T15404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1346.984290][ T7733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1350.591567][T15325] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1350.611964][T15325] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1350.623408][T15325] bridge_slave_0: entered allmulticast mode
[ 1350.640439][T15325] bridge_slave_0: entered promiscuous mode
[ 1350.764985][T15325] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.781084][T15325] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1350.789016][T15325] bridge_slave_1: entered allmulticast mode
[ 1350.806690][T15325] bridge_slave_1: entered promiscuous mode
[ 1350.916245][T15088] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1350.939531][T15088] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1350.949514][T15088] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1350.966497][T15088] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1350.997597][T15325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1351.016940][T15088] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1351.041918][T15088] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1351.067837][T15088] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1351.114720][T15088] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1351.152947][T15325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1351.354499][T15325] team0: Port device team_slave_0 added
[ 1351.402914][T15325] team0: Port device team_slave_1 added
[ 1351.413733][T14924] veth0_vlan: entered promiscuous mode
[ 1351.569760][T15325] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1351.598085][T15325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1351.667563][T15325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1351.752160][T15325] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1351.776690][T15325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1351.808127][T15325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1351.854886][T14924] veth1_vlan: entered promiscuous mode
[ 1352.143831][T15325] hsr_slave_0: entered promiscuous mode
[ 1352.172058][T15325] hsr_slave_1: entered promiscuous mode
[ 1352.202455][T15325] debugfs: 'hsr0' already exists in 'hsr'
[ 1352.229284][T15325] Cannot create hsr debugfs directory
[ 1352.358653][T15040] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1352.497495][T15435] loop3: detected capacity change from 0 to 40427
[ 1352.534150][T15435] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1352.575529][T15435] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1352.632696][T15435] F2FS-fs (loop3): invalid crc value
[ 1352.867796][T15327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1352.882341][T15327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1352.894873][T15327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1352.913367][T15327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1352.916508][T15040] 8021q: adding VLAN 0 to HW filter on device team0
[ 1352.932227][T15327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1353.215636][T15435] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1353.349733][T15435] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1353.367338][T15435] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1353.456882][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1353.464790][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1353.528417][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1353.536327][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1353.703612][T15088] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1354.785192][T15088] 8021q: adding VLAN 0 to HW filter on device team0
[ 1354.930685][T15459] lo speed is unknown, defaulting to 1000
[ 1354.942760][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1354.950663][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1355.082528][T15328] Bluetooth: hci3: command tx timeout
[ 1355.257256][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1355.265206][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1356.060331][   T48] bridge_slave_1: left allmulticast mode
[ 1356.075204][   T48] bridge_slave_1: left promiscuous mode
[ 1356.090616][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1356.126157][   T48] bridge_slave_0: left allmulticast mode
[ 1356.151383][   T48] bridge_slave_0: left promiscuous mode
[ 1356.164366][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1357.501016][T15328] Bluetooth: hci3: command tx timeout
[ 1359.551373][T15328] Bluetooth: hci3: command tx timeout
[ 1359.634752][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1359.755098][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1359.786151][   T48] bond0 (unregistering): Released all slaves
[ 1360.927997][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1360.948743][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.635534][T15328] Bluetooth: hci3: command tx timeout
[ 1361.836351][   T48] hsr_slave_0: left promiscuous mode
[ 1361.910618][   T48] hsr_slave_1: left promiscuous mode
[ 1363.289339][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1364.102587][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1364.147475][   T48] veth1_vlan: left promiscuous mode
[ 1364.157202][   T48] veth0_vlan: left promiscuous mode
[ 1364.898661][   T29] audit: type=1800 audit(1787262472.577:190): pid=15542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1502" name="bus" dev="ramfs" ino=51647 res=0 errno=0
[ 1365.145718][   T29] audit: type=1800 audit(1787262472.827:191): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1501" name="bus" dev="ramfs" ino=51641 res=0 errno=0
[ 1365.321774][   T48] team0 (unregistering): Port device team_slave_1 removed
[ 1365.415782][   T48] team0 (unregistering): Port device team_slave_0 removed
[ 1365.663630][T15327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1365.687069][T15327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1365.698016][T15327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1365.715416][T15327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1365.731909][T15327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1366.486902][T15565] loop7: detected capacity change from 0 to 40427
[ 1366.498317][T15565] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1366.506898][T15565] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1366.523524][T15565] F2FS-fs (loop7): invalid crc value
[ 1366.608056][T15565] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1366.629235][T15565] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1366.637154][T15565] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1366.654802][T15325] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1367.839381][T15328] Bluetooth: hci4: command tx timeout
[ 1367.857879][T15325] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1367.889523][T15325] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1368.152374][T15325] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1368.181014][T15325] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1368.207996][T15325] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1369.055647][T15325] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1369.436517][T15325] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1369.872644][T15328] Bluetooth: hci4: command tx timeout
[ 1370.308910][T15459] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1370.371309][T15459] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1370.502479][T15459] bridge_slave_0: entered allmulticast mode
[ 1370.603085][T15459] bridge_slave_0: entered promiscuous mode
[ 1370.641321][T15327] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1370.658977][T15327] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1370.668018][T15327] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1370.693802][T15327] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1370.703221][T15327] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1370.781438][T15459] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1370.832349][T15459] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1370.892703][T15459] bridge_slave_1: entered allmulticast mode
[ 1370.924620][T15459] bridge_slave_1: entered promiscuous mode
[ 1371.526794][T15616] loop7: detected capacity change from 0 to 128
[ 1371.683232][T15459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1371.838783][T15459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1371.951417][T15328] Bluetooth: hci4: command tx timeout
[ 1371.984287][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1374.521074][T15327] Bluetooth: hci4: command tx timeout
[ 1374.527710][T15328] Bluetooth: hci7: command tx timeout
[ 1374.969360][T15556] lo speed is unknown, defaulting to 1000
[ 1374.994193][T15459] team0: Port device team_slave_0 added
[ 1375.024377][T15459] team0: Port device team_slave_1 added
[ 1375.376383][T15459] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1375.411328][T15459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1375.492760][T15459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1375.717220][T15459] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1375.738744][T15459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1375.803029][T15459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1375.889543][T15628] loop3: detected capacity change from 0 to 40427
[ 1375.916702][T15628] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1375.952280][T15628] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1375.984540][T15628] F2FS-fs (loop3): invalid crc value
[ 1376.000704][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1376.216475][T15628] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1376.255186][T15628] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1376.272475][T15628] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1376.339428][T15606] lo speed is unknown, defaulting to 1000
[ 1376.413595][T15459] hsr_slave_0: entered promiscuous mode
[ 1376.441498][T15459] hsr_slave_1: entered promiscuous mode
[ 1376.459082][T15459] debugfs: 'hsr0' already exists in 'hsr'
[ 1376.480595][T15459] Cannot create hsr debugfs directory
[ 1376.593184][T15328] Bluetooth: hci7: command tx timeout
[ 1378.671547][T15328] Bluetooth: hci7: command tx timeout
[ 1379.777935][T15325] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1380.212854][   T48] bridge_slave_1: left allmulticast mode
[ 1380.234633][   T48] bridge_slave_1: left promiscuous mode
[ 1380.275691][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1380.359124][   T48] bridge_slave_0: left allmulticast mode
[ 1380.402948][   T48] bridge_slave_0: left promiscuous mode
[ 1380.449015][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1380.791017][T15328] Bluetooth: hci7: command tx timeout
[ 1380.984128][T15694] loop3: detected capacity change from 0 to 40427
[ 1381.000520][T15694] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1381.009547][T15694] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1381.032303][T15694] F2FS-fs (loop3): invalid crc value
[ 1381.122089][T15694] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1381.143650][T15694] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1381.151629][T15694] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1382.921491][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1383.005914][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1383.044091][   T48] bond0 (unregistering): Released all slaves
[ 1383.180708][T15325] 8021q: adding VLAN 0 to HW filter on device team0
[ 1383.468870][   T48] hsr_slave_0: left promiscuous mode
[ 1383.490708][   T48] hsr_slave_1: left promiscuous mode
[ 1383.512668][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1383.534465][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1383.891935][   T48] team0 (unregistering): Port device team_slave_1 removed
[ 1383.917199][   T48] team0 (unregistering): Port device team_slave_0 removed
[ 1384.334223][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1384.342169][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1384.479736][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1384.487689][ T8821] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1384.653419][T15556] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1384.683206][T15556] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1384.704102][T15556] bridge_slave_0: entered allmulticast mode
[ 1384.725787][T15556] bridge_slave_0: entered promiscuous mode
[ 1384.750067][T15556] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1384.758835][T15556] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1384.769260][T15556] bridge_slave_1: entered allmulticast mode
[ 1384.778863][T15556] bridge_slave_1: entered promiscuous mode
[ 1384.964360][T15556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1385.084762][T15556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1385.096020][T15606] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1385.105285][T15606] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1385.113829][T15606] bridge_slave_0: entered allmulticast mode
[ 1385.124529][T15606] bridge_slave_0: entered promiscuous mode
[ 1385.227746][T15606] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1385.236160][T15606] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1385.244981][T15606] bridge_slave_1: entered allmulticast mode
[ 1385.253415][T15606] bridge_slave_1: entered promiscuous mode
[ 1385.269412][T15556] team0: Port device team_slave_0 added
[ 1385.326119][T15556] team0: Port device team_slave_1 added
[ 1385.480613][T15556] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1385.494163][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1385.523846][T15556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1385.554549][T15606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1385.569682][T15556] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1385.578661][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1385.609151][T15556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1385.708314][T15606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1385.977998][T15606] team0: Port device team_slave_0 added
[ 1385.998420][T15556] hsr_slave_0: entered promiscuous mode
[ 1386.005916][T15556] hsr_slave_1: entered promiscuous mode
[ 1386.013308][T15556] debugfs: 'hsr0' already exists in 'hsr'
[ 1386.019683][T15556] Cannot create hsr debugfs directory
[ 1386.042581][T15606] team0: Port device team_slave_1 added
[ 1386.295677][T15606] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1386.304210][T15606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1386.334599][T15606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1386.347630][T15459] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1386.364174][T15459] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1386.385815][T15606] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1386.393771][T15606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1386.424943][T15606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1386.438638][T15459] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1386.451952][T15459] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1386.523058][T15459] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1386.536453][T15459] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1386.549460][T15459] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1386.565497][T15459] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1386.698245][T15606] hsr_slave_0: entered promiscuous mode
[ 1386.705954][T15606] hsr_slave_1: entered promiscuous mode
[ 1386.715252][T15606] debugfs: 'hsr0' already exists in 'hsr'
[ 1386.724911][T15606] Cannot create hsr debugfs directory
[ 1386.824836][   T48] bridge_slave_1: left allmulticast mode
[ 1386.831625][   T48] bridge_slave_1: left promiscuous mode
[ 1386.838056][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1386.850213][   T48] bridge_slave_0: left allmulticast mode
[ 1386.857121][   T48] bridge_slave_0: left promiscuous mode
[ 1386.865758][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1387.137487][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1387.155961][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1387.168862][   T48] bond0 (unregistering): Released all slaves
[ 1387.384207][   T48] hsr_slave_0: left promiscuous mode
[ 1387.403546][   T48] hsr_slave_1: left promiscuous mode
[ 1387.421936][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1387.437269][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1387.709740][   T48] team0 (unregistering): Port device team_slave_1 removed
[ 1387.737983][   T48] team0 (unregistering): Port device team_slave_0 removed
[ 1388.396827][T15325] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1388.529596][T15459] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1388.617418][T15459] 8021q: adding VLAN 0 to HW filter on device team0
[ 1388.654200][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1388.662096][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1388.716150][ T8536] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1388.724107][ T8536] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1389.124633][T15556] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1389.149388][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1389.186764][T15556] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1389.216119][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1389.355374][T15556] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1389.377854][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1389.399156][T15556] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1389.446894][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1389.460710][T15325] veth0_vlan: entered promiscuous mode
[ 1389.538610][T15325] veth1_vlan: entered promiscuous mode
[ 1389.835883][T15325] veth0_macvtap: entered promiscuous mode
[ 1389.867547][T15325] veth1_macvtap: entered promiscuous mode
[ 1390.020685][T15325] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1390.109037][T15325] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1390.207204][T15556] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1390.256764][T15459] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1390.311081][ T6136] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.396913][T15556] 8021q: adding VLAN 0 to HW filter on device team0
[ 1390.414131][T15606] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1390.426826][T15606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1390.443202][T15606] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1390.455373][T15606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1390.464734][T15606] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1390.480614][T15606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1390.523481][T15606] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1390.568594][T15606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1390.586761][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1390.594646][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1390.628753][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1390.636638][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1390.720443][T15352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1390.729485][T12124] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.729673][T12124] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.765645][T15352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1390.782937][T12124] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1390.889593][ T8536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1390.898727][T15556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1390.920490][ T8536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1390.998324][T15459] veth0_vlan: entered promiscuous mode
[ 1391.068286][T15459] veth1_vlan: entered promiscuous mode
[ 1391.269317][T15459] veth0_macvtap: entered promiscuous mode
[ 1391.306879][T15459] veth1_macvtap: entered promiscuous mode
[ 1391.412096][T15606] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1391.441396][T15459] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1391.518761][T15459] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1391.577175][T15606] 8021q: adding VLAN 0 to HW filter on device team0
[ 1391.652996][ T8536] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1391.660931][ T8536] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1391.735909][T12124] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1391.743876][T12124] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1391.881400][T15352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1392.308692][T15327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1392.327450][T15327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1392.347801][ T8536] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1392.361741][T15327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1392.379124][T15327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1392.388892][T15327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1392.470658][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1392.489594][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1392.502316][T15352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1392.710265][ T8536] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1392.790098][ T5882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1392.824921][ T5882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1392.825809][T15556] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1392.850917][ T5976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1392.902449][ T5976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1393.025672][ T8536] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1393.340136][ T8536] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1393.378155][T15918] loop3: detected capacity change from 0 to 256
[ 1393.386316][T15918] vfat: Unknown parameter 'r'
[ 1394.446194][T15328] Bluetooth: hci0: command tx timeout
[ 1395.602373][ T8536] bridge_slave_1: left allmulticast mode
[ 1395.622723][ T8536] bridge_slave_1: left promiscuous mode
[ 1395.641237][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1395.657764][ T8536] bridge_slave_0: left allmulticast mode
[ 1395.680785][ T8536] bridge_slave_0: left promiscuous mode
[ 1395.689984][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1396.107704][ T8536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1396.126009][ T8536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1396.140225][ T8536] bond0 (unregistering): Released all slaves
[ 1396.206602][T15893] lo speed is unknown, defaulting to 1000
[ 1396.512665][T15328] Bluetooth: hci0: command tx timeout
[ 1396.547844][T15606] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1399.264929][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'.
[ 1399.274783][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'.
[ 1400.899696][T15328] Bluetooth: hci0: command tx timeout
[ 1401.205635][T15556] veth0_vlan: entered promiscuous mode
[ 1401.289209][ T8536] hsr_slave_0: left promiscuous mode
[ 1401.303934][ T8536] hsr_slave_1: left promiscuous mode
[ 1401.320129][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1401.342486][ T8536] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1401.364101][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1401.383336][ T8536] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1401.417126][ T8536] veth1_macvtap: left promiscuous mode
[ 1401.431112][ T8536] veth0_macvtap: left promiscuous mode
[ 1401.451155][ T8536] veth1_vlan: left promiscuous mode
[ 1401.460024][ T8536] veth0_vlan: left promiscuous mode
[ 1402.550028][ T8536] team0 (unregistering): Port device team_slave_1 removed
[ 1402.615679][ T8536] team0 (unregistering): Port device team_slave_0 removed
[ 1403.131161][T15328] Bluetooth: hci0: command tx timeout
[ 1403.163499][T15985] Bluetooth: MGMT ver 1.23
[ 1408.728674][   T29] audit: type=1800 audit(1787262516.397:192): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1525" name="bus" dev="ramfs" ino=54147 res=0 errno=0
[ 1409.123148][T15556] veth1_vlan: entered promiscuous mode
[ 1411.033863][T15606] veth0_vlan: entered promiscuous mode
[ 1411.379390][T15606] veth1_vlan: entered promiscuous mode
[ 1411.452578][T15556] veth0_macvtap: entered promiscuous mode
[ 1411.600396][T15556] veth1_macvtap: entered promiscuous mode
[ 1413.028151][T15606] veth0_macvtap: entered promiscuous mode
[ 1413.161342][T15556] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1413.333859][T15556] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1413.379514][T15606] veth1_macvtap: entered promiscuous mode
[ 1413.617944][T15893] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1413.651809][T15893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1413.677266][T15893] bridge_slave_0: entered allmulticast mode
[ 1413.701312][T15893] bridge_slave_0: entered promiscuous mode
[ 1413.724186][T15893] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1413.742778][T15893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1413.768510][T15893] bridge_slave_1: entered allmulticast mode
[ 1413.790547][T15893] bridge_slave_1: entered promiscuous mode
[ 1413.951649][ T5910] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1414.019754][T15893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1414.096875][T15893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1414.202233][T15606] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1414.271989][ T5939] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1414.398376][T15606] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1414.458549][T15893] team0: Port device team_slave_0 added
[ 1414.551452][T12124] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1414.643462][T15893] team0: Port device team_slave_1 added
[ 1416.384914][T15893] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1416.469836][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1416.537090][T15893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1416.551828][T12124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1416.657478][T15893] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1416.667917][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1416.703248][T15893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1416.744171][ T8536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.020227][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1418.034544][ T5939] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.419330][T16066] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1533'.
[ 1418.662669][T11129] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1418.824929][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1418.972538][T11129] usb 1-1: Using ep0 maxpacket: 16
[ 1419.021159][ T1159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1419.032841][T15924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1419.041733][T15924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1419.059116][T11129] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1419.096948][T11129] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=f5.0f
[ 1419.130409][T16069] loop3: detected capacity change from 0 to 1024
[ 1419.138870][T11129] usb 1-1: config 102 has an invalid interface number: 16 but max is 0
[ 1419.191239][T11129] usb 1-1: config 102 has no interface number 0
[ 1419.243927][T11129] usb 1-1: config 102 interface 16 has no altsetting 0
[ 1419.266802][T16069] EXT4-fs (loop3): Can't support bigalloc feature without extents feature
[ 1419.266802][T16069] 
[ 1419.285397][T11129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.314437][T15893] hsr_slave_0: entered promiscuous mode
[ 1419.332394][T15893] hsr_slave_1: entered promiscuous mode
[ 1419.332436][T11129] usb 1-1: Product: syz
[ 1419.347908][T16069] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[ 1419.366339][T15893] debugfs: 'hsr0' already exists in 'hsr'
[ 1419.373280][T11129] usb 1-1: Manufacturer: syz
[ 1419.388764][T15893] Cannot create hsr debugfs directory
[ 1419.397648][T11129] usb 1-1: SerialNumber: syz
[ 1420.935143][ T6136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1420.973449][T11129] gspca_main: sunplus-2.14.0 probing 052b:1803
[ 1421.007637][T11129] gspca_sunplus: reg_r err -71
[ 1421.033799][T11129] sunplus 1-1:102.16: probe with driver sunplus failed with error -71
[ 1421.078990][T16076] loop5: detected capacity change from 0 to 256
[ 1421.098873][T11129] usb 1-1: USB disconnect, device number 9
[ 1421.099188][T16076] vfat: Unknown parameter ''
[ 1421.388671][T16082] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1537'.
[ 1422.370600][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.571530][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.427803][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1423.470193][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1424.884803][   T29] audit: type=1800 audit(1787262532.087:193): pid=16085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1538" name="bus" dev="ramfs" ino=55455 res=0 errno=0
[ 1425.584266][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1425.646796][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1427.784145][T16112] binder: 16107:16112 ioctl c0506107 200000000180 returned -22
[ 1428.716751][   T29] audit: type=1800 audit(1787262536.397:194): pid=16105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1542" name="bus" dev="ramfs" ino=55580 res=0 errno=0
[ 1433.039621][T16128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1545'.
[ 1434.739459][T16143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1550'.
[ 1435.505688][T16144] loop0: detected capacity change from 0 to 40427
[ 1435.837437][T16144] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1435.846161][T16144] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1435.915993][T16144] F2FS-fs (loop0): invalid crc value
[ 1436.964884][T16144] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1436.984268][T16144] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1436.994409][T16144] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1437.367126][T15893] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1437.439014][T15893] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1437.490255][T15893] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1437.934355][T15893] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1437.999226][T15893] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1438.093447][T15893] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1438.159776][T15893] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1438.456643][T16161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1555'.
[ 1438.523957][T15893] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1439.276362][T15327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1439.308165][T15327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1439.320384][T15327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1439.335390][T15327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1439.344688][T15327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1440.912890][T16174] loop3: detected capacity change from 0 to 256
[ 1440.921298][T16174] vfat: Unknown parameter '!'
[ 1441.478878][T15328] Bluetooth: hci2: command tx timeout
[ 1443.550903][T15328] Bluetooth: hci2: command tx timeout
[ 1443.610710][T15893] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1444.353167][T16187] binder: 16181:16187 ioctl 400c620e 200000000200 returned -22
[ 1445.086763][T16191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1560'.
[ 1445.585896][T15893] 8021q: adding VLAN 0 to HW filter on device team0
[ 1445.636766][T15328] Bluetooth: hci2: command tx timeout
[ 1445.673413][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1445.681347][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1445.774056][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1445.782011][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1447.721098][T15328] Bluetooth: hci2: command tx timeout
[ 1449.057883][   T29] audit: type=1800 audit(1787262556.697:195): pid=16197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1561" name="bus" dev="ramfs" ino=55877 res=0 errno=0
[ 1450.723116][T16213] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1450.840911][T16217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1566'.
[ 1451.746923][T15327] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1452.887281][T15327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1452.906480][T15327] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1452.939026][T15327] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1452.951741][T15327] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1453.237758][T16236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1569'.
[ 1454.251480][T16167] lo speed is unknown, defaulting to 1000
[ 1454.618615][    T9] Process accounting resumed
[ 1454.701813][T16244] loop3: detected capacity change from 0 to 512
[ 1455.087394][T16244] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[ 1455.104831][T15327] Bluetooth: hci6: command tx timeout
[ 1457.153432][T15327] Bluetooth: hci6: command tx timeout
[ 1457.955229][T15328] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1457.981633][T15328] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1457.995695][T15328] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1458.021033][T15328] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1458.038092][T15328] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1458.320175][T16260] loop1: detected capacity change from 0 to 512
[ 1458.386843][T16260] EXT4-fs: Ignoring removed oldalloc option
[ 1459.231157][T15328] Bluetooth: hci6: command tx timeout
[ 1459.887363][T16260] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1572: Parent and EA inode have the same ino 15
[ 1460.009170][T16260] loop1: lost filesystem error report for type 5 error -117
[ 1460.010941][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1460.026118][    C0] EXT4-fs (loop1): initial error at time 1787262567: ext4_xattr_inode_iget:436
[ 1460.035991][    C0] EXT4-fs (loop1): last error at time 1787262567: ext4_xattr_inode_iget:436
[ 1460.095895][T16260] EXT4-fs (loop1): Remounting filesystem read-only
[ 1460.113461][T15328] Bluetooth: hci8: command tx timeout
[ 1460.126980][T16260] EXT4-fs warning (device loop1): ext4_evict_inode:289: xattr delete (err -30)
[ 1460.180224][T16260] EXT4-fs (loop1): 1 orphan inode deleted
[ 1461.101193][T16260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1461.311745][T15328] Bluetooth: hci6: command tx timeout
[ 1461.534363][T15606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1462.196562][T15328] Bluetooth: hci8: command tx timeout
[ 1463.545448][T16297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1578'.
[ 1464.233498][T16299] loop7: detected capacity change from 0 to 512
[ 1464.245470][T16299] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1464.253736][T16299] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1464.270880][T15328] Bluetooth: hci8: command tx timeout
[ 1464.285100][T16299] EXT4-fs (loop7): 1 truncate cleaned up
[ 1464.307648][T16299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1464.905720][   T29] audit: type=1800 audit(1787262572.507:196): pid=16293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1577" name="bus" dev="ramfs" ino=56062 res=0 errno=0
[ 1465.416437][T16167] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1465.467996][T16167] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1465.523531][T16167] bridge_slave_0: entered allmulticast mode
[ 1465.570080][T16167] bridge_slave_0: entered promiscuous mode
[ 1465.727242][T16308] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1465.859804][T16167] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1466.021756][T16167] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1466.154175][T16167] bridge_slave_1: entered allmulticast mode
[ 1466.351414][T15328] Bluetooth: hci8: command tx timeout
[ 1466.376225][T16167] bridge_slave_1: entered promiscuous mode
[ 1466.582745][T16227] lo speed is unknown, defaulting to 1000
[ 1466.598163][ T7733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1468.769716][T16167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1470.140619][T16167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1470.704958][T16326] warning: `syz.7.1591' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1473.678979][T16167] team0: Port device team_slave_0 added
[ 1474.209683][T16167] team0: Port device team_slave_1 added
[ 1474.253816][T16347] loop7: detected capacity change from 0 to 512
[ 1475.229801][T16347] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1475.254917][T16347] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1475.399268][T16251] lo speed is unknown, defaulting to 1000
[ 1475.504783][T16347] EXT4-fs (loop7): 1 truncate cleaned up
[ 1475.533092][T16347] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1475.567780][T16359] xt_cgroup: invalid path, errno=-2
[ 1476.656110][T16364] CIFS: Attempting to mount //127.0.0.1/share
[ 1477.571260][T16364] CIFS: VFS: cifs_mount failed w/return code = -512
[ 1477.587796][T16167] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1477.640422][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1477.682556][T16167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1477.884527][ T7733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1477.975976][T16373] nvmet: failed to open block device (null): (-22)
[ 1477.976013][   T29] audit: type=1800 audit(1787262585.657:197): pid=16373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1590" name="enable" dev="configfs" ino=56690 res=0 errno=0
[ 1478.037934][T16167] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1478.100228][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1478.134926][   T29] audit: type=1800 audit(1787262585.817:198): pid=16373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1590" name="addr_trtype" dev="configfs" ino=56696 res=0 errno=0
[ 1478.222934][T16167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1478.452428][T16383] siw: device registration error -23
[ 1479.229772][T16374] loop1: detected capacity change from 0 to 512
[ 1479.302663][T15352] nvmet: connect request for invalid subsystem testnqn!
[ 1479.322041][T16374] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[ 1479.360009][T16373] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testnqn"
[ 1479.456910][T16167] hsr_slave_0: entered promiscuous mode
[ 1479.475512][T16374] EXT4-fs error (device loop1): ext4_iget_extra_inode:5151: inode #15: comm syz.1.1590: corrupted in-inode xattr: e_value size too large
[ 1479.506820][T16167] hsr_slave_1: entered promiscuous mode
[ 1479.527604][T16167] debugfs: 'hsr0' already exists in 'hsr'
[ 1479.542200][T16167] Cannot create hsr debugfs directory
[ 1479.552849][T16374] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1479.555547][T16374] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1590: couldn't read orphan inode 15 (err -117)
[ 1479.565737][    C1] EXT4-fs (loop1): error count since last fsck: 1
[ 1479.565769][    C1] EXT4-fs (loop1): initial error at time 1787262587: ext4_iget_extra_inode:5151: inode 15
[ 1479.565830][    C1] EXT4-fs (loop1): last error at time 1787262587: ext4_iget_extra_inode:5151: inode 15
[ 1479.641296][T16374] loop1: lost filesystem error report for type 5 error -117
[ 1479.650437][T16374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1482.633665][T15606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1483.800333][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1483.812126][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.289068][ T1137] bridge_slave_1: left allmulticast mode
[ 1484.314784][ T1137] bridge_slave_1: left promiscuous mode
[ 1484.334106][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1484.389455][ T1137] bridge_slave_0: left allmulticast mode
[ 1484.396020][ T1137] bridge_slave_0: left promiscuous mode
[ 1484.407152][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1484.572370][T16416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1598'.
[ 1489.465166][T16430] loop1: detected capacity change from 0 to 512
[ 1490.122689][T16430] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1490.131870][T16430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1490.199499][T16430] EXT4-fs (loop1): 1 truncate cleaned up
[ 1490.218795][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1490.224847][T16430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1490.261615][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1490.299714][ T1137] bond0 (unregistering): Released all slaves
[ 1491.937042][   T29] audit: type=1800 audit(1787262599.617:199): pid=16431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1600" name="bus" dev="ramfs" ino=57474 res=0 errno=0
[ 1492.418174][T15606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1492.684563][ T1137] hsr_slave_0: left promiscuous mode
[ 1492.902753][T16453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1603'.
[ 1493.497161][ T1137] hsr_slave_1: left promiscuous mode
[ 1493.574043][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1493.770913][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1496.131656][T15327] Bluetooth: hci7: command 0x0406 tx timeout
[ 1496.973870][ T1137] team0 (unregistering): Port device team_slave_1 removed
[ 1497.021605][ T1137] team0 (unregistering): Port device team_slave_0 removed
[ 1498.398532][T15327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1498.416879][T15327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1498.427343][T15327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1498.478668][T15327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1498.498031][T15327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1499.068480][T16491] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[ 1499.075688][T16491] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1499.080146][T16227] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1499.117542][T16227] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1499.127366][T16227] bridge_slave_0: entered allmulticast mode
[ 1499.144559][T16227] bridge_slave_0: entered promiscuous mode
[ 1499.153339][T16491] vhci_hcd vhci_hcd.0: Device attached
[ 1499.189890][T16227] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1499.210386][T16227] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1499.255005][T16227] bridge_slave_1: entered allmulticast mode
[ 1499.264220][T16227] bridge_slave_1: entered promiscuous mode
[ 1499.441226][ T5340] usb 35-1: new low-speed USB device number 3 using vhci_hcd
[ 1500.601227][T15328] Bluetooth: hci0: command tx timeout
[ 1500.995967][T16492] vhci_hcd: connection reset by peer
[ 1501.525011][   T29] audit: type=1800 audit(1787262609.177:200): pid=16508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1611" name="p_chmask" dev="configfs" ino=56866 res=0 errno=0
[ 1502.687456][T15328] Bluetooth: hci0: command tx timeout
[ 1502.790417][   T76] vhci_hcd vhci_hcd.1: stop threads
[ 1502.844028][   T76] vhci_hcd vhci_hcd.1: release socket
[ 1502.887802][   T76] vhci_hcd vhci_hcd.1: disconnect device
[ 1502.971384][T16227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1502.985646][T16227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1503.053384][T16507] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1503.061339][T16507] bridge0: port 2(bridge_slave_1) entered listening state
[ 1503.072269][T16507] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1503.080123][T16507] bridge0: port 1(bridge_slave_0) entered listening state
[ 1503.759813][T16529] loop1: detected capacity change from 0 to 512
[ 1504.053940][T16530] loop3: detected capacity change from 0 to 40427
[ 1504.086084][T16530] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1504.094679][T16530] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1504.106194][T16530] F2FS-fs (loop3): invalid crc value
[ 1504.175695][T16529] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1504.198331][T16529] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1504.223999][T16530] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1504.256180][T16530] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1504.264109][T16530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1504.535630][T16529] EXT4-fs (loop1): 1 truncate cleaned up
[ 1504.751016][T15328] Bluetooth: hci0: command tx timeout
[ 1504.768272][ T5340] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 1505.525882][ T1137] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1505.577612][T16529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1505.935406][T16227] team0: Port device team_slave_0 added
[ 1506.830904][T15328] Bluetooth: hci0: command tx timeout
[ 1507.416221][T16227] team0: Port device team_slave_1 added
[ 1507.698792][T16551] Bluetooth: MGMT ver 1.23
[ 1507.714721][ T1137] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.726948][T15606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1507.782065][T16251] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1507.818390][T16251] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1507.844290][T16251] bridge_slave_0: entered allmulticast mode
[ 1507.886359][T16251] bridge_slave_0: entered promiscuous mode
[ 1507.988541][T16227] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1508.000706][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1508.034064][T16227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1508.915752][T16251] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1509.404170][T16251] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1509.435911][T16251] bridge_slave_1: entered allmulticast mode
[ 1509.468425][T16251] bridge_slave_1: entered promiscuous mode
[ 1509.555393][T16227] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1509.563409][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1509.600063][T16227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1509.823107][ T1137] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1510.009033][T15327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1510.041034][T15327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1510.055448][T15327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1510.069775][T15327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1510.082412][T15327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1510.153058][T16476] lo speed is unknown, defaulting to 1000
[ 1510.194048][T16251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1510.418048][ T1137] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1511.026400][   T29] audit: type=1800 audit(1787262618.707:201): pid=16557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1617" name="bus" dev="ramfs" ino=57649 res=0 errno=0
[ 1511.048591][T16569] loop3: detected capacity change from 0 to 32768
[ 1511.106291][T16569] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1511.115425][T16569] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1511.158767][T16569] syz.3.1619: attempt to access beyond end of device
[ 1511.158767][T16569] loop3: rw=8400896, sector=196608, nr_sectors = 8 limit=32768
[ 1511.174689][T16569] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 18, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 1511.190528][T16569] gfs2: fsid=syz:syz.0: G:  s:SH n:2/12 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2
[ 1511.200466][T16569] gfs2: fsid=syz:syz.0:  H: s:SH f:eEcH e:0 p:0 [(none)] gfs2_fill_super+0x1d54/0x2d00
[ 1511.211200][T16569] gfs2: fsid=syz:syz.0:  I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 1511.220461][T16569] CPU: 1 UID: 0 PID: 16569 Comm: syz.3.1619 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1511.220503][T16569] Tainted: [L]=SOFTLOCKUP
[ 1511.220513][T16569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1511.220531][T16569] Call Trace:
[ 1511.220542][T16569]  <TASK>
[ 1511.220554][T16569]  dump_stack_lvl+0x100/0x190
[ 1511.220595][T16569]  gfs2_withdraw.cold+0xa/0xed
[ 1511.220630][T16569]  gfs2_jdesc_check+0x2b0/0x2f0
[ 1511.220669][T16569]  init_inodes+0x13ac/0x2790
[ 1511.220703][T16569]  ? vsnprintf+0x4c1/0x1300
[ 1511.220776][T16569]  ? __pfx_init_inodes+0x10/0x10
[ 1511.220823][T16569]  ? gfs2_fill_super+0x1d54/0x2d00
[ 1511.220863][T16569]  ? init_sb+0xb83/0xfd0
[ 1511.220906][T16569]  ? __pfx_snprintf+0x10/0x10
[ 1511.220950][T16569]  ? gfs2_fill_super+0x1d54/0x2d00
[ 1511.220977][T16569]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1511.221013][T16569]  gfs2_fill_super+0x1d54/0x2d00
[ 1511.221040][T16569]  ? __pfx_vsnprintf+0x10/0x10
[ 1511.221100][T16569]  ? __pfx_gfs2_fill_super+0x10/0x10
[ 1511.221127][T16569]  ? __pfx_snprintf+0x10/0x10
[ 1511.221157][T16569]  ? gfs2_fill_super+0x19d1/0x2d00
[ 1511.221185][T16569]  ? find_held_lock+0x2b/0x80
[ 1511.221215][T16569]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1511.221250][T16569]  ? set_blocksize+0x1cf/0x460
[ 1511.221276][T16569]  ? setup_bdev_super+0x4b6/0x770
[ 1511.221317][T16569]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1511.221352][T16569]  ? sb_set_blocksize+0x1f6/0x290
[ 1511.221387][T16569]  ? get_tree_bdev_flags+0x38c/0x620
[ 1511.221425][T16569]  get_tree_bdev_flags+0x38c/0x620
[ 1511.221463][T16569]  ? __pfx_gfs2_fill_super+0x10/0x10
[ 1511.221494][T16569]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 1511.221537][T16569]  ? rcu_is_watching+0x13/0xc0
[ 1511.221566][T16569]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1511.221601][T16569]  ? apparmor_capable+0x1d7/0x4d0
[ 1511.221629][T16569]  ? __asan_memset+0x23/0x50
[ 1511.221675][T16569]  gfs2_get_tree+0x4e/0x280
[ 1511.221726][T16569]  vfs_get_tree+0x92/0x320
[ 1511.221757][T16569]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1511.221795][T16569]  path_mount+0x7d0/0x24c0
[ 1511.221839][T16569]  ? __pfx_path_mount+0x10/0x10
[ 1511.221870][T16569]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1511.221905][T16569]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1511.221938][T16569]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1511.221973][T16569]  ? kmem_cache_free+0x127/0x6b0
[ 1511.222026][T16569]  ? __x64_sys_mount+0x293/0x310
[ 1511.222057][T16569]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1511.222092][T16569]  __x64_sys_mount+0x293/0x310
[ 1511.222126][T16569]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1511.222163][T16569]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1511.222205][T16569]  do_syscall_64+0x123/0x790
[ 1511.222238][T16569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1511.222269][T16569] RIP: 0033:0x7fe4cc99f34a
[ 1511.222293][T16569] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1511.222321][T16569] RSP: 002b:00007fe4cd885e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1511.222348][T16569] RAX: ffffffffffffffda RBX: 00007fe4cd885ee0 RCX: 00007fe4cc99f34a
[ 1511.222368][T16569] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fe4cd885ea0
[ 1511.222387][T16569] RBP: 00002000000124c0 R08: 00007fe4cd885ee0 R09: 0000000000000000
[ 1511.222406][T16569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[ 1511.222424][T16569] R13: 00007fe4cd885ea0 R14: 0000000000012620 R15: 0000200000000180
[ 1511.222463][T16569]  </TASK>
[ 1511.594272][T16569] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 1511.806329][T16569] fuse: Unknown parameter '18446744073709551615'
[ 1511.920554][T16251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1512.148791][T16251] team0: Port device team_slave_0 added
[ 1512.195609][T15327] Bluetooth: hci2: command tx timeout
[ 1512.219466][T16251] team0: Port device team_slave_1 added
[ 1512.546445][T16251] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1512.595496][T16251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1512.749984][T16251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1513.102302][T16251] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1513.145282][T16251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1513.410217][T16594] loop7: detected capacity change from 0 to 1024
[ 1513.560879][T16594] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[ 1514.834337][T15327] Bluetooth: hci2: command tx timeout
[ 1514.954428][T16251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1516.704854][   T29] audit: type=1800 audit(1787262624.377:202): pid=16595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1622" name="bus" dev="ramfs" ino=57728 res=0 errno=0
[ 1516.911199][T15327] Bluetooth: hci2: command tx timeout
[ 1517.782343][ T1137] bridge_slave_1: left allmulticast mode
[ 1517.825639][ T1137] bridge_slave_1: left promiscuous mode
[ 1517.855129][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1517.939759][ T1137] bridge_slave_0: left allmulticast mode
[ 1517.969440][ T1137] bridge_slave_0: left promiscuous mode
[ 1517.998727][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1518.823473][T16613] loop3: detected capacity change from 0 to 40427
[ 1519.051234][T15327] Bluetooth: hci2: command tx timeout
[ 1519.502852][T16613] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1519.511514][T16613] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1519.527757][T16613] F2FS-fs (loop3): invalid crc value
[ 1519.637375][T16613] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1519.662001][T16613] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1519.669811][T16613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1519.990142][ T1137] bridge_slave_1: left allmulticast mode
[ 1520.011628][ T1137] bridge_slave_1: left promiscuous mode
[ 1520.018052][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1521.063313][   T29] audit: type=1800 audit(1787262628.667:203): pid=16615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1633" name="bus" dev="ramfs" ino=57847 res=0 errno=0
[ 1521.307599][ T1137] bridge_slave_0: left allmulticast mode
[ 1521.353058][ T1137] bridge_slave_0: left promiscuous mode
[ 1521.393913][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1521.524622][T15328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1521.553648][T15328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1521.569926][T15328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1521.595018][T15328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1521.603768][T15328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1522.107161][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1522.174040][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1522.248067][ T1137] bond0 (unregistering): Released all slaves
[ 1522.660395][T16639] loop1: detected capacity change from 0 to 512
[ 1522.704564][T16639] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1522.741145][T16639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1522.822109][T16639] EXT4-fs (loop1): 1 truncate cleaned up
[ 1522.862858][T16639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1523.635108][T15328] Bluetooth: hci3: command tx timeout
[ 1524.238505][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1524.285739][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1524.325508][ T1137] bond0 (unregistering): Released all slaves
[ 1524.892889][T15606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1525.640446][T16666] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1629'.
[ 1525.737974][T15328] Bluetooth: hci3: command tx timeout
[ 1526.326191][T16563] lo speed is unknown, defaulting to 1000
[ 1527.813263][T15328] Bluetooth: hci3: command tx timeout
[ 1528.259946][ T1137] hsr_slave_0: left promiscuous mode
[ 1528.290636][ T1137] hsr_slave_1: left promiscuous mode
[ 1528.297687][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1528.316509][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1528.415805][ T1137] hsr_slave_0: left promiscuous mode
[ 1528.444843][ T1137] hsr_slave_1: left promiscuous mode
[ 1528.466698][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1528.516308][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1528.600216][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1528.621500][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1528.862599][ T1137] veth1_macvtap: left promiscuous mode
[ 1528.886667][ T1137] veth0_macvtap: left promiscuous mode
[ 1528.902644][ T1137] veth1_vlan: left promiscuous mode
[ 1528.924712][ T1137] veth0_vlan: left promiscuous mode
[ 1528.947586][T16689] loop3: detected capacity change from 0 to 1024
[ 1529.072371][T16689] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[ 1529.875779][T15328] Bluetooth: hci3: command tx timeout
[ 1530.231693][T16694] loop3: detected capacity change from 0 to 40427
[ 1530.240408][T16694] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1530.249563][T16694] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1530.263220][T16694] F2FS-fs (loop3): invalid crc value
[ 1530.348117][T16694] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1530.368368][T16694] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1530.376233][T16694] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1532.095048][ T1137] team0 (unregistering): Port device team_slave_1 removed
[ 1532.142791][ T1137] team0 (unregistering): Port device team_slave_0 removed
[ 1533.071976][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[ 1533.712774][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[ 1535.230222][   T29] audit: type=1800 audit(1787262642.907:204): pid=16703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1637" name="bus" dev="ramfs" ino=57970 res=0 errno=0
[ 1535.855169][ T1137] team0 (unregistering): Port device team_slave_1 removed
[ 1535.974798][ T1137] team0 (unregistering): Port device team_slave_0 removed
[ 1536.086791][T16713] loop7: detected capacity change from 0 to 512
[ 1536.117470][T16713] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1536.165892][T16713] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1536.220215][T16713] EXT4-fs (loop7): 1 truncate cleaned up
[ 1536.269895][T16713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1537.536675][ T7733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1538.698409][T16476] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1538.736163][T16476] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1538.790311][T16476] bridge_slave_0: entered allmulticast mode
[ 1538.887954][T16476] bridge_slave_0: entered promiscuous mode
[ 1538.930282][T16732] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1642'.
[ 1539.105653][T16476] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1539.257116][T16476] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1539.373879][T16476] bridge_slave_1: entered allmulticast mode
[ 1539.574741][T16476] bridge_slave_1: entered promiscuous mode
[ 1540.021866][T16738] loop3: detected capacity change from 0 to 1024
[ 1540.126981][T16738] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[ 1540.858686][T16476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1541.054894][T16476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1541.216541][T16625] lo speed is unknown, defaulting to 1000
[ 1541.278136][T16744] loop7: detected capacity change from 0 to 40427
[ 1541.287239][T16744] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1541.295958][T16744] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1541.311305][T16744] F2FS-fs (loop7): invalid crc value
[ 1541.440557][T16744] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1541.473152][T16744] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1541.481238][T16744] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1541.664443][T16476] team0: Port device team_slave_0 added
[ 1544.903991][   T29] audit: type=1800 audit(1787262652.157:205): pid=16756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1647" name="bus" dev="ramfs" ino=58046 res=0 errno=0
[ 1544.993302][T16476] team0: Port device team_slave_1 added
[ 1545.256314][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.264989][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1545.305107][T16476] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1545.376386][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1545.448691][T16476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1545.605044][T16476] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1545.620909][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1546.007995][T16476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1547.419645][T16775] loop3: detected capacity change from 0 to 512
[ 1547.467274][T16775] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1547.509224][T16775] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1547.557851][T16775] EXT4-fs (loop3): 1 truncate cleaned up
[ 1547.578415][T16775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1548.665186][   T29] audit: type=1800 audit(1787262656.287:206): pid=16769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1650" name="bus" dev="ramfs" ino=58070 res=0 errno=0
[ 1548.813355][T16476] hsr_slave_0: entered promiscuous mode
[ 1548.862611][T16476] hsr_slave_1: entered promiscuous mode
[ 1548.882672][T16476] debugfs: 'hsr0' already exists in 'hsr'
[ 1548.891604][T16476] Cannot create hsr debugfs directory
[ 1549.171553][T11200] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1549.331990][ T1137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.768589][T16563] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1549.801213][T16563] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1549.814935][T16563] bridge_slave_0: entered allmulticast mode
[ 1549.843609][T16563] bridge_slave_0: entered promiscuous mode
[ 1551.157001][T16563] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1551.165215][T16563] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1551.175590][T16563] bridge_slave_1: entered allmulticast mode
[ 1551.187390][T16563] bridge_slave_1: entered promiscuous mode
[ 1551.344673][T16808] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1654'.
[ 1552.902610][   T29] audit: type=1800 audit(1787262660.537:207): pid=16803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1653" name="bus" dev="ramfs" ino=58127 res=0 errno=0
[ 1553.385567][ T1137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1553.640942][T16563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1553.674735][T16563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1554.230130][T16824] loop7: detected capacity change from 0 to 40427
[ 1554.240683][T16824] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1554.249340][T16824] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1554.271695][T16824] F2FS-fs (loop7): invalid crc value
[ 1554.390608][T16824] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1554.446803][T16824] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1554.454716][T16824] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1554.511714][ T1137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1556.061041][T16563] team0: Port device team_slave_0 added
[ 1556.116417][T16563] team0: Port device team_slave_1 added
[ 1556.617158][T16849] loop3: detected capacity change from 0 to 1024
[ 1556.850364][T16851] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[ 1558.216031][ T1137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1558.682858][T16867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1662'.
[ 1559.724507][T16563] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1559.777628][T16563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1559.901199][T15327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1559.914952][T15327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1559.919589][T16563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1559.935002][T15327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1559.949537][T15327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1559.966647][T11074] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1560.066522][T16563] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1560.123358][T16563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1560.579251][T16563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1562.139356][T15328] Bluetooth: hci4: command tx timeout
[ 1563.150943][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1563.160567][    C1] bridge0: topology change detected, propagating
[ 1563.188536][   T29] audit: type=1800 audit(1787262670.867:208): pid=16875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1664" name="bus" dev="ramfs" ino=58243 res=0 errno=0
[ 1563.793437][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1563.801530][    C1] bridge0: topology change detected, propagating
[ 1564.191256][T15328] Bluetooth: hci4: command tx timeout
[ 1564.364950][T16625] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1564.403391][T16625] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1564.451358][T16625] bridge_slave_0: entered allmulticast mode
[ 1564.502515][T16625] bridge_slave_0: entered promiscuous mode
[ 1564.548348][   T29] audit: type=1800 audit(1787262672.227:209): pid=16878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1659" name="bus" dev="ramfs" ino=58253 res=0 errno=0
[ 1564.601553][T16625] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1564.632484][T16625] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1564.663360][T16625] bridge_slave_1: entered allmulticast mode
[ 1564.687667][T16625] bridge_slave_1: entered promiscuous mode
[ 1564.729614][T16563] hsr_slave_0: entered promiscuous mode
[ 1564.754847][T16563] hsr_slave_1: entered promiscuous mode
[ 1564.782799][T16563] debugfs: 'hsr0' already exists in 'hsr'
[ 1564.827586][T16563] Cannot create hsr debugfs directory
[ 1565.176440][T16906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1666'.
[ 1566.281257][T15328] Bluetooth: hci4: command tx timeout
[ 1566.714883][T16911] loop7: detected capacity change from 0 to 40427
[ 1566.739583][T16911] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1566.748646][T16911] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1566.760894][T16911] F2FS-fs (loop7): invalid crc value
[ 1566.837222][T16911] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1566.874247][T16911] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1566.884301][T16911] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1567.617656][T16625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1567.662907][T16625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1568.940455][T15328] Bluetooth: hci4: command tx timeout
[ 1569.611001][T16934] loop1: detected capacity change from 0 to 1024
[ 1569.805166][T16935] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[ 1570.472969][T16868] lo speed is unknown, defaulting to 1000
[ 1570.485059][T16625] team0: Port device team_slave_0 added
[ 1570.535990][T16625] team0: Port device team_slave_1 added
[ 1570.625496][ T1137] bridge_slave_1: left allmulticast mode
[ 1570.639193][ T1137] bridge_slave_1: left promiscuous mode
[ 1570.679601][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1570.787854][ T1137] bridge_slave_0: left allmulticast mode
[ 1570.830315][ T1137] bridge_slave_0: left promiscuous mode
[ 1570.844543][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1571.042895][ T1137] bridge_slave_1: left allmulticast mode
[ 1571.065185][ T1137] bridge_slave_1: left promiscuous mode
[ 1571.087396][T11074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1571.109453][T11074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1571.120169][T11074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1571.131585][T11074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1571.140984][T11074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1571.156261][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1571.408715][ T1137] bridge_slave_0: left allmulticast mode
[ 1571.691593][ T1137] bridge_slave_0: left promiscuous mode
[ 1572.408363][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1572.836454][ T1137] bridge_slave_1: left allmulticast mode
[ 1572.867850][ T1137] bridge_slave_1: left promiscuous mode
[ 1572.911584][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1573.162462][ T1137] bridge_slave_0: left allmulticast mode
[ 1573.194886][ T1137] bridge_slave_0: left promiscuous mode
[ 1573.236810][T15328] Bluetooth: hci0: command tx timeout
[ 1574.184316][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1575.631406][T16962] Bluetooth: MGMT ver 1.23
[ 1575.662756][T15328] Bluetooth: hci0: command tx timeout
[ 1576.012794][T16967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1675'.
[ 1577.683867][   T29] audit: type=1800 audit(1787262685.317:210): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1676" name="bus" dev="ramfs" ino=59458 res=0 errno=0
[ 1577.951746][T15328] Bluetooth: hci0: command tx timeout
[ 1579.809890][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1579.883763][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1579.910646][ T1137] bond0 (unregistering): Released all slaves
[ 1580.030963][T15328] Bluetooth: hci0: command tx timeout
[ 1580.120342][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1580.151791][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1580.181826][ T1137] bond0 (unregistering): Released all slaves
[ 1580.419079][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1580.711502][T16984] loop7: detected capacity change from 0 to 40427
[ 1580.735353][T16984] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1580.744180][T16984] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1580.755658][T16984] F2FS-fs (loop7): invalid crc value
[ 1580.832151][T16984] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1580.858415][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1580.876313][T16984] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1580.884551][T16984] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1580.903019][ T1137] bond0 (unregistering): Released all slaves
[ 1581.935965][T11074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1581.978189][T11074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1581.990937][T11074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1582.002632][T11074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1582.019311][T15327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1582.973049][ T1137] hsr_slave_0: left promiscuous mode
[ 1582.995865][ T1137] hsr_slave_1: left promiscuous mode
[ 1583.022007][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1583.034347][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1583.048974][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1583.057515][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1583.067739][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1583.077173][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1583.093668][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1583.103423][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1583.123627][ T1137] veth1_macvtap: left promiscuous mode
[ 1583.129748][ T1137] veth0_macvtap: left promiscuous mode
[ 1583.136531][ T1137] veth1_vlan: left promiscuous mode
[ 1583.143104][ T1137] veth0_vlan: left promiscuous mode
[ 1583.329000][T17015] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1679'.
[ 1584.111137][T15328] Bluetooth: hci2: command tx timeout
[ 1584.279421][ T1137] team0 (unregistering): Port device team_slave_1 removed
[ 1584.309802][ T1137] team0 (unregistering): Port device team_slave_0 removed
[ 1584.493450][ T1137] team0 (unregistering): Port device team_slave_1 removed
[ 1584.511855][ T1137] team0 (unregistering): Port device team_slave_0 removed
[ 1584.691931][ T1137] team0 (unregistering): Port device team_slave_1 removed
[ 1584.711537][ T1137] team0 (unregistering): Port device team_slave_0 removed
[ 1584.960397][T16947] lo speed is unknown, defaulting to 1000
[ 1586.432894][T15328] Bluetooth: hci2: command tx timeout
[ 1586.466996][T17034] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1587.499781][T17042] loop7: detected capacity change from 0 to 1024
[ 1587.768071][T17043] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[ 1588.512123][T15328] Bluetooth: hci2: command tx timeout
[ 1588.735546][T16999] lo speed is unknown, defaulting to 1000
[ 1590.591762][T15328] Bluetooth: hci2: command tx timeout
[ 1592.969876][T16868] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1592.999276][T16868] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1593.065923][T16868] bridge_slave_0: entered allmulticast mode
[ 1593.442011][T16868] bridge_slave_0: entered promiscuous mode
[ 1593.451502][   T29] audit: type=1800 audit(1787262701.127:211): pid=17069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1686" name="bus" dev="ramfs" ino=59648 res=0 errno=0
[ 1593.484423][T16868] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1593.493712][T16868] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1593.515895][T16868] bridge_slave_1: entered allmulticast mode
[ 1593.742682][T17074] loop3: detected capacity change from 0 to 512
[ 1593.759467][T16868] bridge_slave_1: entered promiscuous mode
[ 1593.803734][T17074] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1593.873935][T17074] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1593.979708][T17074] EXT4-fs (loop3): 1 truncate cleaned up
[ 1594.040420][T17074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1594.069540][T16868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1594.107737][T16868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1594.349062][T11200] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1594.524347][T16868] team0: Port device team_slave_0 added
[ 1594.604338][T16947] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1594.632168][T17090] loop3: detected capacity change from 0 to 512
[ 1594.638562][T16947] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1594.655723][T17090] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1594.672847][T16947] bridge_slave_0: entered allmulticast mode
[ 1594.804663][T16947] bridge_slave_0: entered promiscuous mode
[ 1594.823597][T17091] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1594.888276][T17095] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1691'.
[ 1595.041703][T17090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1595.221746][T16868] team0: Port device team_slave_1 added
[ 1595.543932][T17090] EXT4-fs (loop3): 1 truncate cleaned up
[ 1595.601678][T17090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1595.667733][ T1137] bridge_slave_1: left allmulticast mode
[ 1595.679329][ T1137] bridge_slave_1: left promiscuous mode
[ 1595.694184][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1595.719314][ T1137] bridge_slave_0: left allmulticast mode
[ 1595.782655][ T1137] bridge_slave_0: left promiscuous mode
[ 1595.792501][   T29] audit: type=1800 audit(1787262703.477:212): pid=17098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1693" name="cdrom" dev="configfs" ino=58900 res=0 errno=0
[ 1595.806218][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1595.841440][T11200] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1595.859094][   T29] audit: type=1800 audit(1787262703.477:213): pid=17098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1693" name="file" dev="configfs" ino=58901 res=0 errno=0
[ 1595.902930][ T1137] bridge_slave_1: left allmulticast mode
[ 1595.903748][   T29] audit: type=1800 audit(1787262703.567:214): pid=17101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1693" name="UDC" dev="configfs" ino=58903 res=0 errno=0
[ 1595.909344][ T1137] bridge_slave_1: left promiscuous mode
[ 1595.981655][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1596.004912][ T1137] bridge_slave_0: left allmulticast mode
[ 1596.030376][ T1137] bridge_slave_0: left promiscuous mode
[ 1596.042097][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1596.085562][ T1137] bridge_slave_1: left allmulticast mode
[ 1596.094288][ T1137] bridge_slave_1: left promiscuous mode
[ 1596.100846][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1596.116859][ T1137] bridge_slave_0: left allmulticast mode
[ 1596.128866][ T1137] bridge_slave_0: left promiscuous mode
[ 1596.136391][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1596.286731][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1596.313342][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1596.328637][ T1137] bond0 (unregistering): Released all slaves
[ 1596.436451][T17112] loop3: detected capacity change from 0 to 512
[ 1596.464599][T17112] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1596.498660][T17112] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1596.564002][T17112] EXT4-fs (loop3): 1 truncate cleaned up
[ 1596.585506][T17112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1598.788284][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1598.827560][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1598.867301][ T1137] bond0 (unregistering): Released all slaves
[ 1599.146415][T11200] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1599.858712][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1599.876143][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1599.888000][ T1137] bond0 (unregistering): Released all slaves
[ 1600.057220][T16947] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1600.103084][T16947] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1600.174539][T16947] bridge_slave_1: entered allmulticast mode
[ 1600.230595][T16947] bridge_slave_1: entered promiscuous mode
[ 1600.727493][T16868] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1600.736610][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1600.779891][T16868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1600.988450][T16868] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1600.996641][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1601.027431][T16868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1602.546096][T16947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1602.638674][T16947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1603.841448][T17143] loop7: detected capacity change from 0 to 1024
[ 1604.035762][T17143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1604.050444][T17143] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1604.163861][   T29] audit: type=1800 audit(1787262711.847:215): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1702" name="bus" dev="ramfs" ino=59797 res=0 errno=0
[ 1604.556386][T17143] EXT4-fs (loop7): shut down requested (1)
[ 1605.527411][   T29] audit: type=1804 audit(1787262712.187:216): pid=17143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1703" name="/newroot/404/file1/file1" dev="loop7" ino=15 res=1 errno=0
[ 1605.597322][T17150] loop3: detected capacity change from 0 to 512
[ 1605.609915][ T1137] hsr_slave_0: left promiscuous mode
[ 1605.632146][T17150] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1605.662403][ T1137] hsr_slave_1: left promiscuous mode
[ 1605.696608][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1605.730114][T17150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1605.760657][ T7733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1605.771800][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1605.829128][T17150] EXT4-fs (loop3): 1 truncate cleaned up
[ 1605.850381][ T1137] hsr_slave_0: left promiscuous mode
[ 1605.857035][T17150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1605.885439][ T1137] hsr_slave_1: left promiscuous mode
[ 1605.926047][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1605.964010][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1608.522156][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1608.530969][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.580584][T11200] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1608.619329][ T1137] team0 (unregistering): Port device team_slave_1 removed
[ 1608.708338][ T1137] team0 (unregistering): Port device team_slave_0 removed
[ 1610.675713][ T1137] team0 (unregistering): Port device team_slave_1 removed
[ 1611.027700][ T1137] team0 (unregistering): Port device team_slave_0 removed
[ 1611.539177][ T1137] team0 (unregistering): Port device team_slave_1 removed
[ 1611.608353][ T1137] team0 (unregistering): Port device team_slave_0 removed
[ 1611.730005][T17169] loop1: detected capacity change from 0 to 512
[ 1611.746309][T17169] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1611.754463][T17169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1611.788255][T17169] EXT4-fs (loop1): 1 truncate cleaned up
[ 1611.813217][T17169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1612.578745][T16947] team0: Port device team_slave_0 added
[ 1612.779614][T15606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1612.816592][T16868] hsr_slave_0: entered promiscuous mode
[ 1612.837844][T16868] hsr_slave_1: entered promiscuous mode
[ 1612.848221][T16868] debugfs: 'hsr0' already exists in 'hsr'
[ 1612.854686][T16868] Cannot create hsr debugfs directory
[ 1612.863253][T16947] team0: Port device team_slave_1 added
[ 1613.008182][T16947] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1613.017822][T16947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1613.048230][T16947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1613.099461][T16947] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1613.108459][T16947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1613.142446][T16947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1613.333782][T16999] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1613.342416][T16999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1613.350355][T16999] bridge_slave_0: entered allmulticast mode
[ 1613.359800][T16999] bridge_slave_0: entered promiscuous mode
[ 1613.403663][T16999] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1613.411791][T16999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1613.419757][T16999] bridge_slave_1: entered allmulticast mode
[ 1613.429931][T16999] bridge_slave_1: entered promiscuous mode
[ 1613.464336][T16947] hsr_slave_0: entered promiscuous mode
[ 1613.471989][T16947] hsr_slave_1: entered promiscuous mode
[ 1613.479049][T16947] debugfs: 'hsr0' already exists in 'hsr'
[ 1613.486257][T16947] Cannot create hsr debugfs directory
[ 1613.597765][T16999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1613.643311][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1613.801405][T16999] team0: Port device team_slave_0 added
[ 1613.822356][T16999] team0: Port device team_slave_1 added
[ 1614.016013][T16999] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1614.024236][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1614.054365][T16999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1614.073287][T16999] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1614.083320][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1614.112635][T16999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1614.146117][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1614.345971][T16999] hsr_slave_0: entered promiscuous mode
[ 1614.355683][T16999] hsr_slave_1: entered promiscuous mode
[ 1614.362775][T16999] debugfs: 'hsr0' already exists in 'hsr'
[ 1614.369075][T16999] Cannot create hsr debugfs directory
[ 1614.975293][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1615.364231][T16947] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1615.396229][T16947] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1615.448810][T16947] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1615.465754][T16947] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1615.477656][T16947] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1615.490206][T16947] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1615.507787][T16947] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1615.519990][T16947] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1615.610571][T16868] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1615.625749][T16868] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1615.650364][T16868] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1615.666104][T16868] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1615.733953][T16868] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1615.747758][T16868] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1615.758355][T16868] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1615.772472][T16868] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1615.790622][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1616.005594][T16947] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1616.090225][T16947] 8021q: adding VLAN 0 to HW filter on device team0
[ 1616.119801][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1616.127686][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1616.140417][T16868] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1616.161548][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1616.169419][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1616.263614][T16868] 8021q: adding VLAN 0 to HW filter on device team0
[ 1616.325527][T15352] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1616.333828][T15352] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1616.426472][T15352] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1616.434384][T15352] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1616.487719][T16999] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1616.505023][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1616.515972][T16999] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1616.527605][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1616.545278][T16999] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1616.556660][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1616.569704][T16999] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1616.583868][T16999] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1617.021021][T16999] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1617.100433][T16999] 8021q: adding VLAN 0 to HW filter on device team0
[ 1617.167404][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1617.175371][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1617.237218][   T76] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1617.245186][   T76] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1618.153541][T16947] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1618.325229][T16947] veth0_vlan: entered promiscuous mode
[ 1618.377344][T16947] veth1_vlan: entered promiscuous mode
[ 1618.417840][T16868] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1618.560584][T16947] veth0_macvtap: entered promiscuous mode
[ 1618.611015][T16947] veth1_macvtap: entered promiscuous mode
[ 1618.689792][T16947] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1618.743197][T16947] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1618.836179][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1618.873257][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1618.903201][T15327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1618.920994][T15327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1618.934617][T15327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1618.945193][T15327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1618.953977][T15327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1618.971086][ T6136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1619.092042][ T6136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1619.256818][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1619.353197][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1619.387572][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1619.577216][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1619.617234][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1619.937350][T17319] loop1: detected capacity change from 0 to 256
[ 1621.172608][T15327] Bluetooth: hci3: command tx timeout
[ 1621.425567][T17321] nfs: Bad value for 'port'
[ 1623.321564][T15327] Bluetooth: hci3: command tx timeout
[ 1624.375118][T17352] loop2: detected capacity change from 0 to 40427
[ 1624.395361][T17352] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1624.403991][T17352] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1624.436097][T17352] F2FS-fs (loop2): invalid crc value
[ 1625.650907][T15327] Bluetooth: hci3: command tx timeout
[ 1625.698580][T17352] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1625.747494][T17352] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1625.756615][T17352] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1625.799127][T17360] loop1: detected capacity change from 0 to 512
[ 1626.048386][T17360] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1626.116719][T17360] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1626.622984][T17360] EXT4-fs (loop1): 1 truncate cleaned up
[ 1626.629074][T17295] lo speed is unknown, defaulting to 1000
[ 1626.735728][T17360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1627.247865][T17372] loop7: detected capacity change from 0 to 40427
[ 1627.290921][   T29] audit: type=1800 audit(1787262734.957:217): pid=17357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1715" name="bus" dev="ramfs" ino=60722 res=0 errno=0
[ 1627.395717][T17372] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1627.404377][T17372] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1627.419365][T17372] F2FS-fs (loop7): invalid crc value
[ 1627.689133][T17372] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1627.716210][T15328] Bluetooth: hci3: command tx timeout
[ 1627.754995][T17372] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1627.763806][T17372] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1628.457493][T16999] veth0_vlan: entered promiscuous mode
[ 1628.476666][T15606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1628.728504][T16999] veth1_vlan: entered promiscuous mode
[ 1630.368580][T16999] veth0_macvtap: entered promiscuous mode
[ 1630.445887][   T48] bridge_slave_1: left allmulticast mode
[ 1630.475904][   T48] bridge_slave_1: left promiscuous mode
[ 1630.482886][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1631.078056][T17393] loop3: detected capacity change from 0 to 512
[ 1631.259172][   T48] bridge_slave_0: left allmulticast mode
[ 1631.367975][   T48] bridge_slave_0: left promiscuous mode
[ 1631.458086][T17393] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1631.466062][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1631.532051][T17393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1631.592851][T17393] EXT4-fs (loop3): 1 truncate cleaned up
[ 1631.925933][T17393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1632.397976][T17400] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1633.583500][T11200] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1633.647235][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1633.689887][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1633.710535][   T48] bond0 (unregistering): Released all slaves
[ 1633.732798][T16999] veth1_macvtap: entered promiscuous mode
[ 1634.393188][   T48] hsr_slave_0: left promiscuous mode
[ 1634.449913][   T48] hsr_slave_1: left promiscuous mode
[ 1634.474283][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1635.774661][T17419] loop2: detected capacity change from 0 to 256
[ 1636.386925][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1639.015881][T17429] loop1: detected capacity change from 0 to 512
[ 1639.126817][T17429] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1639.223404][T17429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1639.317966][T17429] EXT4-fs (loop1): 1 truncate cleaned up
[ 1639.386891][T17429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1641.496425][T17442] loop2: detected capacity change from 0 to 40427
[ 1641.566790][T17442] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1641.575446][T17442] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1641.594291][T17442] F2FS-fs (loop2): invalid crc value
[ 1641.976662][T17442] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1642.035988][T17442] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1642.044266][T17442] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1642.501170][   T29] audit: type=1800 audit(1787262750.107:218): pid=17438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1734" name="bus" dev="ramfs" ino=60957 res=0 errno=0
[ 1643.402797][T15606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1643.683557][   T48] team0 (unregistering): Port device team_slave_1 removed
[ 1643.852288][   T48] team0 (unregistering): Port device team_slave_0 removed
[ 1645.282790][   T29] audit: type=1800 audit(1787262752.967:219): pid=17462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1738" name="cdrom" dev="configfs" ino=61915 res=0 errno=0
[ 1645.602677][T17461] loop2: detected capacity change from 0 to 1024
[ 1645.650462][   T29] audit: type=1800 audit(1787262753.007:220): pid=17462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1738" name="file" dev="configfs" ino=61916 res=0 errno=0
[ 1645.711799][   T29] audit: type=1800 audit(1787262753.037:221): pid=17462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1738" name="UDC" dev="configfs" ino=61917 res=0 errno=0
[ 1645.841777][T17454] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[ 1646.391904][T15327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1646.473653][T15327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1646.491598][T15327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1646.512749][T15327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1646.523327][T15327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1648.080621][T17480] loop1: detected capacity change from 0 to 128
[ 1648.631727][T15327] Bluetooth: hci4: command tx timeout
[ 1649.950605][   T29] audit: type=1804 audit(1787262757.627:222): pid=17480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1740" name="/newroot/64/file0/file1" dev="loop1" ino=1048759 res=1 errno=0
[ 1650.187865][T17480] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54)
[ 1650.489649][T17480] FAT-fs (loop1): Filesystem has been set read-only
[ 1650.671432][T15327] Bluetooth: hci4: command tx timeout
[ 1653.844073][T15327] Bluetooth: hci4: command tx timeout
[ 1654.171997][T17295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1654.212758][T17295] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1654.244884][T17295] bridge_slave_0: entered allmulticast mode
[ 1654.291273][T15606] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54)
[ 1654.307039][T17295] bridge_slave_0: entered promiscuous mode
[ 1654.358188][T17295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1654.406083][T17295] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1654.467870][T17295] bridge_slave_1: entered allmulticast mode
[ 1654.503163][T17295] bridge_slave_1: entered promiscuous mode
[ 1655.883963][T15327] Bluetooth: hci4: command tx timeout
[ 1656.299835][T17295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1656.343221][T17295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1656.533010][T17295] team0: Port device team_slave_0 added
[ 1656.747503][T15327] Bluetooth: hci7: unexpected event for opcode 0x2041
[ 1656.856377][T17295] team0: Port device team_slave_1 added
[ 1656.969510][   T29] audit: type=1800 audit(1787262764.647:223): pid=17522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1747" name="id" dev="configfs" ino=61069 res=0 errno=0
[ 1656.975763][T17520] ==================================================================
[ 1657.000285][T17520] BUG: KASAN: slab-use-after-free in pn_bind+0x550/0x5b0
[ 1657.008026][T17520] Write of size 8 at addr ffff888052ea4800 by task syz.1.1747/17520
[ 1657.016801][T17520] 
[ 1657.019359][T17520] CPU: 1 UID: 0 PID: 17520 Comm: syz.1.1747 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1657.019415][T17520] Tainted: [L]=SOFTLOCKUP
[ 1657.019430][T17520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1657.019454][T17520] Call Trace:
[ 1657.019467][T17520]  <TASK>
[ 1657.019482][T17520]  dump_stack_lvl+0x100/0x190
[ 1657.019533][T17520]  print_report+0x13d/0x4b0
[ 1657.019592][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1657.019641][T17520]  ? __virt_addr_valid+0x239/0x430
[ 1657.019697][T17520]  ? pn_bind+0x550/0x5b0
[ 1657.019732][T17520]  kasan_report+0xdf/0x1c0
[ 1657.019776][T17520]  ? pn_bind+0x550/0x5b0
[ 1657.019817][T17520]  pn_bind+0x550/0x5b0
[ 1657.019854][T17520]  ? usb_gstrings_attach+0x474/0x920
[ 1657.019912][T17520]  ? __pfx_pn_bind+0x10/0x10
[ 1657.019949][T17520]  usb_add_function+0x219/0x890
[ 1657.020013][T17520]  configfs_composite_bind+0xd83/0x1960
[ 1657.020079][T17520]  gadget_bind_driver+0x28c/0xbf0
[ 1657.020115][T17520]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[ 1657.020172][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1657.020220][T17520]  ? __pfx_gadget_bind_driver+0x10/0x10
[ 1657.020259][T17520]  really_probe+0x241/0xa60
[ 1657.020305][T17520]  __driver_probe_device+0x210/0x460
[ 1657.020346][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1657.020398][T17520]  driver_probe_device+0x4a/0x140
[ 1657.020440][T17520]  __driver_attach+0x21f/0x5b0
[ 1657.020483][T17520]  ? __pfx___driver_attach+0x10/0x10
[ 1657.020525][T17520]  bus_for_each_dev+0x13e/0x1d0
[ 1657.020584][T17520]  ? __pfx_bus_for_each_dev+0x10/0x10
[ 1657.020642][T17520]  ? bus_add_driver+0x2b5/0x5b0
[ 1657.020705][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1657.020760][T17520]  bus_add_driver+0x305/0x5b0
[ 1657.020825][T17520]  driver_register+0x1e2/0x360
[ 1657.020871][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1657.020922][T17520]  usb_gadget_register_driver_owner+0x132/0x210
[ 1657.021000][T17520]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[ 1657.021054][T17520]  configfs_write_iter+0x302/0x4e0
[ 1657.021106][T17520]  vfs_write+0x6af/0x1050
[ 1657.021160][T17520]  ? __pfx_configfs_write_iter+0x10/0x10
[ 1657.021211][T17520]  ? __pfx_vfs_write+0x10/0x10
[ 1657.021261][T17520]  ? find_held_lock+0x2b/0x80
[ 1657.021321][T17520]  ksys_write+0x12a/0x250
[ 1657.021373][T17520]  ? __pfx_ksys_write+0x10/0x10
[ 1657.021429][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1657.021482][T17520]  do_syscall_64+0x123/0x790
[ 1657.021527][T17520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1657.021569][T17520] RIP: 0033:0x7f5c1b59e0d9
[ 1657.021600][T17520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1657.021642][T17520] RSP: 002b:00007f5c197f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1657.021680][T17520] RAX: ffffffffffffffda RBX: 00007f5c1b825fa0 RCX: 00007f5c1b59e0d9
[ 1657.021708][T17520] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 0000000000000007
[ 1657.021735][T17520] RBP: 00007f5c1b635024 R08: 0000000000000000 R09: 0000000000000000
[ 1657.021761][T17520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1657.021787][T17520] R13: 00007f5c1b826038 R14: 00007f5c1b825fa0 R15: 00007ffc7ceeef28
[ 1657.021829][T17520]  </TASK>
[ 1657.021843][T17520] 
[ 1657.367655][T17520] Allocated by task 4972:
[ 1657.372406][T17520]  kasan_save_stack+0x30/0x50
[ 1657.377578][T17520]  kasan_save_track+0x14/0x30
[ 1657.382720][T17520]  __kasan_kmalloc+0xaa/0xb0
[ 1657.387794][T17520]  __kmalloc_noprof+0x324/0x820
[ 1657.393145][T17520]  tomoyo_realpath_from_path+0xb6/0x690
[ 1657.399259][T17520]  tomoyo_check_open_permission+0x2af/0x3c0
[ 1657.405747][T17520]  tomoyo_file_open+0x6b/0x90
[ 1657.410909][T17520]  security_file_open+0xb5/0x1e0
[ 1657.416356][T17520]  do_dentry_open+0x588/0x14d0
[ 1657.421606][T17520]  vfs_open+0x82/0x3f0
[ 1657.426072][T17520]  path_openat+0x19fa/0x2440
[ 1657.431136][T17520]  do_file_open+0x20e/0x430
[ 1657.436110][T17520]  do_sys_openat2+0x10f/0x1e0
[ 1657.441250][T17520]  __x64_sys_openat+0x12d/0x210
[ 1657.446583][T17520]  do_syscall_64+0x123/0x790
[ 1657.451629][T17520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1657.458111][T17520] 
[ 1657.460652][T17520] Freed by task 4972:
[ 1657.465013][T17520]  kasan_save_stack+0x30/0x50
[ 1657.470178][T17520]  kasan_save_track+0x14/0x30
[ 1657.475315][T17520]  kasan_save_free_info+0x3b/0x70
[ 1657.480851][T17520]  __kasan_slab_free+0x5f/0x80
[ 1657.486087][T17520]  kfree+0x22b/0x6c0
[ 1657.490377][T17520]  tomoyo_realpath_from_path+0x19c/0x690
[ 1657.496585][T17520]  tomoyo_check_open_permission+0x2af/0x3c0
[ 1657.503073][T17520]  tomoyo_file_open+0x6b/0x90
[ 1657.508236][T17520]  security_file_open+0xb5/0x1e0
[ 1657.513676][T17520]  do_dentry_open+0x588/0x14d0
[ 1657.518926][T17520]  vfs_open+0x82/0x3f0
[ 1657.523398][T17520]  path_openat+0x19fa/0x2440
[ 1657.528465][T17520]  do_file_open+0x20e/0x430
[ 1657.533436][T17520]  do_sys_openat2+0x10f/0x1e0
[ 1657.538576][T17520]  __x64_sys_openat+0x12d/0x210
[ 1657.543905][T17520]  do_syscall_64+0x123/0x790
[ 1657.548957][T17520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1657.555435][T17520] 
[ 1657.557976][T17520] The buggy address belongs to the object at ffff888052ea4000
[ 1657.557976][T17520]  which belongs to the cache kmalloc-4k of size 4096
[ 1657.573427][T17520] The buggy address is located 2048 bytes inside of
[ 1657.573427][T17520]  freed 4096-byte region [ffff888052ea4000, ffff888052ea5000)
[ 1657.588790][T17520] 
[ 1657.591335][T17520] The buggy address belongs to the physical page:
[ 1657.598375][T17520] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52ea0
[ 1657.608004][T17520] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1657.617343][T17520] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1657.625633][T17520] page_type: f5(slab)
[ 1657.630007][T17520] raw: 00fff00000000040 ffff88801c023140 dead000000000100 dead000000000122
[ 1657.639444][T17520] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1657.648885][T17520] head: 00fff00000000040 ffff88801c023140 dead000000000100 dead000000000122
[ 1657.658417][T17520] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1657.667951][T17520] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1657.677493][T17520] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1657.687016][T17520] page dumped because: kasan: bad access detected
[ 1657.694055][T17520] page_owner tracks the page as allocated
[ 1657.700324][T17520] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5976, tgid 5976 (kworker/u8:18), ts 1393657736651, free_ts 1391811506314
[ 1657.723640][T17520]  post_alloc_hook+0xfd/0x120
[ 1657.728800][T17520]  get_page_from_freelist+0xf46/0x3500
[ 1657.734821][T17520]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 1657.741322][T17520]  new_slab+0xa2/0x660
[ 1657.745809][T17520]  refill_objects+0xe3/0x410
[ 1657.750871][T17520]  __pcs_replace_empty_main+0x372/0x680
[ 1657.757001][T17520]  __kmalloc_node_track_caller_noprof+0x677/0x830
[ 1657.764465][T17520]  kmalloc_reserve+0xe8/0x350
[ 1657.769624][T17520]  __alloc_skb+0x185/0x710
[ 1657.774499][T17520]  nsim_dev_trap_report_work+0x2af/0xd20
[ 1657.780704][T17520]  process_one_work+0xa23/0x1940
[ 1657.786146][T17520]  worker_thread+0x5ef/0xe50
[ 1657.791197][T17520]  kthread+0x373/0x450
[ 1657.795674][T17520]  ret_from_fork+0x730/0xd60
[ 1657.800745][T17520]  ret_from_fork_asm+0x1a/0x30
[ 1657.806009][T17520] page last free pid 15459 tgid 15459 stack trace:
[ 1657.813151][T17520]  __free_frozen_pages+0x79f/0x1090
[ 1657.818885][T17520]  qlist_free_all+0x47/0xf0
[ 1657.823879][T17520]  kasan_quarantine_reduce+0x1a0/0x1f0
[ 1657.829912][T17520]  __kasan_slab_alloc+0x69/0x90
[ 1657.835274][T17520]  kmem_cache_alloc_node_noprof+0x27f/0x6b0
[ 1657.841778][T17520]  __alloc_skb+0x140/0x710
[ 1657.846655][T17520]  netlink_alloc_large_skb+0x69/0x150
[ 1657.852580][T17520]  netlink_sendmsg+0x680/0xda0
[ 1657.857836][T17520]  __sys_sendto+0x48b/0x4e0
[ 1657.862813][T17520]  __x64_sys_sendto+0xe0/0x1c0
[ 1657.868072][T17520]  do_syscall_64+0x123/0x790
[ 1657.873123][T17520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1657.879608][T17520] 
[ 1657.882144][T17520] Memory state around the buggy address:
[ 1657.888321][T17520]  ffff888052ea4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1657.897184][T17520]  ffff888052ea4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1657.906055][T17520] >ffff888052ea4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1657.914909][T17520]                    ^
[ 1657.919366][T17520]  ffff888052ea4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1657.928221][T17520]  ffff888052ea4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1657.937074][T17520] ==================================================================
[ 1658.005471][T17520] Kernel panic - not syncing: kasan.fault=panic_on_write set ...
[ 1658.013999][T17520] CPU: 1 UID: 0 PID: 17520 Comm: syz.1.1747 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1658.026046][T17520] Tainted: [L]=SOFTLOCKUP
[ 1658.030797][T17520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1658.041860][T17520] Call Trace:
[ 1658.045459][T17520]  <TASK>
[ 1658.048690][T17520]  dump_stack_lvl+0x100/0x190
[ 1658.053870][T17520]  vpanic+0x553/0x970
[ 1658.058263][T17520]  ? __pfx_vpanic+0x10/0x10
[ 1658.063231][T17520]  ? __pfx___schedule+0x10/0x10
[ 1658.068605][T17520]  ? pn_bind+0x550/0x5b0
[ 1658.073285][T17520]  panic+0xd1/0xe0
[ 1658.077393][T17520]  ? __pfx_panic+0x10/0x10
[ 1658.082264][T17520]  ? preempt_schedule_common+0x3c/0xb0
[ 1658.088309][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1658.094534][T17520]  ? preempt_schedule_thunk+0x16/0x40
[ 1658.100487][T17520]  end_report.part.0+0x68/0x90
[ 1658.105763][T17520]  kasan_report.cold+0xe/0x18
[ 1658.110941][T17520]  ? pn_bind+0x550/0x5b0
[ 1658.115627][T17520]  pn_bind+0x550/0x5b0
[ 1658.120118][T17520]  ? usb_gstrings_attach+0x474/0x920
[ 1658.125967][T17520]  ? __pfx_pn_bind+0x10/0x10
[ 1658.131023][T17520]  usb_add_function+0x219/0x890
[ 1658.136391][T17520]  configfs_composite_bind+0xd83/0x1960
[ 1658.142529][T17520]  gadget_bind_driver+0x28c/0xbf0
[ 1658.148057][T17520]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[ 1658.154277][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1658.160501][T17520]  ? __pfx_gadget_bind_driver+0x10/0x10
[ 1658.166615][T17520]  really_probe+0x241/0xa60
[ 1658.171583][T17520]  __driver_probe_device+0x210/0x460
[ 1658.177412][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1658.183635][T17520]  driver_probe_device+0x4a/0x140
[ 1658.189178][T17520]  __driver_attach+0x21f/0x5b0
[ 1658.194432][T17520]  ? __pfx___driver_attach+0x10/0x10
[ 1658.200255][T17520]  bus_for_each_dev+0x13e/0x1d0
[ 1658.205615][T17520]  ? __pfx_bus_for_each_dev+0x10/0x10
[ 1658.211566][T17520]  ? bus_add_driver+0x2b5/0x5b0
[ 1658.216963][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1658.223186][T17520]  bus_add_driver+0x305/0x5b0
[ 1658.228370][T17520]  driver_register+0x1e2/0x360
[ 1658.233631][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1658.239856][T17520]  usb_gadget_register_driver_owner+0x132/0x210
[ 1658.246769][T17520]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[ 1658.252993][T17520]  configfs_write_iter+0x302/0x4e0
[ 1658.258653][T17520]  vfs_write+0x6af/0x1050
[ 1658.263451][T17520]  ? __pfx_configfs_write_iter+0x10/0x10
[ 1658.269666][T17520]  ? __pfx_vfs_write+0x10/0x10
[ 1658.274920][T17520]  ? find_held_lock+0x2b/0x80
[ 1658.280089][T17520]  ksys_write+0x12a/0x250
[ 1658.284869][T17520]  ? __pfx_ksys_write+0x10/0x10
[ 1658.290218][T17520]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1658.296430][T17520]  do_syscall_64+0x123/0x790
[ 1658.301492][T17520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1658.307981][T17520] RIP: 0033:0x7f5c1b59e0d9
[ 1658.312838][T17520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1658.334416][T17520] RSP: 002b:00007f5c197f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1658.343676][T17520] RAX: ffffffffffffffda RBX: 00007f5c1b825fa0 RCX: 00007f5c1b59e0d9
[ 1658.352443][T17520] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 0000000000000007
[ 1658.361210][T17520] RBP: 00007f5c1b635024 R08: 0000000000000000 R09: 0000000000000000
[ 1658.369971][T17520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1658.378747][T17520] R13: 00007f5c1b826038 R14: 00007f5c1b825fa0 R15: 00007ffc7ceeef28
[ 1658.387536][T17520]  </TASK>
[ 1658.391830][T17520] Kernel Offset: disabled
[ 1658.396569][T17520] Rebooting in 86400 seconds..