last executing test programs:

12m38.836670684s ago: executing program 32 (id=368):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0)

9m26.23016484s ago: executing program 33 (id=936):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

9m20.40850123s ago: executing program 3 (id=954):
r0 = syz_open_dev$rtc(&(0x7f0000000880), 0x0, 0x40000)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x1, 0x1, {0x14, 0x28, 0xe, 0xfffffffe, 0x7, 0xcd7b, 0x3, 0x39, 0xfffffffffffffffe}})

9m20.28064655s ago: executing program 3 (id=956):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000cd0000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
listen(r3, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)

9m14.776131585s ago: executing program 3 (id=964):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x1)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001200ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05002000128008000100736974001400028008000200c0000200060008002b000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

9m11.204417284s ago: executing program 3 (id=969):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x7fffefff)

9m10.039827388s ago: executing program 3 (id=970):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000040)={[{@orlov}]}, 0x26, 0x75c, &(0x7f0000000b00)="$eJzs3M1rHGUYAPBnJtmkTaMbQfDjIEILFko3SXNpT40Xb4VCwWsNySSETLIhu6ndWLD1LNTmoiCIePboVSj1D/AmBQXvgmiNB/GyMptNatNsum3Srqa/H0z3eefjfd6nO7zsQN4J4Ln1ZvFPEjEcERcjotzen0bEQCs6EnF987yNe9emiy2JZvPSb0lxWWw0y9t9Je3PY9G6JF6NiDuliFMfPZy31lhbmMrzbKXdHq0vLo/WGmtD84tTc9lctjQ+cW7s7MTE2bGJR9bwSpe1nnj33NFb37+zvv7DN/Wbb/SfTmKyVXe0a+uym8ey+X9Siskd+5eeRrIeSno9AAAAulL8zu+LiP7Wr9Ry9LUiAAAA4DBpDjYBAACAQy+JPQ4e2esgAAAA8P+w9XcAW2t7n9Y62E5+fTsiRnbL399aQxxxJEoRMbSRPLAyIdm8DPbl+o2IuD258/77qrjDru+z77Ed7QfXSA/ss3cOwu1i/pncbf5Jt+ef2GX+6d96d8I+dZ7/7ufv6zD/Xewyx7dfvFbqmP9GxOv9u+VPtvMnHfK/12X+m+sf33rUObvl/3eurfdDnH74/RCTs/P5nq8fuPP3ybudjhX1D3XK3+q1c/3LXdRe+GDjj4VOc0mR/+Txvb//3fIX98Qn7XGkEXGr/Vm013fkOL7443d71T8T0XyS7//LLuv/+evBq12eCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC1pRAxHkla24zStVCKORcTLMZTm1Vr91Gx1dWmmOBYxEqV0dj7PxiKivNlOivZ4K77fPrOjPRERL/10dDPpfJ5Vpqv5TK+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNuxiBiOJK1ERBoRf5bTtFKJ6O/i2sFnMD4AAADggIz0egAAAADAU+f5HwAAAA6/J33+Tw54HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMChdvHChWJrbty7Nl20Z640VheqV07PZLWFyuLqdGW6urJcmatW5/KsMl1dfFR/ebW6PH4uVq+O1rNafbTWWLu8WF1dql+eX5yayy5npWdSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI9ruLUlaSUi0lacppVKxAsRMRKlZHY+z8Yi4sWIuFsuDRbt8V4PGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgANXa6wtTOV5tiIQCJ5Z8GFE/AeGsUfQ65kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBeqDXWFqbyPFup9XokAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fb6SxIRxfZW+cTwjoN9A8lf5SIYiIj3P7/06dWpen1lPGIg+X17f/2z9v4zPSkAAAAAngfnH+fkref0red4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbtUaawtTeZ6t7C84H421ZtLhnF7XCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJl/AgAA///CK8Nb")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x1})

9m9.51671426s ago: executing program 3 (id=971):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
syz_emit_ethernet(0x51, &(0x7f0000000b40)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xdc, 0x1, 0x0, {0x9, 0x4, 0x0, 0x5, 0x0, 0x67, 0x2df3, 0xb, 0xff, 0xfffb, @private=0xa010101, @local, {[@end, @cipso={0x86, 0xa, 0x1, [{0x2, 0x2}, {0x7, 0x2}]}, @generic={0x89, 0x2}]}}, "3c8cdd"}}}}}, 0x0)

8m56.159858788s ago: executing program 34 (id=967):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "54cefc", 0x0, 0x2f, 0x1, @local, @local}}}}, 0x0)

8m53.691943978s ago: executing program 35 (id=971):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
syz_emit_ethernet(0x51, &(0x7f0000000b40)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xdc, 0x1, 0x0, {0x9, 0x4, 0x0, 0x5, 0x0, 0x67, 0x2df3, 0xb, 0xff, 0xfffb, @private=0xa010101, @local, {[@end, @cipso={0x86, 0xa, 0x1, [{0x2, 0x2}, {0x7, 0x2}]}, @generic={0x89, 0x2}]}}, "3c8cdd"}}}}}, 0x0)

8m5.800445086s ago: executing program 0 (id=1069):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)

8m4.76261944s ago: executing program 0 (id=1072):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

8m4.540805148s ago: executing program 0 (id=1073):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
listen(r1, 0x0)

8m3.237851003s ago: executing program 0 (id=1075):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r1, 0x20, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/218, 0xda}}, 0x10)

8m2.952293086s ago: executing program 0 (id=1076):
r0 = socket$inet6(0xa, 0x802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000500)={[], [{@smackfsroot={'smackfsroot', 0x3d, '\x81@\xd9\xd0\xa3'}}, {@smackfsdef={'smackfsdef', 0x3d, 'rss_stat\x00'}}, {@seclabel}, {@uid_eq}, {@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_lt}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_gt}]}, 0x1, 0x796, &(0x7f00000020c0)="$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")
sendmsg$inet(r0, 0x0, 0x0)

8m1.629297333s ago: executing program 0 (id=1078):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
syz_usb_connect(0x4, 0x5f, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x76, 0xe7, 0xf5, 0xec70927f5c9a48e7, 0x19d2, 0x1476, 0x69e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbb, 0x7, 0x5, 0xff, 0xec, 0x8f, 0xd, [], [{{0x9, 0x5, 0x80, 0x4, 0x20, 0xd, 0x9, 0x4}}, {{0x9, 0x5, 0xb, 0x2, 0x0, 0x9, 0x2a, 0x2}}, {{0x9, 0x5, 0x6, 0x1e, 0x200, 0x9, 0xf, 0x4}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xe, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0x8, 0xa3d4742f39880693, 0x70, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf5, 0xe}]}}]}}]}}]}}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xe}}, @TCA_FW_INDEV={0x14, 0x3, 'sit0\x00'}]}}]}, 0x4c}}, 0x20040054)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0x80}, 0x16, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m46.599064927s ago: executing program 36 (id=1078):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10)
syz_usb_connect(0x4, 0x5f, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x76, 0xe7, 0xf5, 0xec70927f5c9a48e7, 0x19d2, 0x1476, 0x69e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbb, 0x7, 0x5, 0xff, 0xec, 0x8f, 0xd, [], [{{0x9, 0x5, 0x80, 0x4, 0x20, 0xd, 0x9, 0x4}}, {{0x9, 0x5, 0xb, 0x2, 0x0, 0x9, 0x2a, 0x2}}, {{0x9, 0x5, 0x6, 0x1e, 0x200, 0x9, 0xf, 0x4}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xe, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0x8, 0xa3d4742f39880693, 0x70, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf5, 0xe}]}}]}}]}}]}}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xe}}, @TCA_FW_INDEV={0x14, 0x3, 'sit0\x00'}]}}]}, 0x4c}}, 0x20040054)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)={'L-', 0x80}, 0x16, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m20.184549011s ago: executing program 5 (id=1162):
gettid()
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x8442, 0x5c)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x33, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f00000024c0)={{0x0, 0x0, 0x466, {0x0, 0xf000, 0x3}}, "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", "77ea251d6d953c4bf72336bf229cb34693f8eae207380c8b558c359441bb0cdf599f457fc58d62f0577840b39519a053adf9c5b2580c03449312c9e8b6bda80e601c26757645b516860110da711d1c16b719ace54170edf620bb8e71dbceacc6c39989e1ad77533accea8ea579a8ad3f545d43a8c1bfdf76a88aa21a1894ad658950984e435e5a4f987135f9ce7c1559af5ef292af0d829191332b333f317c05bb25ab27e03eee3f19b51fd39e23e6a33cf09be36e13a1a35f1d4def121a00f26996feded4e3be7bc5fdbf69a5b5901de180558890b6d02f066e1a5da68a1b20985b8b67fdf148e7d7c5526d2fcd0bd7bca531790aa318d6b30c7c36f4ed35ff5deae3f1c966fd83de627e5d14b9814033c381c920d77f8f7ba9490e40151e8da7fea4591666de17a6a31bd8dd9e4238ee4656e9f9a85d7be29d4780629b3d0ad2ade80dddf3b9df7fc31b4182311755316a12d5057891e29cc76e112182191d0af66b0740f619f10bf817f7cea87c3c110c985354a1d583a94adbcb64f2904df9dbd66591f97b9470dadcb2255938ee04b93f4adabb15893db13c11d261395e1820db85acffcb1c7e3e992bd167712116368037cb826d22c3e6789257d8c9a81be459f82cd6c2eaec6e1dff75b56448c6caffd89f4241d475fe4753a44da474831e84749d5d3fdb9e4dfc832fd0d9f10a1c45cc4f2f9768d2df4bb11cafd8b6901699becd28e79aa8cf325cdfa9021fe971f42453525162a95f098c4c9c8db1d2c3b1f550327b3db1ac3f38bf66542c08b6385dd9d48afbac0cd54dacbc42f12a24d7699eb7b3b71a1c0f89c5a1c084401de1ffac8dd7ee6d10253416a0078e3f57887f6a42c48905d38691add5c9ac16f5d9733f4c816e7e408c59b2db87d6dc578c5ee0b7922dfbe9fe71e504463d46be8d2e72953d0ea73ac39370cd68980b2b2eb58f8fd19c8b4e8bae2eef78f178c4051cf69af5ecd70caf75f97d2e35bb9f172dae1ebd3a0d528bf23b04181e065f8c1ab80c4c6a748e893693221bed995f194236fa92d945aaf815cfbaa753d275b1338120efd10eca803bb4abd59517b643250a3e6eb11ef2b2e9d4025214a72bf908d16fcb46b7f6be4476df9b6bb6e74fc90711cd176069c9ae41dcba6f31284b41ab206281abcb0ae5c2db86ec88941e354f22bb62c1ff79051ab793ff975b9ee20cb68d67c496520377faa01d6f230faa66aa10b651ec6d39ee97e13b52c020a857ead23f324ee1c6a6cc6270aaba4ff0d91d6428129a196af7f513761c324085063e3274ca4369600c230f19eb2fcc6a212c75bdd1c27b45c487239a031d00342e21726e63f95fac30470c83e8e4cb4512108c00e4ef037d1d76ba3f4253f36bce84a26684e91df0e5cb5212f9dcc41e1333a1bd455041ae90cc111fa6d8a9f3fe4c84cf8a82bcca770918bf74adfb5d334d3c6d0fa8f551a226cdebcb97ee0ea878613297978509c29eab6df8002325de9459b8b5d5f534fadb286236b6c0ef0c49e64316a7bc6efce5503d8eb69ce99febfb00cfa84e39b59ccc9108cd606e65e68b8d410cb095b4f26e2415301a6b0af4503637f7f231ac791a898f644863fcb70dba165a78b9d67b49b4fe03b571dbd22783ec7287a12cfbf86b27e31728c464191034e7e7c62639e73d9bf49cde3cbaf64d90d9cd2e02cca74f36cc2f78f8f91be2cdf6f791e6cb1662f28b9c6b76f2aa7742ea8a0d82faf42278c1570a92947e0a417148b659a54c9696ceb1d32260b19d50835a03f42b0898d1860b37b3514149f708e3b17cf9651c4ad58e3983d0e80f1d1630eab9f0fa918379c9f2f8283a147abe1defcfd05b888be2c59d2d66b26f842389c00edbbcb2cc841adb322bfece473e0b895615c8c1c14ff8f6ea9e232bed0ebd8b28a33923b23fea1e0a8ebd0acb4fe302e58b31e3484cf36bacd498a980f4f684980607154f0e38ebdad63b082cf53c691147e5d171de2d5075cacf6d23df09ba9590ea7adc494561913d54d34ff7584a7cb3e781ff4519664b7fc6da0faded017eba387f9939d6a895ca22bbe3e3dc4429a3ea17734677952309af6ccf3b30e529c80668221234f4554832ddc524b031d9e46a9eddc7b13128f6bc90a55bdb40ac6c1b69c9d754b81255d57be1bae367260344f4c89df12c63280f120b734ea8389f9368394b09bc5bf53f4c097dc36132c673e2764ebfdc0284291e037e3c3a6689109ddc7e4e9321cfcd3758a2136e8b60edb68e91a32e0ed3e8431e88ed9c5668356f996a42f7436e6dadada9d835954062add0ae9d1d6b46fcccb3c1a18628b276fc7b365a9ce40d062f4105fdb823447400157334167f348ef0de222a374439a91b8731ce39995b0de514df4d05a0e6cd79317933e44d8d3e237c9d310de64944f04f60b37e4dd70d08e6bf43a1f4ecde4dafb3a5e19de60059b3d51489be432d797bbca9734d30c3c5c748f40661727c046cd88410c67dcb1e504cc5dd2cd24f9182f4f075954107f0788c21027994aab75d65b6917209a26655aee9e634ce537bc0f716e9267e0bdc09030534734e0285f4d6b67faf066c8136948b455b26e9eba4ce595270808f6a904c3496e0b320a76b8d5271f4d26d1ebab3a5079994f9bf3c99c9567f501ce04c02396a95bb857f4428a4c6c72c7d8bc3de9492258fd2e6279aa09546a55b768bd0b17057843a01df40d38802967d8a52cac50c94e0f641852f4e66417e02d52feaac804d0dfa6b6a8028b8d7bc86fbf3d26b75a9d90980b91c973d720a980a725fa01699172d8c3c42cc6052e5808efcdc44dca8fc012e5ce89f7fb7d8ee2d4eef3f26d1a3159e58a80c1e3e1c9de7a5d0028a964ced594eb13a154e1a511a16a896429114544fd79b5b3cf55c1c169e658e9fbdb21344f0340e4b5b95c4864931f213891fe5c7c1378d39f3d5ebdb1839e92efc7ab7249829ca0cc7e1e432a5e7c56429c5c5c6b355ff81492c1134c56c8ce103fc1ce97fbf4664c7ca4e4ed89e1bcc0bde88c15c2ec62c7f8e6328539aaa720a2823bfca4de5ffbb06788708863fc65898724834e676a21970c45ff4c80b17fa6821167f2dd4f457d0ced52d6538516d829685d3285e5d3a2ac2215e1d8602e9827d94d5ad776c26446a34a5cc0700b60c87da2e573903846ed74bcb14e6c9c80f14a8c397dfb06e5814c293fa9568201dfc17a190ff1fb446c9cc507827835f7bbf9cd026e1a67a4b01b2c6f3d6a37164c51fd2819588a28d3dcdb847b67d8cd505a3af8a19a913036402d6e107838c9cffc3f89616ab325bee785c5ebab056b69960836babda6ab69bb2230d404aa1787f23fd1c3991899300347f6bc4f237795747bba4cb95c3501c8ac0e76e0675adb37a4e3551b96e6a30a3fcc285509a5e5a49b97318ecab8b6b6d2b59ce1ec10cae189581cd94062887ae1b93cb9aec418416168e39e623a9da55ab295eebca1a0f8ca4d29fc9c7c5ee8989d36dd2e56641d31f9c7edeae560b0e2398871bbd6e02c1bd7a733f98a4d02e12395f2d9088f2ae74cfec80a9dfe5621c7c843e4d0311f3e8961fe147ebe3678c59062948175e8147f0f7419eb61cf9b6fcf974915ae6291cf9dfb8630046f5853269807c7ae47e3b6abf08923a97b02d595d4f94b96241e67ceb6c8f949160df1abdaf7f8eca5bac9715ce8420893d679b848c546c55f108908ae9f6089d40832698d6968ed2cdd4383288acdbad17dc16ad55078bc82ee316e0c1f1df67baef4f872cb888f2a4ae5c81ac4e33f079d5efd50e6f7f261b8046ac0bc2966684a61487cb9978314741608d9576ea5a2d96e1f8f560b108386c150f821235dda0c1380b61e7e6038f4ceb3666931613c727a59f78b16d289d01e6c9fe6c117f5fa8ce0a9244e12dcd0fa27a2f46102bd8b551ffb8c602d12795ea7206f06e3eda2b27947fa66e1a9121bd8b77b115c111ccc5aa73acde9c32a9a54d316c60d77b163dfee3f60eeebcd7946605fdce35ebc28d331f8c045513d5756e43776a8663c51322265fa96226d9c52c59c5a356245a7582decc7ca56becabb7ca144dedd9b68e1ee30713082618ea360435f8bb643359c9093a5baea54f6ac0d515e9a8665e9393392b0c2f78b9fcbff4c456e13d9cf7d214c8b84bea3ac508b3083cab4cd8909f2cc508e0a9872c2017c25d498a91e75f2844189c2f647bf21728771eda985ad4306eb7f9c3dc37abd2d22fbf9d88303e800f9b6151c49da4a5d0c4ba1089acf539d70bb6e11119d2748ad87eabb877edcc9ef3f9c34fdd378057cdbf466c81ececfa4a19e7b5ced195afcbc3ea038a135e99b6fbbe63c186533c9f9e4be439988fdaedb1bcce2883fc87776efb139e58bc51f9d0ab364bd3feaacdfc472422bbc4a87fb2c9e2c2f617225ccda2df4951702a709d4bbdf8a77344a90be27e619fcbf52bfdec5ce3ed55803147a4d5b003af3ded3d2520f7a29a057bee40979cd946841fdae90f0e735310ad9ad5bfbce228f38e4e16f4a4694e8855b7c1585aa652a29313f78150938cd4917912e75c1cf4981bf9e83a1115171f609dccb129bef5b716e6716796039ef2d68efbf045b0dbbc36e6dcdabdf89cb139eaafed105cf709013f0fae464af2d8c03e8fff5ebb64b9fd273728bd25950bf15c25bf3f428645d03a3b24dc72ad6ab2fb552865764d9d028385fdc550e4ca8d6c85220eebfb459c4548a99a2719695066c6f083b149fd028bb3a29827f00e07d617c91e309d9d7fc7e04eb07a190fd6a6b29924da81c679a748b455c9e6866136f8c974c9f8df4402bf08486f598806bad7a828d44baa925da791aa145ab558ac5de2d493fabe2ca914b986fda0683a67b1cecbbc664ad933b05e7d51eabd96105fe9e2e341d256b527dc20fd2ef2de7a1236db3873ce47ff00a3381aa8dac26a2fa106402307a04112d370164a10dac5d1267b32f95165bb35dc276b19889b3ced8e847fdce8ebaf9fd999b1bdf2937786a6bf2424af54ec79d5b6fa522f830d16209f8b816d99a7ae6348d5e7f2557bee0d1f68869fe1ff9eb616f49a25888d93b0fc95e50597c560bda89723148a2bf4b5618ffb96a6ee0ae64e3ff8de2460f072e6bd8954b3e49ccd750db1c98cb28e8eb7eacf90974316bd8530d2e7ce1d13348610d4cce0615d1685ea79b2494b3a82ddd262aedb0365808e9cacf927519e1040b7ae385b4e2ccf14a69cd12453c0fb3a90e5f38ed8df5f8c84a86e65828cd3898f64e6fda31672549574478a38f0a93b530db26fa17220849442d8fdc1f873d6a62e9ecc345be3918e9ada216740e0a4b67e1145c5610a750b1cc6fe1b5c6e00c1b7182b4fca444f7a7bc62371fca970ad736b3602a34442e83913aa55cfe14c12c6b8c34c6dc96943cee3a996f5733c93239c6782e1c07960f44890222d17cb14209c86536634b9b5e771b3837ed861d7511ceb739f1db644495dfe391804115898fdd5b69c50314018b91cb35f4f2e4a76867ceb0c5af20a19a226b272ced13e309fcbd268f22f329a85e2234578aad3aed64f655e22676ab5061ecf6e496ed818fff324ad00a7a806fc60ed4222c28ab5b1c40ff1c4f605b4a3a83b1dde2cd82d65ba6e2690daa6937e14181cb0ad0a56de8d45576b3c3b1bd57e82026472333251b42eaabb90dd1c4892d56921482150c1fc73c505f8eb43f2867f4914739e74aaba597fe7081674572db0ea282a660c914bdbae4895393711d7825bde8cb27fc9205edfc44171db188dbc8caa1ac0e00eb7c3f0"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000400000008000000010000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0004ecff000000000e9063b9b7145f1d000200ebc01f75652c5b87bd00"/44], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r3, @ANYBLOB="000000000000005bc229740000000b00850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc)
close_range(r2, 0xffffffffffffffff, 0x0)

7m18.832371949s ago: executing program 5 (id=1165):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

7m18.630678166s ago: executing program 5 (id=1166):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x5)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0)

7m17.637135246s ago: executing program 5 (id=1169):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==")
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
gettid()
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

7m14.080377454s ago: executing program 5 (id=1178):
waitid(0x2, 0x0, 0x0, 0x2, 0x0)
setpriority(0x0, 0x0, 0x0)
time(0x0)
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x3e, &(0x7f0000000640)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x8, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0xfffe}}}}}}, 0x0)

7m11.377421062s ago: executing program 5 (id=1181):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r4 = syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000007f80)='./file0\x00', 0x1000000, &(0x7f0000000a80)={[{@dots}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0xb}}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@quiet}, {@fat=@dmask={'dmask', 0x3d, 0x6}}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@fat=@nfs}, {@fat=@dos1xfloppy}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@discard}]}, 0x0, 0x210, &(0x7f0000000000)="$eJzs3bFrE1EYAPDv0tpcXMwmiMKBi4MUdXWpSAUxICoddFKoLq0Idoku7eif4B/o4FiCQxDkJL0klyZNbNO0Z/X3G8J335f37r3wuFyGvHt9/f3W5oedd9+ufo00TaK2FmvRTaIZtRjYi6lq00sAwN+qm+exnxdG0kmFQwIAztiU7/8Y+dn/a0bzxJ0CAFw8L16+evKg1Vp/nmVpRCe/UqT32htF8Ohxa/1OlmXZ92fNslWn3d5YGtbvZuP3Dr36pbjcr9/LCofrK3HrZnzZ/9HuJbKHT1tj9Xpszhp4evDaPOX0AQAAAAAAAAAAAAAAAAAAAACgEjciG2hG3L5fZMv9fVZXR+s9jX69OBruDzSxv89yXFvuH5bbA+W75zUxAAAAAAAAAAAAAAAAAAAAuEB2Pn3eerO9/fZjGdQj4nDmJEHS7/ggszQITt7POQW1WHjPi5py1M/+Q0iPWgBlsHJ0qTG71UTQ+MOKSha9SLK5m/881eIfD+ac10pEFJnOfGevTS918zw/Rj/JdnmNqFd1cQIAAAAAAAAAAAAAAAAAgP9M+affyVpaxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoALl8//nCHYj4hhvHp6sUelUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+If9DgAA//8FtC5T")
getdents64(r4, &(0x7f00000021c0)=""/4096, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

7m10.936036508s ago: executing program 37 (id=1181):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r4 = syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000007f80)='./file0\x00', 0x1000000, &(0x7f0000000a80)={[{@dots}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0xb}}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@quiet}, {@fat=@dmask={'dmask', 0x3d, 0x6}}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@fat=@nfs}, {@fat=@dos1xfloppy}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@discard}]}, 0x0, 0x210, &(0x7f0000000000)="$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")
getdents64(r4, &(0x7f00000021c0)=""/4096, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})

5m26.025469861s ago: executing program 6 (id=1441):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, &(0x7f0000000bc0))
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)
sendmsg$nl_route_sched(r3, 0x0, 0x80c0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c084)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fstat(r3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
syz_io_uring_setup(0xa39, 0x0, 0x0, &(0x7f0000000340))
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xc0000000, 0x1, 0x32315559, 0x3, 0x1, 0x8, 0x9, 0x6, 0x0, 0x1, 0x1, 0x3}})

5m24.910117501s ago: executing program 6 (id=1444):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5m23.978937836s ago: executing program 6 (id=1446):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x1)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)

5m20.71638432s ago: executing program 6 (id=1451):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044002)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48)
socket$inet(0x2, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000200)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

5m19.314284823s ago: executing program 6 (id=1454):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5m18.940497383s ago: executing program 6 (id=1455):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5m18.169368196s ago: executing program 38 (id=1455):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4m27.268653046s ago: executing program 1 (id=1585):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix={0x6, 0x7, 0x59455247, 0x6, 0x1, 0x4, 0x9, 0x4, 0x1, 0x4, 0x0, 0x2}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "ee4f6da8d2cf4011ac7b00", 0x43353039})

4m27.038378965s ago: executing program 1 (id=1586):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix={0x6, 0x7, 0x59455247, 0x6, 0x1, 0x4, 0x9, 0x4, 0x1, 0x4, 0x0, 0x2}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "ee4f6da8d2cf4011ac7b00", 0x43353039})

4m26.794543295s ago: executing program 1 (id=1589):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x1)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)

4m25.519250268s ago: executing program 1 (id=1595):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044002)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48)
socket$inet(0x2, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000200)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

4m22.090197225s ago: executing program 1 (id=1601):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x101100, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)

4m20.648212101s ago: executing program 1 (id=1604):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$msdos(&(0x7f0000001000), &(0x7f00000001c0)='./file0\x00', 0x226880, &(0x7f0000001040)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1c7, &(0x7f0000000300)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_emit_ethernet(0x6e, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x1, 0x9, 0x60, 0x64, 0x0, 0xa0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x2}, @timestamp={0x44, 0x4, 0xb3, 0x0, 0xf}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x8, 0x3, 0x1, 0x2, 0x7}, 0x1, {0xf0}}}, {0x8, 0x22eb, 0x1, {{0xd, 0x2, 0x4, 0x3, 0x1, 0x0, 0x7, 0x2}, 0x2, {0x2, 0x3, 0x1, 0xb, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0)
write$vga_arbiter(r3, &(0x7f0000000500), 0xf)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000e4000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/75, 0x4b}, 0x1}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x4}], 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
rename(0x0, &(0x7f00000000c0)='./file1\x00')
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xb8, 0x0, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x96}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@broadcast, @private=0xa010100, 0xffffff, 0xffffffff, 'macvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x67, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x8, 0x7, [0x14, 0x2a, 0x2b, 0x8, 0x20, 0x3d, 0x7, 0x38, 0x2f, 0x1b, 0x1, 0xc, 0x8, 0x2b, 0x20, 0x34], 0x0, 0x3, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)

4m20.075336867s ago: executing program 39 (id=1604):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$msdos(&(0x7f0000001000), &(0x7f00000001c0)='./file0\x00', 0x226880, &(0x7f0000001040)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1c7, &(0x7f0000000300)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_emit_ethernet(0x6e, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x1, 0x9, 0x60, 0x64, 0x0, 0xa0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x2}, @timestamp={0x44, 0x4, 0xb3, 0x0, 0xf}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x8, 0x3, 0x1, 0x2, 0x7}, 0x1, {0xf0}}}, {0x8, 0x22eb, 0x1, {{0xd, 0x2, 0x4, 0x3, 0x1, 0x0, 0x7, 0x2}, 0x2, {0x2, 0x3, 0x1, 0xb, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0)
write$vga_arbiter(r3, &(0x7f0000000500), 0xf)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000e4000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/75, 0x4b}, 0x1}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x4}], 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
rename(0x0, &(0x7f00000000c0)='./file1\x00')
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xb8, 0x0, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x96}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@broadcast, @private=0xa010100, 0xffffff, 0xffffffff, 'macvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x67, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x8, 0x7, [0x14, 0x2a, 0x2b, 0x8, 0x20, 0x3d, 0x7, 0x38, 0x2f, 0x1b, 0x1, 0xc, 0x8, 0x2b, 0x20, 0x34], 0x0, 0x3, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)

2m54.890255428s ago: executing program 2 (id=1756):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080))

2m53.897336888s ago: executing program 2 (id=1760):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
syz_open_dev$vim2m(0x0, 0x2000000003, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000810)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000380)=0x200000000)
r2 = dup2(r1, r1)
write$vhost_msg_v2(r2, 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0)
r3 = socket(0x10, 0x80003, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
keyctl$setperm(0x5, 0x0, 0x52b242d)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="1dd4", 0x2}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x2, @local, 0x6}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000480)='w', 0x1}], 0x1}}], 0x3, 0x800)

2m49.04806496s ago: executing program 2 (id=1765):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x1)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)

2m45.640434875s ago: executing program 2 (id=1769):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044002)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48)
socket$inet(0x2, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000200)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

2m43.309005443s ago: executing program 2 (id=1773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r3, 0x29, 0x40, 0x0, 0xd0060)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39)

2m41.876361879s ago: executing program 2 (id=1777):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m40.785275477s ago: executing program 40 (id=1777):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.74217208s ago: executing program 7 (id=2069):
socket$inet(0x2, 0x800, 0x8000002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)

11.055278128s ago: executing program 7 (id=2074):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00')
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

10.89494865s ago: executing program 9 (id=2075):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8.346357806s ago: executing program 9 (id=2079):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
syz_usb_connect(0x5, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ce1d2e081aeb57e386850100030109022b"], 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b000000"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.345746716s ago: executing program 8 (id=2087):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x9}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @void, @void, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080)

7.777050512s ago: executing program 8 (id=2080):
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

7.063639589s ago: executing program 4 (id=2081):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xffffffff908811b9, 0xab2, 0x8, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r2, 0x0}])

6.19481542s ago: executing program 7 (id=2082):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={<r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)

6.099503387s ago: executing program 9 (id=2083):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x20000005)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'})
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201120000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
syz_io_uring_setup(0xec1, &(0x7f0000000380)={0x0, 0xd385, 0x4, 0x3, 0xf1, 0x0, r1}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000600))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000640)=0x6, 0x0, 0x4)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r6, 0x80047437, 0x10004000000006)
r7 = socket(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x52002, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'sit0\x00', 0x2000})
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)

5.089229359s ago: executing program 7 (id=2084):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffd, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.33456928s ago: executing program 8 (id=2085):
r0 = userfaultfd(0x80801)
r1 = syz_io_uring_setup(0x113, &(0x7f00000002c0), &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x102, 0x1, {0x3}})
io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
openat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x2c, 0x0, '\x00', [@pad1, @pad1]}, 0x10)
r5 = openat$cgroup_root(0xffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000480)='tasks\x00', 0x2, 0x0)
r6 = syz_open_dev$mouse(0x0, 0x8, 0x10100)
ioctl$KVM_GET_REGS(r6, 0x8090ae81, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x70bde6, 0x25dfdbf9, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x230}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14)
sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x84, 0xd, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004001)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
r11 = add_key$user(&(0x7f00000006c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000008c0)="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", 0x1f9, 0xffffffffffffffff)
r12 = add_key$user(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r12, r11, r11}, &(0x7f0000000780)=""/86, 0x56, &(0x7f0000000400)={&(0x7f00000002c0)={'crc32c\x00'}})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0)
mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil)

4.016952926s ago: executing program 7 (id=2086):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)
syz_usb_disconnect(r0)
r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x10, 0x700, 0xfffff5cd, 0x6, {{0x5, 0x4, 0x3, 0x19, 0x14, 0x68, 0x0, 0x79, 0x29, 0x0, @remote, @empty}}}})

3.850308899s ago: executing program 9 (id=2088):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005880)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}}], 0x1, 0x840)

3.84033001s ago: executing program 8 (id=2089):
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'})
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201120000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
syz_io_uring_setup(0xec1, &(0x7f0000000380)={0x0, 0xd385, 0x4, 0x3, 0xf1, 0x0, r1}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000600))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000640)=0x6, 0x0, 0x4)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r6, 0x80047437, 0x10004000000006)
r7 = socket(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x52002, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'sit0\x00', 0x2000})
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)

3.776425605s ago: executing program 4 (id=2090):
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000001c0)=0x20000005)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'})
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
syz_io_uring_setup(0xec1, &(0x7f0000000380)={0x0, 0xd385, 0x4, 0x3, 0xf1, 0x0, r1}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000600))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000640)=0x6, 0x0, 0x4)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r6, 0x80047437, 0x10004000000006)
r7 = socket(0x10, 0x3, 0x0)
sendto$inet6(r7, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x52002, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'sit0\x00', 0x2000})
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)

2.679508694s ago: executing program 9 (id=2091):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000300)={@remote, 0x0, 0x0, 0x70, 0x0, [{@broadcast}, {@initdev}, {@local}, {@multicast2}, {@dev}, {@broadcast}, {}]}})
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket(0x1d, 0x4, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x0)
ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000040)=0x20)
sendmsg$FOU_CMD_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007"], 0x74}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x8001)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
io_setup(0x222, &(0x7f0000000180))
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000500)={{0xf}, 0x1, 0x0, 0xcf, {0x8, 0x80}, 0x1e, 0x6})

1.187889574s ago: executing program 4 (id=2092):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffd, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

613.044231ms ago: executing program 4 (id=2093):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x9}, @value=@ver_80211n={0x0, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @void, @void, @void, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080)
setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff})
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil)

579.840213ms ago: executing program 8 (id=2094):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}}, 0x0)
setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff})
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil)

405.755057ms ago: executing program 7 (id=2095):
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

310.493925ms ago: executing program 8 (id=2096):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

288.793846ms ago: executing program 4 (id=2097):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

40.532287ms ago: executing program 9 (id=2098):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={<r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=2099):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005880)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}}], 0x1, 0x840)

kernel console output (not intermixed with test programs):

954][T11539] netlink: 'syz.7.1600': attribute type 10 has an invalid length.
[  628.036887][T11539] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1600'.
[  629.056349][T11073] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.348811][ T9477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.409542][ T9477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.657464][ T9477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.679158][ T9477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.783305][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout
[  629.921752][ T9477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.460042][ T9477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.716695][ T9477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.775092][ T9477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.169231][T11561] loop9: detected capacity change from 0 to 512
[  631.184291][T11561] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  633.773680][T11560] loop8: detected capacity change from 0 to 512
[  633.784258][T11561] EXT4-fs (loop9): 1 truncate cleaned up
[  633.791217][T11561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  634.053713][T11560] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  634.141147][T11564] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.1609: bg 0: block 256: padding at end of block bitmap is not set
[  634.168823][T11564] EXT4-fs (loop9): Remounting filesystem read-only
[  634.175734][T11564] overlayfs: failed to verify origin (/, ino=2, err=-5)
[  634.183100][T11564] overlayfs: failed to verify upper root origin
[  634.216031][T11560] EXT4-fs (loop8): 1 truncate cleaned up
[  634.223841][T11560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  634.254686][T11560] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.1610: bg 0: block 256: padding at end of block bitmap is not set
[  634.322027][T11567] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  634.343143][T11560] EXT4-fs (loop8): Remounting filesystem read-only
[  634.350030][T11560] overlayfs: failed to verify origin (/, ino=2, err=-5)
[  634.357144][T11560] overlayfs: failed to verify upper root origin
[  634.486900][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.531798][T10797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  634.548016][ T9810] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.548255][T10797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  634.702914][T10797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  634.804136][ T9477] tipc: Disabling bearer <udp:syz2>
[  634.807158][T10797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  634.835801][ T9477] tipc: Disabling bearer <udp:syz0>
[  634.841546][T10797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  634.841905][T10797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  634.896676][ T9477] tipc: Left network mode
[  635.227982][T11568] lo speed is unknown, defaulting to 1000
[  635.783011][T11578] netlink: 'syz.8.1613': attribute type 10 has an invalid length.
[  635.794970][T11578] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1613'.
[  636.732030][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1615'.
[  637.007976][T10797] Bluetooth: hci2: command tx timeout
[  637.150740][T11586] loop7: detected capacity change from 0 to 1024
[  637.167243][T11586] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  637.229477][T11586] EXT4-fs (loop7): can't mount with commit=32768, fs mounted w/o journal
[  637.361252][T11598] loop9: detected capacity change from 0 to 4096
[  637.547373][T11598] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  637.711673][T11603] loop8: detected capacity change from 0 to 512
[  637.900823][T11603] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  638.022074][T11598] ntfs3: loop9: Failed to initialize $Extend/$Reparse.
[  638.074250][T11603] EXT4-fs (loop8): 1 truncate cleaned up
[  638.085966][T11603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  638.161329][T11603] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.1619: bg 0: block 256: padding at end of block bitmap is not set
[  638.179780][T11603] EXT4-fs (loop8): Remounting filesystem read-only
[  638.187431][T11603] overlayfs: failed to verify origin (/, ino=2, err=-117)
[  638.194843][T11603] overlayfs: failed to verify upper root origin
[  638.568389][T11568] chnl_net:caif_netlink_parms(): no params data found
[  639.061935][T10797] Bluetooth: hci2: command tx timeout
[  639.094660][ T9810] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.657368][T11614] netlink: 'syz.8.1620': attribute type 10 has an invalid length.
[  640.666709][T11614] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1620'.
[  640.936820][T11617] loop7: detected capacity change from 0 to 4096
[  641.142422][T10797] Bluetooth: hci2: command tx timeout
[  642.812535][T11568] bridge0: port 1(bridge_slave_0) entered blocking state
[  642.824051][T11568] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.832102][T11568] bridge_slave_0: entered allmulticast mode
[  642.840777][T11568] bridge_slave_0: entered promiscuous mode
[  642.975093][T11568] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.992214][T11568] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.027402][T11568] bridge_slave_1: entered allmulticast mode
[  643.042589][T11568] bridge_slave_1: entered promiscuous mode
[  643.087919][ T9477] hsr_slave_0: left promiscuous mode
[  643.100395][ T9477] hsr_slave_1: left promiscuous mode
[  643.171843][ T9477] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  643.180549][ T9477] batman_adv: batadv0: Removing interface: batadv_slave_0
[  643.215024][ T9477] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  643.223130][T10797] Bluetooth: hci2: command tx timeout
[  643.666574][ T9477] batman_adv: batadv0: Removing interface: batadv_slave_1
[  643.715933][ T9477] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  643.726568][ T9477] batman_adv: batadv0: Removing interface: virt_wifi0
[  643.742434][ T9477] bridge_slave_1: left allmulticast mode
[  643.748599][ T9477] bridge_slave_1: left promiscuous mode
[  643.755644][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.810370][ T9477] bridge_slave_0: left allmulticast mode
[  643.855222][ T9477] bridge_slave_0: left promiscuous mode
[  643.890459][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.961938][ T9477] veth1_macvtap: left promiscuous mode
[  643.972239][ T9477] veth0_macvtap: left promiscuous mode
[  643.984666][ T9477] veth1_vlan: left promiscuous mode
[  644.001768][ T9477] veth0_vlan: left promiscuous mode
[  645.571872][T11645] loop8: detected capacity change from 0 to 4096
[  645.718304][T11647] loop9: detected capacity change from 0 to 4096
[  645.733240][T11645] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  645.765919][T11645] ntfs3: loop8: Failed to initialize $Extend/$Reparse.
[  646.267100][T11650] loop8: detected capacity change from 0 to 4096
[  646.410615][T11650] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  646.499304][T11650] ntfs3: loop8: Failed to initialize $Extend/$Reparse.
[  647.283814][T11653] loop9: detected capacity change from 0 to 1024
[  647.416454][T11653] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  647.460136][ T9477] team0 (unregistering): Port device team_slave_1 removed
[  647.635070][T11653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  647.797892][T11653] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  647.810412][ T9477] team0 (unregistering): Port device team_slave_0 removed
[  647.946297][T11653] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  648.017948][ T9477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  648.035772][T11653] 9pnet_fd: Insufficient options for proto=fd
[  648.149026][ T9477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  648.647763][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.949506][T11665] loop8: detected capacity change from 0 to 2048
[  649.255015][T11665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  649.476492][T11668] loop9: detected capacity change from 0 to 4096
[  649.567285][T11670] loop7: detected capacity change from 0 to 1024
[  649.633484][T11670] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  649.664319][T11670] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  649.733315][T11670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  649.798114][T11670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.100702][T11670] 9pnet_fd: Insufficient options for proto=fd
[  651.385960][ T9313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.548759][T11686] loop9: detected capacity change from 0 to 4096
[  651.707494][T11688] loop7: detected capacity change from 0 to 4096
[  652.984155][ T9477] bond0 (unregistering): Released all slaves
[  653.423370][T11696] loop7: detected capacity change from 0 to 4096
[  653.771452][T11696] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  653.811468][T11568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  653.846803][T11568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  653.877558][T11696] ntfs3: loop7: Failed to initialize $Extend/$Reparse.
[  654.024869][T11700] loop9: detected capacity change from 0 to 2048
[  654.128741][T11700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  654.446674][T11568] team0: Port device team_slave_0 added
[  654.501087][T11568] team0: Port device team_slave_1 added
[  654.683437][T11568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  654.729796][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  654.850487][T11568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  654.886021][T11568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  654.918547][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  655.489674][T11568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.513132][T11705] loop7: detected capacity change from 0 to 4096
[  655.756422][T11568] hsr_slave_0: entered promiscuous mode
[  655.796592][T11711] loop8: detected capacity change from 0 to 4096
[  655.805616][T11568] hsr_slave_1: entered promiscuous mode
[  655.826416][T11568] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  655.846079][T11568] Cannot create hsr debugfs directory
[  655.939378][T11713] loop7: detected capacity change from 0 to 4096
[  656.239606][T11715] loop9: detected capacity change from 0 to 4096
[  657.601019][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1654'.
[  657.802031][T11721] loop8: detected capacity change from 0 to 1024
[  658.241804][T11721] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  658.339113][T11727] netlink: 'syz.7.1655': attribute type 10 has an invalid length.
[  658.347214][T11721] EXT4-fs (loop8): can't mount with commit=32768, fs mounted w/o journal
[  658.372920][T11727] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1655'.
[  658.964648][T11733] loop8: detected capacity change from 0 to 512
[  659.043568][T11733] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  659.152494][T11733] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  659.334238][   T28] audit: type=1800 audit(1756166889.700:147): pid=11733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1657" name="file2" dev="loop8" ino=16 res=0 errno=0
[  659.432145][T11568] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  659.769354][ T9810] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.860911][T11568] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  659.969044][T11568] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  660.111703][T11568] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  660.274895][T11744] loop9: detected capacity change from 0 to 4096
[  660.393488][T11754] loop7: detected capacity change from 0 to 512
[  660.401376][T11754] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  660.415504][T11754] EXT4-fs (loop7): 1 truncate cleaned up
[  660.421911][T11754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  660.443461][T11754] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1662: bg 0: block 256: padding at end of block bitmap is not set
[  660.459299][T11754] EXT4-fs (loop7): Remounting filesystem read-only
[  660.465929][T11754] overlayfs: failed to verify origin (/, ino=2, err=-117)
[  660.473356][T11754] overlayfs: failed to verify upper root origin
[  660.479394][T11748] loop8: detected capacity change from 0 to 4096
[  660.492659][T11756] overlayfs: cleanup of 'bus/work' failed (-5)
[  660.498892][T11756] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  660.508330][T11756] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null.
[  660.539011][T11568] 8021q: adding VLAN 0 to HW filter on device bond0
[  660.623163][T11568] 8021q: adding VLAN 0 to HW filter on device team0
[  660.645887][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.653025][ T9496] bridge0: port 1(bridge_slave_0) entered forwarding state
[  660.716915][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.724065][ T9496] bridge0: port 2(bridge_slave_1) entered forwarding state
[  661.055559][T11568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  661.091553][ T9313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  661.116195][T11568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  661.317094][T11759] loop8: detected capacity change from 0 to 4096
[  661.361492][ T9494] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  661.379550][ T9494] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  661.623245][ T9494] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  662.068870][ T9494] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.215814][ T9494] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  662.242293][ T9494] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.484778][ T9494] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  662.547061][ T9494] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.667235][T11769] loop9: detected capacity change from 0 to 1024
[  662.671233][T11568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.710833][T11769] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  662.723061][T11769] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  662.785773][T11769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  662.840145][T11769] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  662.865636][T11568] veth0_vlan: entered promiscuous mode
[  662.931904][T11769] 9pnet_fd: Insufficient options for proto=fd
[  663.072419][T11568] veth1_vlan: entered promiscuous mode
[  663.518444][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  663.534041][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  663.545733][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  663.562778][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  663.578222][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  663.587026][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  663.653085][T11568] veth0_macvtap: entered promiscuous mode
[  663.722236][ T9494] tipc: Disabling bearer <udp:syz2>
[  663.728669][ T9494] tipc: Disabling bearer <udp:syz0>
[  663.737031][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  663.748895][ T9494] tipc: Left network mode
[  663.754369][T11774] lo speed is unknown, defaulting to 1000
[  663.773423][T11568] veth1_macvtap: entered promiscuous mode
[  664.198645][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  664.222712][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.249653][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  664.275199][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.304891][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  664.335712][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.364573][T11568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  664.483845][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.494626][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.504592][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.515299][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.527797][T11568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.546060][T11568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.558226][T11568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  664.617163][T11568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  664.628348][T11568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  664.638476][T11568] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  664.649205][T11568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.727020][T11785] netlink: 'syz.8.1668': attribute type 10 has an invalid length.
[  665.736698][T10797] Bluetooth: hci3: command tx timeout
[  665.757011][T11785] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1668'.
[  666.180726][T11774] chnl_net:caif_netlink_parms(): no params data found
[  666.307970][ T9496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.385154][ T9496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.479087][T11795] loop9: detected capacity change from 0 to 512
[  666.509798][T11795] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  666.541161][T11795] EXT4-fs (loop9): 1 truncate cleaned up
[  666.548210][T11795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  666.636240][T11795] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.1670: bg 0: block 256: padding at end of block bitmap is not set
[  666.713771][T11795] EXT4-fs (loop9): Remounting filesystem read-only
[  666.719796][T11799] loop8: detected capacity change from 0 to 4096
[  666.730617][T11774] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.749760][T11797] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  666.764346][T11774] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.779605][T11774] bridge_slave_0: entered allmulticast mode
[  666.784952][T11795] overlayfs: failed to verify origin (/, ino=2, err=-5)
[  666.789755][T11774] bridge_slave_0: entered promiscuous mode
[  666.821534][T11795] overlayfs: failed to verify upper root origin
[  666.849838][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.861054][T11774] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.868368][T11774] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.877483][T11774] bridge_slave_1: entered allmulticast mode
[  666.892971][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.894374][T11774] bridge_slave_1: entered promiscuous mode
[  667.006111][T11774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.141087][ T9494] hsr_slave_0: left promiscuous mode
[  667.559115][ T9494] hsr_slave_1: left promiscuous mode
[  667.583260][ T9494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  667.594237][ T9494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  667.602361][ T9494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  667.610652][ T9494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  667.636151][ T9494] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  667.643344][ T9494] batman_adv: batadv0: Removing interface: virt_wifi0
[  667.679445][ T9494] bridge0: port 3(team0) entered disabled state
[  667.690955][ T9494] bridge_slave_1: left allmulticast mode
[  667.697311][ T9494] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.707759][ T9494] bridge_slave_0: left allmulticast mode
[  667.725028][ T9494] bridge_slave_0: left promiscuous mode
[  667.730800][ T9494] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.767584][T10797] Bluetooth: hci3: command tx timeout
[  667.897111][ T9494] veth1_macvtap: left promiscuous mode
[  667.902718][ T9494] veth0_macvtap: left promiscuous mode
[  669.869984][T10797] Bluetooth: hci3: command tx timeout
[  669.901546][ T9494] team_slave_1 (unregistering): left promiscuous mode
[  669.979056][ T9494] team_slave_1 (unregistering): left allmulticast mode
[  670.132957][ T9494] team0 (unregistering): Port device team_slave_1 removed
[  670.525717][ T9494] team_slave_0 (unregistering): left promiscuous mode
[  670.532539][ T9494] team_slave_0 (unregistering): left allmulticast mode
[  670.552289][ T9494] team0 (unregistering): Port device team_slave_0 removed
[  670.603911][T11824] loop8: detected capacity change from 0 to 2048
[  670.646522][T11824] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  670.705070][ T9494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  670.873651][ T9494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  671.130270][T11828] loop8: detected capacity change from 0 to 1024
[  671.160554][T11828] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  671.174464][T11828] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  671.201550][T11828] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  671.222388][T11828] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  671.357638][T11828] 9pnet_fd: Insufficient options for proto=fd
[  671.933360][T10797] Bluetooth: hci3: command tx timeout
[  672.078173][ T9810] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  672.273908][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  673.304895][ T9494] bond0 (unregistering): Released all slaves
[  673.432466][T11774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  673.466459][T11812] syzkaller1: entered promiscuous mode
[  673.472164][T11812] syzkaller1: entered allmulticast mode
[  673.486296][T11774] team0: Port device team_slave_0 added
[  673.494839][T11774] team0: Port device team_slave_1 added
[  673.527718][T11774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  673.534854][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.561318][T11774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  673.721637][T11774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.932105][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.978922][T11774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  674.293190][T11841] loop9: detected capacity change from 0 to 4096
[  674.873321][T11774] hsr_slave_0: entered promiscuous mode
[  674.901517][T11774] hsr_slave_1: entered promiscuous mode
[  674.952428][T11774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  674.987941][T11774] Cannot create hsr debugfs directory
[  675.107970][T11848] loop8: detected capacity change from 0 to 4096
[  677.313660][T11861] loop8: detected capacity change from 0 to 1024
[  677.334275][T11861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  677.344045][T11857] loop2: detected capacity change from 0 to 4096
[  677.348882][T11861] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  677.364052][T11861] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  677.426521][T11861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  678.645205][ T9810] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.703984][T11774] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  678.737146][T11774] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  678.790170][T11774] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  678.836644][T11774] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  678.845537][T11859] loop9: detected capacity change from 0 to 32768
[  678.945042][T11874] loop2: detected capacity change from 0 to 1024
[  678.959007][T11859] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.1687 (11859)
[  678.974765][T11868] loop8: detected capacity change from 0 to 4096
[  678.996860][T11874] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  679.040786][T11874] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  679.086982][T11774] 8021q: adding VLAN 0 to HW filter on device bond0
[  679.099326][T11874] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  679.104524][T11859] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  679.116106][T11874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  679.168596][T11859] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  679.202203][T11859] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  679.212281][T11774] 8021q: adding VLAN 0 to HW filter on device team0
[  679.247205][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.254423][ T9475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  679.351851][T11859] BTRFS info (device loop9): use zstd compression, level 3
[  679.427527][ T9477] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.434759][ T9477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.438868][T11859] BTRFS info (device loop9): use no compression
[  679.858987][T11859] BTRFS info (device loop9): using free space tree
[  680.051222][T11568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.109512][T11774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  680.218383][T11859] BTRFS info (device loop9): enabling ssd optimizations
[  680.225394][T11859] BTRFS info (device loop9): auto enabling async discard
[  680.543818][T11901] loop8: detected capacity change from 0 to 32768
[  680.544258][T10115] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  680.568511][T11901] BTRFS warning: duplicate device /dev/loop8 devid 1 generation 8 scanned by syz.8.1694 (11901)
[  680.588244][T11897] loop2: detected capacity change from 0 to 4096
[  680.735761][ T8997] I/O error, dev loop8, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  681.265414][T11774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.191679][T11914] loop9: detected capacity change from 0 to 1024
[  682.249929][T11914] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  682.287416][T11914] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  682.359898][T11914] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  682.401072][T11914] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.526455][T11914] 9pnet_fd: Insufficient options for proto=fd
[  682.547146][T11917] loop2: detected capacity change from 0 to 4096
[  682.645219][T11774] veth0_vlan: entered promiscuous mode
[  682.682897][T11774] veth1_vlan: entered promiscuous mode
[  682.823613][T11774] veth0_macvtap: entered promiscuous mode
[  682.863856][T11774] veth1_macvtap: entered promiscuous mode
[  683.480267][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  683.631339][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  683.679662][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  683.716047][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  683.754034][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  683.774762][T11929] loop8: detected capacity change from 0 to 1024
[  683.805165][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  683.822860][T11774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  683.824206][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  683.837801][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  683.839835][T11929] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  683.860816][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  683.899652][T11929] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  683.931782][T11929] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  683.942409][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  683.998786][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.023224][T11929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  684.026056][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  684.046796][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  684.070060][T11774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  684.104228][T11774] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  684.156803][T11774] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  684.171175][T11932] loop9: detected capacity change from 0 to 1024
[  684.178179][T11774] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  684.192340][T11932] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  684.208309][T11774] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.226023][T11932] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  684.248595][T11929] 9pnet_fd: Insufficient options for proto=fd
[  684.396972][T11932] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  684.799381][T11932] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  684.875813][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  684.883689][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  684.910606][T11934] loop2: detected capacity change from 0 to 4096
[  684.923576][T11932] 9pnet_fd: Insufficient options for proto=fd
[  685.451652][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.473210][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.524681][ T9810] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.759408][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  685.805032][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  686.241204][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.806923][T11950] loop8: detected capacity change from 0 to 32768
[  686.826025][T11950] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.1704 (11950)
[  686.872064][T11950] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  686.882354][T11950] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  686.891818][T11950] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  686.901297][T11950] BTRFS info (device loop8): use zstd compression, level 3
[  686.908548][T11950] BTRFS info (device loop8): use no compression
[  686.914901][T11950] BTRFS info (device loop8): using free space tree
[  686.927201][T11951] loop7: detected capacity change from 0 to 1024
[  686.999321][T11950] BTRFS info (device loop8): enabling ssd optimizations
[  687.006610][T11950] BTRFS info (device loop8): auto enabling async discard
[  687.019731][T11951] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  687.063084][T11951] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  687.099274][T11951] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  687.104868][T11953] loop9: detected capacity change from 0 to 4096
[  687.333660][T11951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  688.609411][T11975] loop2: detected capacity change from 0 to 4096
[  688.740757][T11774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  688.757979][ T9810] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  688.931990][T11977] loop9: detected capacity change from 0 to 1024
[  689.245743][T11977] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  689.444294][T11977] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  689.468382][T11977] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  689.541117][T11977] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  689.648596][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1708'.
[  690.607911][ T5775] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop8 scanned by udevd (5775)
[  690.703930][T11977] 9pnet_fd: Insufficient options for proto=fd
[  691.264314][T11993] loop2: detected capacity change from 0 to 32768
[  691.320805][T11993] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  691.387232][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  692.067716][ T8997] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  692.126463][T11997] loop8: detected capacity change from 0 to 1024
[  692.327295][T11997] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  692.381743][T11997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  692.437433][T11997] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  692.610801][T11997] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  694.096014][ T9810] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  694.110767][T12008] loop9: detected capacity change from 0 to 4096
[  694.197079][T12013] syzkaller1: entered promiscuous mode
[  694.214486][T12013] syzkaller1: entered allmulticast mode
[  694.889317][T12016] loop8: detected capacity change from 0 to 4096
[  695.095788][T12021] loop7: detected capacity change from 0 to 1024
[  695.118343][T12021] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  695.156259][T12021] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  695.188110][T12021] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  695.269010][T12021] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  695.394630][T12026] loop2: detected capacity change from 0 to 512
[  695.450205][T12021] 9pnet_fd: Insufficient options for proto=fd
[  695.869129][T12022] loop9: detected capacity change from 0 to 4096
[  695.973157][T12026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  696.090390][T12026] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  696.412803][T11774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.865668][T12032] loop7: detected capacity change from 0 to 1024
[  696.899128][T11568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.913900][T12032] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  696.934742][T12032] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  696.947552][T12032] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  696.993592][T12032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  697.322315][T12032] 9pnet_fd: Insufficient options for proto=fd
[  698.460839][T11774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  699.376916][T12056] loop7: detected capacity change from 0 to 4096
[  700.659522][T12062] loop8: detected capacity change from 0 to 4096
[  700.712936][T12064] loop9: detected capacity change from 0 to 4096
[  701.522733][T12069] loop2: detected capacity change from 0 to 32768
[  701.608620][T12069] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  702.343409][T12070] loop7: detected capacity change from 0 to 4096
[  702.405597][ T8997] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  702.940909][T12074] loop2: detected capacity change from 0 to 1024
[  703.012843][T12074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  703.106377][T12074] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  703.208294][T12074] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  703.257583][T12074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  703.353081][T12074] 9pnet_fd: Insufficient options for proto=fd
[  703.899262][T12080] loop9: detected capacity change from 0 to 4096
[  704.017865][T11568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  704.791166][T12090] loop2: detected capacity change from 0 to 1024
[  704.827734][T12090] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  704.881242][T12090] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  705.197986][T12093] loop7: detected capacity change from 0 to 32768
[  705.227631][T12093] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10
[  705.241844][T12090] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  705.715093][T12090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  705.763096][T12095] loop8: detected capacity change from 0 to 4096
[  706.637575][ T5775] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10
[  706.749447][T11568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.780006][T12099] loop7: detected capacity change from 0 to 1024
[  706.863551][T12099] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  706.919217][T12099] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  706.975129][T12103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'.
[  707.115938][T12101] loop8: detected capacity change from 0 to 32768
[  707.136475][T12099] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  707.165241][T12101] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  707.175475][T12101] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  707.184924][T12101] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  707.194342][T12101] BTRFS info (device loop8): use zstd compression, level 3
[  707.202216][T12101] BTRFS info (device loop8): use no compression
[  707.208593][T12101] BTRFS info (device loop8): using free space tree
[  707.977155][T12099] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  708.080058][T12101] BTRFS info (device loop8): enabling ssd optimizations
[  708.087157][T12101] BTRFS info (device loop8): auto enabling async discard
[  709.205445][T11774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.464697][T12127] loop9: detected capacity change from 0 to 1024
[  709.511658][T12127] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  709.549111][ T9810] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  709.559809][T12125] loop2: detected capacity change from 0 to 32768
[  709.567322][T12125] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1745 (12125)
[  709.582036][T12127] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  709.593227][T12127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  709.618150][T12127] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  709.643189][ T9002] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  709.672454][T12129] loop7: detected capacity change from 0 to 4096
[  709.841915][ T8997] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop8 scanned by udevd (8997)
[  712.456446][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  713.800622][T12147] loop2: detected capacity change from 0 to 32768
[  713.830318][T12147] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  713.890181][ T9002] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  715.622977][T12163] loop9: detected capacity change from 0 to 4096
[  716.058540][T12171] loop8: detected capacity change from 0 to 512
[  717.264421][T12171] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  719.269934][T12171] EXT4-fs: error -4 creating inode table initialization thread
[  719.279139][T12171] EXT4-fs (loop8): mount failed
[  720.165093][T12182] loop7: detected capacity change from 0 to 128
[  720.793340][T12184] loop9: detected capacity change from 0 to 1024
[  720.814382][T12186] loop8: detected capacity change from 0 to 1024
[  720.838112][T12186] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  720.861797][T12186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  720.883820][T12186] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  720.897588][T12184] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  720.926605][T12186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  720.930172][T12184] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  721.126655][T12184] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  721.445060][T12184] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  721.651087][T12196] loop7: detected capacity change from 0 to 32768
[  721.663746][T12196] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10
[  721.916686][ T9810] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  722.772514][T12201] loop7: detected capacity change from 0 to 4096
[  723.335539][T12205] loop7: detected capacity change from 0 to 4096
[  723.434182][T12203] loop8: detected capacity change from 0 to 32768
[  723.498345][T12203] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  723.972151][T12203] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  724.080430][T12203] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  724.159656][T12203] BTRFS info (device loop8): use zstd compression, level 3
[  724.172733][T12203] BTRFS info (device loop8): use no compression
[  724.228305][T12203] BTRFS info (device loop8): using free space tree
[  724.611029][T12226] loop2: detected capacity change from 0 to 512
[  724.625137][T12226] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  724.828709][T12226] EXT4-fs (loop2): 1 truncate cleaned up
[  725.183351][T12226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  725.257586][T12226] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1769: bg 0: block 256: padding at end of block bitmap is not set
[  725.273518][T12226] EXT4-fs (loop2): Remounting filesystem read-only
[  725.281435][T12226] overlayfs: failed to verify origin (/, ino=2, err=-117)
[  725.288892][T12226] overlayfs: failed to verify upper root origin
[  725.343351][T12229] overlayfs: cleanup of 'bus/work' failed (-5)
[  725.349731][T12229] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  725.360038][T12229] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null.
[  725.574720][T12203] BTRFS info (device loop8): enabling ssd optimizations
[  725.605173][T12203] BTRFS info (device loop8): auto enabling async discard
[  725.833983][ T9810] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  726.623833][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.722573][T12243] loop9: detected capacity change from 0 to 32768
[  727.741960][T12243] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.1774 (12243)
[  727.750024][T11568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.803599][T12243] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  727.814049][T12243] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  727.823470][T12243] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  727.833354][T12243] BTRFS info (device loop9): use zstd compression, level 3
[  727.840685][T12243] BTRFS info (device loop9): use no compression
[  727.846976][T12243] BTRFS info (device loop9): using free space tree
[  727.934283][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1772'.
[  728.084752][T12243] BTRFS info (device loop9): enabling ssd optimizations
[  728.091786][T12243] BTRFS info (device loop9): auto enabling async discard
[  728.123973][T12238] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1776'.
[  728.712976][ T3499] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.888914][ T3499] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.918546][T10115] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  729.115292][ T3499] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.320458][T12267] loop7: detected capacity change from 0 to 4096
[  729.374548][ T3499] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.891542][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  729.925206][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  729.946597][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  729.955544][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  729.974885][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  729.984987][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  730.057576][T12273] lo speed is unknown, defaulting to 1000
[  730.292508][T12276] loop8: detected capacity change from 0 to 32768
[  730.303932][T12276] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.1783 (12276)
[  730.335006][T12276] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  730.345334][T12276] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  730.354947][T12276] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  730.364434][T12276] BTRFS info (device loop8): use zstd compression, level 3
[  730.371669][T12276] BTRFS info (device loop8): use no compression
[  730.379094][T12276] BTRFS info (device loop8): using free space tree
[  730.449269][T12276] BTRFS info (device loop8): enabling ssd optimizations
[  730.456482][T12276] BTRFS info (device loop8): auto enabling async discard
[  731.072625][T12273] chnl_net:caif_netlink_parms(): no params data found
[  731.103585][T12272] loop7: detected capacity change from 0 to 32768
[  731.218925][T12272] BTRFS warning: duplicate device /dev/loop7 devid 1 generation 8 scanned by syz.7.1782 (12272)
[  731.260419][T12298] loop9: detected capacity change from 0 to 1024
[  731.270833][T12298] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  731.324806][T12298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  731.482597][T12298] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  731.521477][ T9810] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  731.539292][ T8997] BTRFS warning: duplicate device /dev/loop7 devid 1 generation 8 scanned by udevd (8997)
[  731.616028][T12298] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  732.053782][T10797] Bluetooth: hci2: command tx timeout
[  732.429769][ T5775] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop8 scanned by udevd (5775)
[  732.495751][T12273] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.521385][T12273] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.611250][T12273] bridge_slave_0: entered allmulticast mode
[  732.625971][T12273] bridge_slave_0: entered promiscuous mode
[  732.743219][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  732.845540][T12273] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.871843][T12273] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.881112][T12273] bridge_slave_1: entered allmulticast mode
[  732.924672][T12273] bridge_slave_1: entered promiscuous mode
[  734.097533][T12273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  734.132236][T10797] Bluetooth: hci2: command tx timeout
[  734.141966][T12319] binder_alloc: 12317: binder_alloc_buf, no vma
[  734.154659][T12273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  734.185713][T12314] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1787'.
[  734.371491][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1789'.
[  734.569583][T12273] team0: Port device team_slave_0 added
[  736.319573][T10797] Bluetooth: hci2: command tx timeout
[  736.328811][T12273] team0: Port device team_slave_1 added
[  736.372230][T12327] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1791'.
[  736.557282][T12330] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1792'.
[  737.307171][T12273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  737.368874][T12273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  737.540101][T12273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  737.648914][T12273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  737.683598][T12273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  737.763020][T12273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  738.370393][T10797] Bluetooth: hci2: command tx timeout
[  738.902645][ T3499] hsr_slave_0: left promiscuous mode
[  738.911337][ T3499] hsr_slave_1: left promiscuous mode
[  738.917440][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  738.926469][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  738.935030][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  738.942688][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  738.950687][ T3499] bridge_slave_1: left allmulticast mode
[  738.956347][ T3499] bridge_slave_1: left promiscuous mode
[  738.963805][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.973876][ T3499] bridge_slave_0: left allmulticast mode
[  738.979738][ T3499] bridge_slave_0: left promiscuous mode
[  738.985434][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.012023][ T3499] veth1_macvtap: left promiscuous mode
[  739.017566][ T3499] veth0_macvtap: left promiscuous mode
[  739.023487][ T3499] veth1_vlan: left promiscuous mode
[  739.031446][ T3499] veth0_vlan: left promiscuous mode
[  739.653365][ T3499] team0 (unregistering): Port device team_slave_1 removed
[  739.714787][ T3499] team0 (unregistering): Port device team_slave_0 removed
[  739.801406][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  739.875136][ T3499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  740.509802][ T3499] bond0 (unregistering): Released all slaves
[  740.581722][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1793'.
[  740.682379][T12346] loop7: detected capacity change from 0 to 1024
[  740.699906][T12346] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  740.728613][T12346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  740.733025][T12273] hsr_slave_0: entered promiscuous mode
[  740.748680][T12273] hsr_slave_1: entered promiscuous mode
[  740.766592][T12273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  740.807713][T12346] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  740.807736][T12273] Cannot create hsr debugfs directory
[  740.833738][T12346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  740.848846][T12348] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1804'.
[  740.862731][T12350] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1797'.
[  742.163818][T11774] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  742.301903][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1799'.
[  743.271687][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1803'.
[  743.295230][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1802'.
[  743.400908][T12368] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1805'.
[  745.119118][T12373] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1806'.
[  746.619496][T12273] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  746.680025][T12273] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  746.707138][T12273] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  746.730710][T12273] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  746.823509][T12391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1810'.
[  746.984547][   T23] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  747.173687][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  747.341184][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  748.094226][   T23] usb 10-1: Using ep0 maxpacket: 8
[  748.169291][   T23] usb 10-1: unable to get BOS descriptor or descriptor too short
[  748.185329][   T23] usb 10-1: config 4 has an invalid interface number: 30 but max is 0
[  748.193982][   T23] usb 10-1: config 4 has no interface number 0
[  748.200195][   T23] usb 10-1: config 4 interface 30 has no altsetting 0
[  748.205911][T12397] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1812'.
[  748.221539][   T23] usb 10-1: string descriptor 0 read error: -22
[  748.242943][   T23] usb 10-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  748.295191][T12273] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.301846][   T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.519491][   T23] dw2102: su3000_identify_state
[  749.129595][T12273] 8021q: adding VLAN 0 to HW filter on device team0
[  749.137042][   T23] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  749.159574][   T23] dw2102: su3000_power_ctrl: 1, initialized 0
[  749.188351][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  749.196857][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.203980][ T9496] bridge0: port 1(bridge_slave_0) entered forwarding state
[  749.232315][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  749.254006][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.261182][ T9496] bridge0: port 2(bridge_slave_1) entered forwarding state
[  749.291671][   T23] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  749.301522][   T23] usb 10-1: media controller created
[  749.317948][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  749.329592][   T23] dw2102: i2c transfer failed.
[  749.330923][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1814'.
[  749.348390][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  749.356195][   T23] dw2102: i2c transfer failed.
[  749.362448][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  749.373415][   T23] dw2102: i2c transfer failed.
[  749.379203][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  749.401617][   T23] dw2102: i2c transfer failed.
[  749.411218][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  750.127058][   T23] dw2102: i2c transfer failed.
[  750.131991][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  750.137930][   T23] dw2102: i2c transfer failed.
[  750.188601][   T23] dvb-usb: MAC address: 02:02:02:02:02:02
[  750.344681][T12273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  750.377951][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  750.437180][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  750.443071][   T23] dw2102: command 0x0e transfer failed.
[  750.449135][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  750.455542][   T23] dw2102: command 0x0e transfer failed.
[  750.499160][T12273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  750.649573][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1817'.
[  750.762694][ T5991] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  751.150897][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  751.547977][   T23] dw2102: command 0x0e transfer failed.
[  751.722540][ T5991] usb 8-1: Using ep0 maxpacket: 8
[  751.954701][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  751.960485][   T23] dw2102: command 0x0e transfer failed.
[  752.006696][ T5991] usb 8-1: unable to get BOS descriptor or descriptor too short
[  752.043498][ T5991] usb 8-1: config 4 has an invalid interface number: 30 but max is 0
[  752.051632][ T5991] usb 8-1: config 4 has no interface number 0
[  752.057560][T12420] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1820'.
[  752.064898][   T23] dvb-usb: bulk message failed: -22 (1/0)
[  752.117844][   T23] dw2102: command 0x51 transfer failed.
[  752.187494][   T23] dvb-usb: bulk message failed: -22 (5/0)
[  752.203665][ T5991] usb 8-1: config 4 interface 30 has no altsetting 0
[  752.272565][   T23] dw2102: i2c probe for address 0x68 failed.
[  752.323685][ T5991] usb 8-1: string descriptor 0 read error: -22
[  752.389913][   T23] dvb-usb: bulk message failed: -22 (5/0)
[  752.406468][ T5991] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  752.479279][   T23] dw2102: i2c probe for address 0x69 failed.
[  752.532778][ T5991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.557811][   T23] dvb-usb: bulk message failed: -22 (5/0)
[  752.641080][   T23] dw2102: i2c probe for address 0x6a failed.
[  752.775318][   T23] dw2102: probing for demodulator failed. Is the external power switched on?
[  752.933893][ T5991] dw2102: su3000_identify_state
[  752.951448][   T23] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  753.046175][ T5991] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  753.081729][ T5991] dw2102: su3000_power_ctrl: 1, initialized 0
[  753.090843][T12409] dvb-usb: bulk message failed: -22 (3/0)
[  753.108640][ T5991] dvb-usb: bulk message failed: -22 (2/0)
[  753.119158][T12409] dw2102: i2c transfer failed.
[  753.143775][T12409] dvb-usb: bulk message failed: -22 (3/0)
[  753.149583][T12409] dw2102: i2c transfer failed.
[  753.171389][   T23] rc_core: IR keymap rc-tt-1500 not found
[  753.177171][   T23] Registered IR keymap rc-empty
[  753.188097][ T5991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  753.222952][   T23] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0
[  753.263183][ T5991] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  753.282828][   T23] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input22
[  753.292927][ T5991] usb 8-1: media controller created
[  753.301476][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  753.307242][ T5991] dw2102: i2c transfer failed.
[  753.338006][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  753.344798][   T23] dvb-usb: schedule remote query interval to 250 msecs.
[  753.362872][   T23] dw2102: su3000_power_ctrl: 0, initialized 1
[  753.368997][   T23] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  753.369759][T12273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  753.391255][ T5991] dw2102: i2c transfer failed.
[  753.396084][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  753.429418][ T5991] dw2102: i2c transfer failed.
[  753.444194][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  753.449982][ T5991] dw2102: i2c transfer failed.
[  753.455306][   T23] usb 10-1: USB disconnect, device number 15
[  753.481689][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  753.487472][ T5991] dw2102: i2c transfer failed.
[  753.514159][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  753.531451][ T5991] dw2102: i2c transfer failed.
[  753.536276][ T5991] dvb-usb: MAC address: 02:02:02:02:02:02
[  753.603282][   T23] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  753.623122][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  753.678464][ T5991] dvb-usb: bulk message failed: -22 (3/0)
[  753.711805][ T5991] dw2102: command 0x0e transfer failed.
[  753.717415][ T5991] dvb-usb: bulk message failed: -22 (3/0)
[  753.734163][ T5991] dw2102: command 0x0e transfer failed.
[  754.029074][T12273] veth0_vlan: entered promiscuous mode
[  754.049356][T12273] veth1_vlan: entered promiscuous mode
[  754.061349][ T5991] dvb-usb: bulk message failed: -22 (3/0)
[  754.067114][ T5991] dw2102: command 0x0e transfer failed.
[  754.084610][ T5991] dvb-usb: bulk message failed: -22 (3/0)
[  754.090389][ T5991] dw2102: command 0x0e transfer failed.
[  754.106189][ T5991] dvb-usb: bulk message failed: -22 (1/0)
[  754.110583][T12273] veth0_macvtap: entered promiscuous mode
[  754.114388][ T5991] dw2102: command 0x51 transfer failed.
[  754.124081][ T5991] dvb-usb: bulk message failed: -22 (5/0)
[  754.129827][ T5991] dw2102: i2c probe for address 0x68 failed.
[  754.135962][ T5991] dvb-usb: bulk message failed: -22 (5/0)
[  754.143028][ T5991] dw2102: i2c probe for address 0x69 failed.
[  754.149121][ T5991] dvb-usb: bulk message failed: -22 (5/0)
[  754.154919][ T5991] dw2102: i2c probe for address 0x6a failed.
[  754.162383][T12273] veth1_macvtap: entered promiscuous mode
[  754.170819][ T5991] dw2102: probing for demodulator failed. Is the external power switched on?
[  754.184138][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  754.190817][ T5991] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  754.194865][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.221081][   T23] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  754.269402][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  754.285959][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.296390][ T5991] rc_core: IR keymap rc-tt-1500 not found
[  754.302390][ T5991] Registered IR keymap rc-empty
[  754.307708][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  754.319340][ T5991] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0
[  754.328496][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.340064][ T5991] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input23
[  754.356178][T12273] batman_adv: batadv0: Interface activated: batadv_slave_0
[  754.374369][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  754.387917][ T5991] dvb-usb: schedule remote query interval to 250 msecs.
[  754.404999][   T23] usb 10-1: Using ep0 maxpacket: 8
[  754.413925][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.424380][ T5991] dw2102: su3000_power_ctrl: 0, initialized 1
[  754.430578][ T5991] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  754.440095][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  754.453014][   T23] usb 10-1: unable to get BOS descriptor or descriptor too short
[  754.465666][   T23] usb 10-1: config 4 has an invalid interface number: 30 but max is 0
[  754.474568][ T5991] usb 8-1: USB disconnect, device number 16
[  754.480772][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.492112][   T23] usb 10-1: config 4 has no interface number 0
[  754.498317][   T23] usb 10-1: config 4 interface 30 has no altsetting 0
[  754.505919][T12273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  754.516987][T12273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  754.531382][   T23] usb 10-1: string descriptor 0 read error: -22
[  754.537779][   T23] usb 10-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  754.562229][T12273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  754.592535][   T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.603827][T12273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  754.622146][T12273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.637472][ T5991] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  754.648517][T12273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.661038][   T23] dw2102: su3000_identify_state
[  754.665922][   T23] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  754.675781][T12273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.687560][   T23] dw2102: su3000_power_ctrl: 1, initialized 0
[  754.694983][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  754.729500][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  754.776903][   T23] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  754.799116][   T23] usb 10-1: media controller created
[  754.810780][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  754.826775][   T23] dw2102: i2c transfer failed.
[  754.833878][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.841876][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  754.847631][   T23] dw2102: i2c transfer failed.
[  754.854238][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.872631][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  754.878408][   T23] dw2102: i2c transfer failed.
[  754.885032][T12446] loop8: detected capacity change from 0 to 32768
[  754.898958][T12440] dvb-usb: bulk message failed: -22 (3/0)
[  754.905316][ T9475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.925019][T12440] dw2102: i2c transfer failed.
[  754.929835][T12440] dvb-usb: bulk message failed: -22 (3/0)
[  754.930756][ T9475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.959583][T12440] dw2102: i2c transfer failed.
[  754.965051][T12446] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  754.994684][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  755.034389][   T23] dw2102: i2c transfer failed.
[  755.039604][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  755.057925][   T23] dw2102: i2c transfer failed.
[  755.064306][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  755.090999][ T5991] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  755.099729][   T23] dw2102: i2c transfer failed.
[  755.107824][T12446] XFS (loop8): Ending clean mount
[  755.115462][   T23] dvb-usb: MAC address: 02:02:02:02:02:02
[  755.166003][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  755.207851][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  755.226866][   T23] dw2102: command 0x0e transfer failed.
[  755.239995][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  755.261353][   T23] dw2102: command 0x0e transfer failed.
[  755.292093][ T5991] usb 8-1: Using ep0 maxpacket: 8
[  755.305975][ T5991] usb 8-1: unable to get BOS descriptor or descriptor too short
[  755.326587][ T5991] usb 8-1: config 4 has an invalid interface number: 30 but max is 0
[  755.473401][T12446] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[12446]
[  755.491614][ T5991] usb 8-1: config 4 has no interface number 0
[  755.497993][ T5991] usb 8-1: config 4 interface 30 has no altsetting 0
[  755.517445][ T5991] usb 8-1: string descriptor 0 read error: -22
[  755.524214][ T5991] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  755.533347][ T5991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.570747][ T5991] dw2102: su3000_identify_state
[  755.578070][ T5991] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  755.588188][ T5991] dw2102: su3000_power_ctrl: 1, initialized 0
[  755.594810][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  755.605267][ T5991] dvb-usb: bulk message failed: -22 (2/0)
[  755.613751][   T23] dw2102: command 0x0e transfer failed.
[  755.627523][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  755.637186][   T23] dw2102: command 0x0e transfer failed.
[  755.651141][ T5991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  755.678271][   T23] dvb-usb: bulk message failed: -22 (1/0)
[  755.687917][ T5991] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  755.705214][   T23] dw2102: command 0x51 transfer failed.
[  755.712706][ T5991] usb 8-1: media controller created
[  755.718035][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  755.739261][   T23] dvb-usb: bulk message failed: -22 (5/0)
[  755.751494][ T5991] dw2102: i2c transfer failed.
[  755.756434][   T23] dw2102: i2c probe for address 0x68 failed.
[  755.767981][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  755.780244][   T23] dvb-usb: bulk message failed: -22 (5/0)
[  755.790525][ T5991] dw2102: i2c transfer failed.
[  755.802345][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  755.806654][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  755.809290][   T23] dw2102: i2c probe for address 0x69 failed.
[  755.831141][ T5991] dw2102: i2c transfer failed.
[  755.838440][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  755.883326][   T23] dvb-usb: bulk message failed: -22 (5/0)
[  755.889198][   T23] dw2102: i2c probe for address 0x6a failed.
[  755.900061][ T5991] dw2102: i2c transfer failed.
[  755.904845][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  755.929236][ T5991] dw2102: i2c transfer failed.
[  755.937723][   T23] dw2102: probing for demodulator failed. Is the external power switched on?
[  755.954480][ T5991] dvb-usb: bulk message failed: -22 (6/0)
[  755.996873][ T5991] dw2102: i2c transfer failed.
[  756.002370][   T23] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  756.020005][ T5991] dvb-usb: MAC address: 02:02:02:02:02:02
[  756.091505][T12442] dvb-usb: bulk message failed: -22 (3/0)
[  756.097280][T12442] dw2102: i2c transfer failed.
[  756.110888][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  756.129911][T12442] dvb-usb: bulk message failed: -22 (3/0)
[  756.150192][T12442] dw2102: i2c transfer failed.
[  756.227230][ T5991] dvb-usb: bulk message failed: -22 (3/0)
[  756.240535][ T5991] dw2102: command 0x0e transfer failed.
[  756.246216][ T5991] dvb-usb: bulk message failed: -22 (3/0)
[  756.254016][   T23] rc_core: IR keymap rc-tt-1500 not found
[  756.272418][   T23] Registered IR keymap rc-empty
[  756.279537][ T5991] dw2102: command 0x0e transfer failed.
[  756.287913][   T23] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0
[  756.350315][   T23] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input24
[  756.381746][   T23] dvb-usb: schedule remote query interval to 250 msecs.
[  756.388741][   T23] dw2102: su3000_power_ctrl: 0, initialized 1
[  756.405885][   T23] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  756.473970][   T23] usb 10-1: USB disconnect, device number 16
[  756.629778][ T5991] dvb-usb: bulk message failed: -22 (3/0)
[  757.508527][ T5991] dw2102: command 0x0e transfer failed.
[  757.529979][ T5991] dvb-usb: bulk message failed: -22 (3/0)
[  757.544507][   T23] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  757.572365][ T5991] dw2102: command 0x0e transfer failed.
[  757.578417][ T5991] dvb-usb: bulk message failed: -22 (1/0)
[  757.621715][ T5991] dw2102: command 0x51 transfer failed.
[  757.627291][ T5991] dvb-usb: bulk message failed: -22 (5/0)
[  757.713949][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1829'.
[  757.738093][ T5991] dw2102: i2c probe for address 0x68 failed.
[  757.791947][ T5991] dvb-usb: bulk message failed: -22 (5/0)
[  757.827333][ T5991] dw2102: i2c probe for address 0x69 failed.
[  757.883958][ T5991] dvb-usb: bulk message failed: -22 (5/0)
[  757.922405][ T5991] dw2102: i2c probe for address 0x6a failed.
[  757.975586][ T5991] dw2102: probing for demodulator failed. Is the external power switched on?
[  758.050249][ T5991] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  759.967958][ T5991] rc_core: IR keymap rc-tt-1500 not found
[  759.974168][ T5991] Registered IR keymap rc-empty
[  759.980642][ T5991] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0
[  760.017640][ T5991] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input25
[  760.060071][ T5991] dvb-usb: schedule remote query interval to 250 msecs.
[  760.086796][T12479] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1842'.
[  760.092997][ T5991] dw2102: su3000_power_ctrl: 0, initialized 1
[  760.116413][ T5991] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  760.188135][ T5991] usb 8-1: USB disconnect, device number 17
[  760.675875][ T5991] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  760.726238][T12482] loop4: detected capacity change from 0 to 512
[  761.027485][T12482] EXT4-fs (loop4): Test dummy encryption mode enabled
[  761.035597][T12482] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  761.173455][T12482] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1832: bad orphan inode 131083
[  761.266488][T12482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  761.349663][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1835'.
[  761.367483][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1835'.
[  761.394204][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1835'.
[  761.418128][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1835'.
[  762.068611][T12482] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  762.406752][T12503] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1838'.
[  762.439600][T12490] loop9: detected capacity change from 0 to 32768
[  762.601231][T12490] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  762.687864][T12510] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.1832: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  763.111372][T12273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  763.191805][T12490] XFS (loop9): Ending clean mount
[  763.646253][    T8] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  764.036472][    T8] usb 9-1: Using ep0 maxpacket: 16
[  764.051348][    T8] usb 9-1: config index 0 descriptor too short (expected 16456, got 72)
[  764.068370][    T8] usb 9-1: config 0 has an invalid interface number: 125 but max is 1
[  764.094868][    T8] usb 9-1: config 0 has an invalid interface number: 125 but max is 1
[  764.129679][    T8] usb 9-1: config 0 has an invalid interface number: 125 but max is 1
[  764.139564][    T8] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  764.152731][    T8] usb 9-1: config 0 has no interface number 0
[  764.161391][    T8] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  764.195651][    T8] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  764.235653][    T8] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  764.310748][    T8] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  764.405743][T12524] ptrace attach of "./syz-executor exec"[10115] was attempted by "./syz-executor exec"[12524]
[  764.778977][T10115] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  764.801810][    T8] usb 9-1: config 0 interface 125 has no altsetting 0
[  764.815198][    T8] usb 9-1: config 0 interface 125 has no altsetting 2
[  764.857259][    T8] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  764.866635][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.874612][    T8] usb 9-1: Product: syz
[  764.883767][    T8] usb 9-1: Manufacturer: syz
[  764.889752][    T8] usb 9-1: SerialNumber: syz
[  764.934434][    T8] usb 9-1: config 0 descriptor??
[  764.958398][    T8] usb 9-1: selecting invalid altsetting 2
[  765.267323][T12520] loop4: detected capacity change from 0 to 32768
[  765.320945][T12520] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  765.393090][T12520] XFS (loop4): Ending clean mount
[  765.819865][    C0] usb 9-1: async_complete: urb error -32
[  765.832814][T12539] ptrace attach of "./syz-executor exec"[12273] was attempted by "./syz-executor exec"[12539]
[  766.247641][    T8] get_1284_register: usb error -32
[  766.254067][    T8] uss720: probe of 9-1:0.125 failed with error -32
[  766.268227][    T8] usb 9-1: USB disconnect, device number 12
[  766.271111][T12273] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  767.249759][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'.
[  768.280901][T12554] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1851'.
[  769.488836][T12570] loop4: detected capacity change from 0 to 1024
[  769.562749][T12563] loop8: detected capacity change from 0 to 32768
[  769.752908][T12563] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  770.044154][    T8] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  770.355022][T12563] XFS (loop8): Ending clean mount
[  770.371302][    T8] usb 8-1: Using ep0 maxpacket: 16
[  770.403908][    T8] usb 8-1: config index 0 descriptor too short (expected 16456, got 72)
[  770.427413][    T8] usb 8-1: config 0 has an invalid interface number: 125 but max is 1
[  770.465007][    T8] usb 8-1: config 0 has an invalid interface number: 125 but max is 1
[  770.487704][ T9498] hfsplus: b-tree write err: -5, ino 4
[  770.505845][    T8] usb 8-1: config 0 has an invalid interface number: 125 but max is 1
[  770.547309][    T8] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  770.587160][    T8] usb 8-1: config 0 has no interface number 0
[  770.780651][    T8] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  770.792758][    T8] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  770.802975][    T8] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  770.813214][    T8] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  770.827264][    T8] usb 8-1: config 0 interface 125 has no altsetting 0
[  770.835244][    T8] usb 8-1: config 0 interface 125 has no altsetting 2
[  770.845855][    T8] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  770.855004][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.864140][    T8] usb 8-1: Product: syz
[  770.868350][    T8] usb 8-1: Manufacturer: syz
[  770.931470][T12588] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[12588]
[  771.308595][T12572] loop9: detected capacity change from 0 to 32768
[  771.375458][    T8] usb 8-1: SerialNumber: syz
[  771.382490][    T8] usb 8-1: config 0 descriptor??
[  771.385108][T12572] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  771.396237][    T8] usb 8-1: selecting invalid altsetting 2
[  771.406979][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  771.615372][T12572] XFS (loop9): Ending clean mount
[  771.625775][T12586] loop4: detected capacity change from 0 to 32768
[  771.720113][T12586] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  771.879930][T12586] XFS (loop4): Ending clean mount
[  772.281012][    C0] usb 8-1: async_complete: urb error -32
[  772.300051][    T8] get_1284_register: usb error -32
[  772.310650][    T8] uss720: probe of 8-1:0.125 failed with error -32
[  772.334525][T12609] ptrace attach of "./syz-executor exec"[10115] was attempted by "./syz-executor exec"[12609]
[  772.384400][T12610] ptrace attach of "./syz-executor exec"[12273] was attempted by "./syz-executor exec"[12610]
[  772.819126][    T8] usb 8-1: USB disconnect, device number 18
[  772.824495][T12273] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  773.185877][T12612] loop8: detected capacity change from 0 to 32768
[  773.227994][T12612] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  773.316706][T12612] XFS (loop8): Ending clean mount
[  773.326081][T10115] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  773.779904][T12631] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[12631]
[  774.219896][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  775.110815][T12638] loop4: detected capacity change from 0 to 32768
[  775.157151][T12638] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  775.296172][T12640] loop7: detected capacity change from 0 to 32768
[  775.296666][T12642] loop9: detected capacity change from 0 to 32768
[  775.324820][T12638] XFS (loop4): Ending clean mount
[  775.395315][T12640] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  775.412688][T12642] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  775.601492][T12640] XFS (loop7): Ending clean mount
[  775.649921][T12644] loop8: detected capacity change from 0 to 32768
[  775.745952][T12644] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  775.773465][T12675] ptrace attach of "./syz-executor exec"[12273] was attempted by "./syz-executor exec"[12675]
[  776.004110][T12642] XFS (loop9): Ending clean mount
[  776.292870][T12644] XFS (loop8): Ending clean mount
[  776.383207][T12273] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  776.557414][T12682] ptrace attach of "./syz-executor exec"[11774] was attempted by "./syz-executor exec"[12682]
[  776.655286][T12683] ptrace attach of "./syz-executor exec"[10115] was attempted by "./syz-executor exec"[12683]
[  777.192857][T12684] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[12684]
[  777.206590][T10115] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  778.182888][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  778.344276][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  778.407851][T12690] loop9: detected capacity change from 0 to 32768
[  778.449251][T12690] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  778.595942][T12690] XFS (loop9): Ending clean mount
[  779.030322][T12710] ptrace attach of "./syz-executor exec"[10115] was attempted by "./syz-executor exec"[12710]
[  779.397814][T10115] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  779.440790][T12712] loop4: detected capacity change from 0 to 1024
[  780.460072][ T9475] hfsplus: b-tree write err: -5, ino 4
[  780.556980][T12718] loop9: detected capacity change from 0 to 512
[  780.600215][T12718] EXT4-fs (loop9): Test dummy encryption mode enabled
[  780.621485][T12718] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  780.649215][T12718] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1880: bad orphan inode 131083
[  780.764676][T12726] hub 8-0:1.0: USB hub found
[  780.772943][T12726] hub 8-0:1.0: 1 port detected
[  780.949065][T12718] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  782.068390][T12729] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #2: block 13: comm syz.9.1880: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  782.668213][T10115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  783.295663][T12717] loop7: detected capacity change from 0 to 32768
[  783.355235][T12717] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  783.430816][T12717] XFS (loop7): Ending clean mount
[  783.526199][T12734] loop8: detected capacity change from 0 to 32768
[  783.591323][T12734] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  783.600925][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  783.745046][T12734] XFS (loop8): Ending clean mount
[  783.883488][T12738] loop9: detected capacity change from 0 to 32768
[  784.176514][T12761] hub 8-0:1.0: USB hub found
[  784.182442][T12761] hub 8-0:1.0: 1 port detected
[  784.415497][T12738] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  785.125809][T12738] XFS (loop9): Ending clean mount
[  785.737576][T12773] ptrace attach of "./syz-executor exec"[10115] was attempted by "./syz-executor exec"[12773]
[  786.112423][T12774] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[12774]
[  786.562061][T10115] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  786.967472][T12775] loop4: detected capacity change from 0 to 32768
[  787.020252][T12775] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  787.128346][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  787.357455][T12775] XFS (loop4): Ending clean mount
[  787.924827][T12795] ptrace attach of "./syz-executor exec"[12273] was attempted by "./syz-executor exec"[12795]
[  788.389560][T12273] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  789.018021][T12794] loop7: detected capacity change from 0 to 32768
[  789.072328][T12794] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  789.185578][T12794] XFS (loop7): Ending clean mount
[  789.237806][T12800] loop9: detected capacity change from 0 to 32768
[  789.529678][T12802] loop8: detected capacity change from 0 to 32768
[  789.554512][T12800] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  789.657147][T12827] ptrace attach of "./syz-executor exec"[11774] was attempted by "./syz-executor exec"[12827]
[  789.693768][T12802] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  789.891187][T12800] XFS (loop9): Ending clean mount
[  790.070244][T12802] XFS (loop8): Ending clean mount
[  790.109256][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  790.182974][ T5793] Bluetooth: hci3: command 0x0406 tx timeout
[  790.486243][T12833] ptrace attach of "./syz-executor exec"[10115] was attempted by "./syz-executor exec"[12833]
[  790.784960][T12835] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[12835]
[  791.090749][T10115] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  791.100092][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  791.448680][T12804] loop4: detected capacity change from 0 to 32768
[  791.584656][T12804] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  791.662275][T12804] XFS (loop4): Ending clean mount
[  791.715876][T12851] loop9: detected capacity change from 0 to 1024
[  792.270467][T12853] ptrace attach of "./syz-executor exec"[12273] was attempted by "./syz-executor exec"[12853]
[  792.887115][ T9496] hfsplus: b-tree write err: -5, ino 4
[  792.903632][T12273] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  793.297219][T12846] loop8: detected capacity change from 0 to 32768
[  793.349963][T12846] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  793.362835][T12849] loop7: detected capacity change from 0 to 32768
[  793.408022][T12849] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  793.444643][T12846] XFS (loop8): Ending clean mount
[  793.524420][T12849] XFS (loop7): Ending clean mount
[  793.536724][T12858] loop9: detected capacity change from 0 to 32768
[  793.584451][T12858] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  793.851197][T12858] XFS (loop9): Ending clean mount
[  793.965717][T12886] ptrace attach of "./syz-executor exec"[11774] was attempted by "./syz-executor exec"[12886]
[  794.052050][T12885] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[12885]
[  794.403760][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  794.751321][T12888] ptrace attach of "./syz-executor exec"[10115] was attempted by "./syz-executor exec"[12888]
[  794.753783][T12890] loop4: detected capacity change from 0 to 1024
[  795.746388][   T59] hfsplus: b-tree write err: -5, ino 4
[  796.322965][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  796.670726][T10115] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  796.712838][T12894] loop4: detected capacity change from 0 to 32768
[  796.780368][T12894] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  796.843244][T12894] XFS (loop4): Ending clean mount
[  797.135090][T12898] loop7: detected capacity change from 0 to 32768
[  797.158053][T12898] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  797.236770][T12918] ptrace attach of "./syz-executor exec"[12273] was attempted by "./syz-executor exec"[12918]
[  797.431638][T12898] XFS (loop7): Ending clean mount
[  797.747281][T12273] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  797.853553][T12922] ptrace attach of "./syz-executor exec"[11774] was attempted by "./syz-executor exec"[12922]
[  798.340936][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  798.990747][T12931] hub 8-0:1.0: USB hub found
[  798.996450][T12931] hub 8-0:1.0: 1 port detected
[  800.572335][T12925] loop8: detected capacity change from 0 to 32768
[  800.671783][T12925] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  800.860302][T12925] XFS (loop8): Ending clean mount
[  800.913276][T12927] loop4: detected capacity change from 0 to 32768
[  801.041677][T12927] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  801.284690][T12927] XFS (loop4): Ending clean mount
[  801.529627][T12956] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[12956]
[  801.708173][T12954] hub 8-0:1.0: USB hub found
[  801.767013][T12954] hub 8-0:1.0: 1 port detected
[  802.430084][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  802.488063][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1909'.
[  802.542682][T12953] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1909'.
[  802.635149][T12953] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  802.644037][T12953] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  802.653060][T12953] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  802.662324][T12953] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  802.686834][T12273] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  802.723146][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1909'.
[  802.734031][T12953] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1909'.
[  803.404331][T12959] loop7: detected capacity change from 0 to 32768
[  803.490089][T12959] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  803.585880][T12959] XFS (loop7): Ending clean mount
[  804.196466][T12973] ptrace attach of "./syz-executor exec"[11774] was attempted by "./syz-executor exec"[12973]
[  804.674208][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  805.151683][T12969] loop9: detected capacity change from 0 to 32768
[  805.212875][T12971] loop8: detected capacity change from 0 to 32768
[  805.365544][T12969] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  805.405453][T12971] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  805.640178][T12971] XFS (loop8): Ending clean mount
[  805.844521][T12975] loop4: detected capacity change from 0 to 32768
[  805.908692][T12969] XFS (loop9): Ending clean mount
[  806.038305][T12975] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  806.235450][T13006] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[13006]
[  806.587074][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  806.864549][T12975] XFS (loop4): Ending clean mount
[  806.932824][T12969] ptrace attach of "./syz-executor exec"[10115] was attempted by "./syz-executor exec"[12969]
[  807.480594][T10115] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  807.555095][T13016] ptrace attach of "./syz-executor exec"[12273] was attempted by "./syz-executor exec"[13016]
[  807.944917][T12273] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  808.196623][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1924'.
[  808.213793][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1924'.
[  808.254348][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1924'.
[  808.316884][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1924'.
[  808.577335][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  808.587705][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  808.600730][T13010] loop7: detected capacity change from 0 to 32768
[  808.705648][T13010] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  808.846578][T13010] XFS (loop7): Ending clean mount
[  809.018488][T13021] loop9: detected capacity change from 0 to 32768
[  809.305148][T13034] ptrace attach of "./syz-executor exec"[11774] was attempted by "./syz-executor exec"[13034]
[  809.381054][T13021] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  809.577751][T13021] XFS (loop9): Ending clean mount
[  809.659715][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  809.718675][T13025] loop8: detected capacity change from 0 to 32768
[  809.972084][T13023] loop4: detected capacity change from 0 to 32768
[  810.001596][T13025] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  810.068171][T13050] ptrace attach of "./syz-executor exec"[10115] was attempted by "./syz-executor exec"[13050]
[  810.357354][T13023] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  810.382858][T13025] XFS (loop8): Ending clean mount
[  810.516585][T10115] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  810.547722][T13023] XFS (loop4): Ending clean mount
[  811.125284][T13068] ptrace attach of "./syz-executor exec"[12273] was attempted by "./syz-executor exec"[13068]
[  811.635523][T13071] hub 8-0:1.0: USB hub found
[  811.640451][T13071] hub 8-0:1.0: 1 port detected
[  811.670966][T12273] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  811.944200][T13074] hub 8-0:1.0: USB hub found
[  811.971292][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  811.990410][T13074] hub 8-0:1.0: 1 port detected
[  813.885496][T13078] loop8: detected capacity change from 0 to 32768
[  813.970078][T13078] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  814.084958][T13080] loop4: detected capacity change from 0 to 32768
[  814.111702][T13080] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  814.125577][T13078] XFS (loop8): Ending clean mount
[  814.179551][T13080] XFS (loop4): Ending clean mount
[  814.868426][T13101] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[13101]
[  814.938084][T13102] ptrace attach of "./syz-executor exec"[12273] was attempted by "./syz-executor exec"[13102]
[  815.273783][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  815.308988][T12273] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  816.499204][T13115] input: syz1 as /devices/virtual/input/input26
[  816.886018][T13112] loop7: detected capacity change from 0 to 32768
[  817.004851][T13125] input: syz1 as /devices/virtual/input/input27
[  817.049522][T13112] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  817.107571][T13112] XFS (loop7): Ending clean mount
[  817.300454][T13125] netlink: 'syz.4.1938': attribute type 4 has an invalid length.
[  817.308547][T13125] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1938'.
[  817.672312][T13134] ptrace attach of "./syz-executor exec"[11774] was attempted by "./syz-executor exec"[13134]
[  818.013790][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  818.411690][T13119] loop8: detected capacity change from 0 to 32768
[  818.526205][T13119] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  818.668883][T13119] XFS (loop8): Ending clean mount
[  819.042275][ T6505] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  819.049026][T13148] netlink: set zone limit has 8 unknown bytes
[  819.194134][T13150] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[13150]
[  819.541374][T13136] loop7: detected capacity change from 0 to 32768
[  819.663570][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  819.668846][ T6505] usb 10-1: Using ep0 maxpacket: 8
[  819.692557][T13136] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  819.706344][ T6505] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  819.722602][ T6505] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  819.748181][ T6505] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  819.769012][ T6505] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  819.786168][T13136] XFS (loop7): Ending clean mount
[  819.805363][ T6505] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  819.840154][ T6505] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  819.855039][ T6505] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.099473][T13163] ptrace attach of "./syz-executor exec"[11774] was attempted by "./syz-executor exec"[13163]
[  820.488556][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  820.506482][ T6505] usb 10-1: GET_CAPABILITIES returned 0
[  820.513309][ T6505] usbtmc 10-1:16.0: can't read capabilities
[  820.902091][T13146] usbtmc 10-1:16.0: usb_control_msg returned -71
[  820.905322][ T5869] usb 10-1: USB disconnect, device number 17
[  821.020822][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1944'.
[  821.074511][T13167] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1944'.
[  821.097901][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1944'.
[  821.106814][T13167] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1944'.
[  821.782521][T13171] loop7: detected capacity change from 0 to 32768
[  821.808762][T13171] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  821.906061][T13171] XFS (loop7): Ending clean mount
[  821.955570][T13184] fuse: Bad value for 'group_id'
[  823.247920][T13191] ptrace attach of "./syz-executor exec"[11774] was attempted by "./syz-executor exec"[13191]
[  823.788923][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  823.960130][T13200] input: syz1 as /devices/virtual/input/input28
[  824.191106][T13200] netlink: 'syz.4.1952': attribute type 4 has an invalid length.
[  824.204366][T13200] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1952'.
[  824.253736][T13194] loop9: detected capacity change from 0 to 32768
[  824.310690][T13194] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  824.350385][T13194] XFS (loop9): Ending clean mount
[  824.661504][T13212] ptrace attach of "./syz-executor exec"[10115] was attempted by "./syz-executor exec"[13212]
[  825.038932][T10115] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  825.841696][T13216] loop7: detected capacity change from 0 to 8
[  825.927800][T13216] SQUASHFS error: Unable to read inode 0x127
[  826.544913][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1953'.
[  826.619209][T13218] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1953'.
[  826.661982][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1953'.
[  826.696554][T13218] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1953'.
[  827.006347][T13222] netlink: set zone limit has 8 unknown bytes
[  827.386314][T13220] loop7: detected capacity change from 0 to 32768
[  827.407984][T13220] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  827.488864][T13220] XFS (loop7): Ending clean mount
[  827.875375][T13243] ptrace attach of "./syz-executor exec"[11774] was attempted by "./syz-executor exec"[13243]
[  828.235107][T11774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  828.668150][T13249] loop4: detected capacity change from 0 to 2048
[  828.781788][T13249]  loop4: p1 < > p3
[  828.801017][T13249] loop4: p3 size 134217728 extends beyond EOD, truncated
[  830.268572][T13245] loop8: detected capacity change from 0 to 32768
[  830.396346][T13245] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  830.547050][T13260] loop7: detected capacity change from 0 to 2048
[  830.560092][T13245] XFS (loop8): Ending clean mount
[  830.611794][T13260]  loop7: p1 < > p3
[  830.630551][T13260] loop7: p3 size 134217728 extends beyond EOD, truncated
[  830.673197][T13270] loop9: detected capacity change from 0 to 2048
[  830.700043][T13268] input: syz1 as /devices/virtual/input/input29
[  830.857033][T13270]  loop9: p1 < > p3
[  830.900584][T13270] loop9: p3 size 134217728 extends beyond EOD, truncated
[  831.551275][T13275] ptrace attach of "./syz-executor exec"[9810] was attempted by "./syz-executor exec"[13275]
[  832.342293][ T9810] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  832.453387][T13268] netlink: 'syz.4.1965': attribute type 4 has an invalid length.
[  832.461277][T13268] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1965'.
[  832.660185][T13278] input: syz1 as /devices/virtual/input/input30
[  832.788183][T13278] netlink: 'syz.7.1967': attribute type 4 has an invalid length.
[  832.799894][T13278] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.1967'.
[  833.714271][T13290] input: syz1 as /devices/virtual/input/input31
[  833.927210][T13290] netlink: 'syz.4.1970': attribute type 4 has an invalid length.
[  833.935076][T13290] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1970'.
[  834.104760][T13295] netlink: 'syz.8.1966': attribute type 4 has an invalid length.
[  834.113933][T13295] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.1966'.
[  835.998113][T13307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  836.036673][T13307] syzkaller0: entered promiscuous mode
[  836.045643][T13307] syzkaller0: entered allmulticast mode
[  836.232836][T13307] tipc: Resetting bearer <eth:syzkaller0>
[  836.253210][T13311] netlink: set zone limit has 8 unknown bytes
[  836.256155][T13313] fuse: Bad value for 'group_id'
[  836.293864][T13306] tipc: Resetting bearer <eth:syzkaller0>
[  836.326892][T13306] tipc: Disabling bearer <eth:syzkaller0>
[  836.588458][T13316] syzkaller0: entered promiscuous mode
[  836.602348][T13316] syzkaller0: entered allmulticast mode
[  836.965516][T13321] loop8: detected capacity change from 0 to 2048
[  837.006382][T13324] loop4: detected capacity change from 0 to 2048
[  837.027588][T13321]  loop8: p1 < > p3
[  837.036888][T13321] loop8: p3 size 134217728 extends beyond EOD, truncated
[  837.051148][T13324]  loop4: p1 < > p3
[  837.073257][T13324] loop4: p3 size 134217728 extends beyond EOD, truncated
[  837.482763][T13327] netlink: set zone limit has 8 unknown bytes
[  838.326551][T13333] loop9: detected capacity change from 0 to 2048
[  838.391117][T13333]  loop9: p1 < > p3
[  838.410546][T13333] loop9: p3 size 134217728 extends beyond EOD, truncated
[  838.462492][ T5158]  loop9: p1 < > p3
[  838.495647][ T5158] loop9: p3 size 134217728 extends beyond EOD, truncated
[  838.574783][T13339] loop8: detected capacity change from 0 to 2048
[  838.957277][T13339]  loop8: p1 < > p3
[  839.004358][T13345] loop4: detected capacity change from 0 to 2048
[  839.012617][T13339] loop8: p3 size 134217728 extends beyond EOD, truncated
[  839.188788][T13345]  loop4: p1 < > p3
[  839.298477][T13345] loop4: p3 size 134217728 extends beyond EOD, truncated
[  840.339322][T13354] tipc: Started in network mode
[  840.366386][T13354] tipc: Node identity e696d7f472b2, cluster identity 4711
[  840.404752][T13354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  840.445982][T13357] syzkaller0: entered promiscuous mode
[  840.486041][T13357] syzkaller0: entered allmulticast mode
[  840.591029][ T8997] udevd[8997]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  840.603837][T13356] netlink: set zone limit has 8 unknown bytes
[  840.626424][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  840.682137][T13358] tipc: Resetting bearer <eth:syzkaller0>
[  840.812540][T13353] tipc: Resetting bearer <eth:syzkaller0>
[  840.933838][T13353] tipc: Disabling bearer <eth:syzkaller0>
[  841.534757][T13367] netlink: set zone limit has 8 unknown bytes
[  841.715209][T13371] input: syz1 as /devices/virtual/input/input33
[  841.919439][T13372] netlink: 'syz.4.1993': attribute type 4 has an invalid length.
[  841.927561][T13372] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1993'.
[  842.242351][T13376] loop7: detected capacity change from 0 to 2048
[  842.319132][T13376]  loop7: p1 < > p3
[  842.380825][T13376] loop7: p3 size 134217728 extends beyond EOD, truncated
[  844.433549][T13391] loop8: detected capacity change from 0 to 2048
[  844.824814][T13391]  loop8: p1 < > p3
[  844.878374][T13402] input: syz1 as /devices/virtual/input/input34
[  844.955053][T13391] loop8: p3 size 134217728 extends beyond EOD, truncated
[  845.543769][T13402] netlink: 'syz.4.2002': attribute type 4 has an invalid length.
[  845.551712][T13402] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2002'.
[  846.209902][T13417] loop8: detected capacity change from 0 to 2048
[  846.288049][T13417]  loop8: p1 < > p3
[  846.301521][T13417] loop8: p3 size 134217728 extends beyond EOD, truncated
[  846.592978][T13420] loop4: detected capacity change from 0 to 2048
[  846.667435][T13420]  loop4: p1 < > p3
[  846.695430][T13420] loop4: p3 size 134217728 extends beyond EOD, truncated
[  848.819201][T13434] loop4: detected capacity change from 0 to 2048
[  848.866433][T13434]  loop4: p1 < > p3
[  848.882349][T13434] loop4: p3 size 134217728 extends beyond EOD, truncated
[  848.971969][T13438] input: syz1 as /devices/virtual/input/input35
[  849.705688][T13450] loop8: detected capacity change from 0 to 2048
[  849.760700][T13450]  loop8: p1 < > p3
[  849.813507][T13450] loop8: p3 size 134217728 extends beyond EOD, truncated
[  849.817013][T13438] netlink: 'syz.7.2011': attribute type 4 has an invalid length.
[  849.831865][T13438] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.2011'.
[  850.731989][T13455] input: syz1 as /devices/virtual/input/input36
[  851.154403][T13455] netlink: 'syz.9.2014': attribute type 4 has an invalid length.
[  851.162480][T13455] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.2014'.
[  851.582302][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2017'.
[  851.608210][T13462] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2017'.
[  851.621064][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2017'.
[  852.289037][T13462] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2017'.
[  852.835589][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2021'.
[  855.460731][T13492] netlink: 'syz.4.2024': attribute type 4 has an invalid length.
[  855.508169][T13492] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2024'.
[  856.090664][T13497] can: request_module (can-proto-4) failed.
[  856.709945][T10797] Bluetooth: hci2: command 0x0406 tx timeout
[  856.727027][T13504] loop7: detected capacity change from 0 to 2048
[  856.849862][T13504]  loop7: p1 < > p3
[  856.870047][T13504] loop7: p3 size 134217728 extends beyond EOD, truncated
[  858.515642][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2028'.
[  858.556754][T13513] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2028'.
[  858.608048][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2028'.
[  858.644203][T13513] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2028'.
[  858.997958][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2033'.
[  859.178919][ T5869] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  859.459590][ T5869] usb 9-1: Using ep0 maxpacket: 8
[  859.527217][ T5869] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  859.615635][ T5869] usb 9-1: config 0 has no interfaces?
[  859.696076][ T5869] usb 9-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86
[  859.789520][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  859.858067][ T5869] usb 9-1: Manufacturer: syz
[  859.878675][ T5869] usb 9-1: SerialNumber: syz
[  859.902801][ T5869] usb 9-1: config 0 descriptor??
[  860.358611][T13535] loop7: detected capacity change from 0 to 2048
[  860.490923][T13535]  loop7: p1 < > p3
[  860.540039][T13535] loop7: p3 size 134217728 extends beyond EOD, truncated
[  860.554126][ T5833] usb 9-1: USB disconnect, device number 13
[  861.203368][T13538] netlink: set zone limit has 8 unknown bytes
[  862.307659][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'.
[  862.308809][T13545] netlink: set zone limit has 8 unknown bytes
[  862.329332][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'.
[  862.343976][T13547] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  862.352896][T13547] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  862.362426][T13547] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  862.371326][T13547] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  862.382080][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'.
[  862.392923][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'.
[  862.505344][T13551] loop7: detected capacity change from 0 to 2048
[  862.568120][T13551]  loop7: p1 < > p3
[  862.583131][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'.
[  862.663620][T13551] loop7: p3 size 134217728 extends beyond EOD, truncated
[  865.406138][T13560] netlink: set zone limit has 8 unknown bytes
[  865.730813][T13569] netlink: set zone limit has 8 unknown bytes
[  867.454378][T13582] netlink: set zone limit has 8 unknown bytes
[  868.354665][T13585] loop7: detected capacity change from 0 to 2048
[  868.811158][T13585]  loop7: p1 < > p3
[  868.827354][T13585] loop7: p3 size 134217728 extends beyond EOD, truncated
[  868.884136][ T5158]  loop7: p1 < > p3
[  868.896056][ T5158] loop7: p3 size 134217728 extends beyond EOD, truncated
[  869.045977][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2054'.
[  869.995752][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  870.002101][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  870.250657][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  870.323919][T13603] loop7: detected capacity change from 0 to 2048
[  870.552926][ T8997] udevd[8997]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  870.574050][T13603]  loop7: p1 < > p3
[  871.012129][T13603] loop7: p3 size 134217728 extends beyond EOD, truncated
[  871.032017][T13611] input: syz1 as /devices/virtual/input/input38
[  871.087482][ T5158]  loop7: p1 < > p3
[  871.101915][ T5158] loop7: p3 size 134217728 extends beyond EOD, truncated
[  871.346574][T13611] netlink: 'syz.8.2056': attribute type 4 has an invalid length.
[  871.381969][T13611] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.2056'.
[  871.570117][T13617] input: syz1 as /devices/virtual/input/input39
[  871.633305][ T8997] udevd[8997]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  871.665796][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  871.849273][T13617] netlink: 'syz.4.2060': attribute type 4 has an invalid length.
[  871.857464][T13617] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2060'.
[  871.877805][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  871.899950][ T8997] udevd[8997]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  872.499226][T13623] netlink: set zone limit has 8 unknown bytes
[  872.668575][T13627] input: syz1 as /devices/virtual/input/input40
[  873.027601][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2064'.
[  874.319051][T13627] netlink: 'syz.7.2063': attribute type 4 has an invalid length.
[  874.327285][T13627] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.2063'.
[  874.362507][T13636] input: syz1 as /devices/virtual/input/input41
[  874.581085][T13636] netlink: 'syz.4.2065': attribute type 4 has an invalid length.
[  874.589009][T13636] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2065'.
[  874.626917][T13640] loop9: detected capacity change from 0 to 2048
[  874.701677][T13640]  loop9: p1 < > p3
[  874.706945][T13640] loop9: p3 size 134217728 extends beyond EOD, truncated
[  878.161255][T13664] netlink: set zone limit has 8 unknown bytes
[  879.162118][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2075'.
[  879.228397][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2075'.
[  879.323985][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2077'.
[  880.955942][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2075'.
[  881.025287][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2075'.
[  881.083678][T13681] input: syz1 as /devices/virtual/input/input42
[  881.361414][T13682] netlink: 'syz.4.2078': attribute type 4 has an invalid length.
[  881.369351][T13682] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2078'.
[  882.066875][ T5991] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  882.288991][ T5991] usb 10-1: Using ep0 maxpacket: 8
[  882.348153][ T5991] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  882.406998][ T5991] usb 10-1: config 0 has no interfaces?
[  882.434720][ T5991] usb 10-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86
[  882.476037][ T5991] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  882.510391][ T5991] usb 10-1: Manufacturer: syz
[  882.526634][ T5991] usb 10-1: SerialNumber: syz
[  882.554043][ T5991] usb 10-1: config 0 descriptor??
[  882.899217][ T5991] usb 10-1: USB disconnect, device number 18
[  883.915983][T13702] input: syz1 as /devices/virtual/input/input43
[  884.347313][T13702] netlink: 'syz.9.2083': attribute type 4 has an invalid length.
[  884.355154][T13702] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.2083'.
[  885.028716][T13707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  885.059178][T13707] syzkaller0: entered promiscuous mode
[  885.072162][T13707] syzkaller0: entered allmulticast mode
[  885.217634][T13707] tipc: Resetting bearer <eth:syzkaller0>
[  885.318858][T13706] tipc: Resetting bearer <eth:syzkaller0>
[  885.466141][T13706] tipc: Disabling bearer <eth:syzkaller0>
[  886.429383][ T5991] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  887.100022][T13721] input: syz1 as /devices/virtual/input/input44
[  887.198616][T13723] input: syz1 as /devices/virtual/input/input45
[  887.314883][ T5991] usb 8-1: Using ep0 maxpacket: 8
[  887.339147][T13722] netlink: 'syz.4.2090': attribute type 4 has an invalid length.
[  887.347292][T13722] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2090'.
[  887.392518][ T5991] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  887.416669][ T5991] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  887.449930][ T5991] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  887.544389][ T5991] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  887.612224][ T5991] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  887.640522][ T5991] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  887.658114][ T5991] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.719347][T13728] can: request_module (can-proto-4) failed.
[  887.845096][T13723] netlink: 'syz.8.2089': attribute type 4 has an invalid length.
[  887.852920][T13723] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.2089'.
[  887.937807][ T5991] usb 8-1: GET_CAPABILITIES returned 0
[  887.944286][ T5991] usbtmc 8-1:16.0: can't read capabilities
[  888.415403][ T5833] usb 8-1: USB disconnect, device number 19
[  888.420689][T13712] usbtmc 8-1:16.0: usb_control_msg returned -71
[  888.710116][T13736] tipc: Started in network mode
[  888.744148][T13736] tipc: Node identity 4e0d2443bc2e, cluster identity 4711
[  888.772423][T13736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  888.864129][T13736] tipc: Resetting bearer <eth:syzkaller0>
[  888.929237][T13735] tipc: Disabling bearer <eth:syzkaller0>
[  889.588479][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'.
[  889.605903][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'.
[  889.682657][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'.
[  889.707061][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'.
[  890.708998][    C0] ------------[ cut here ]------------
[  890.715003][    C0] WARNING: CPU: 0 PID: 13746 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600
[  890.725127][    C0] Modules linked in:
[  890.729021][    C0] CPU: 0 PID: 13746 Comm: syz.8.2096 Not tainted 6.6.102-syzkaller #0
[  890.737033][ T1088] ------------[ cut here ]------------
[  890.737211][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  890.742957][ T1088] WARNING: CPU: 1 PID: 1088 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  890.753016][    C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  890.753061][    C0] Code: 24 4c 89 e7 e8 fe 37 d5 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 89 12 98 f7 0f 0b e9 f6 f7 ff ff e8 7d 12 98 f7 <0f> 0b e9 48 fb ff ff e8 71 12 98 f7 48 c7 c7 c0 00 24 8e 4c 89 e6
[  890.764135][ T1088] Modules linked in:
[  890.770317][    C0] RSP: 0000:ffffc90004d67958 EFLAGS: 00010246
[  890.790147][ T1088] 
[  890.794002][    C0] 
[  890.794009][    C0] RAX: ffffffff89ed78a3 RBX: ffffffff89ed66a6 RCX: ffff88801873da00
[  890.794025][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  890.794038][    C0] RBP: 0000000000000000 R08: ffff88801873da00 R09: 0000000000000003
[  890.794049][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880250523c0
[  890.794061][    C0] R13: dffffc0000000000 R14: ffff8880250528b0 R15: ffff88805fbf1824
[  890.794075][    C0] FS:  00005555665fc500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  890.794093][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  890.800130][ T1088] CPU: 1 PID: 1088 Comm: kworker/u4:7 Not tainted 6.6.102-syzkaller #0
[  890.802467][    C0] CR2: 00007fd0793b3f98 CR3: 0000000069594000 CR4: 00000000003506f0
[  890.804775][ T1088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  890.812756][    C0] Call Trace:
[  890.812767][    C0]  <TASK>
[  890.812780][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  890.812822][    C0]  ieee80211_beacon_get_tim+0xb8/0x560
[  890.812849][    C0]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  890.812882][    C0]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  890.812911][    C0]  __iterate_interfaces+0x243/0x500
[  890.812932][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  890.812957][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  890.812982][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  890.813005][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  890.813035][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[  890.813058][    C0]  __hrtimer_run_queues+0x51e/0xc40
[  890.813088][    C0]  ? hw_scan_work+0xf40/0xf40
[  890.813118][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  890.813140][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  890.813174][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  890.813201][    C0]  handle_softirqs+0x280/0x820
[  890.813227][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  890.813254][    C0]  ? do_softirq+0x180/0x180
[  890.813285][    C0]  __irq_exit_rcu+0xc7/0x190
[  890.813305][    C0]  ? irq_exit_rcu+0x20/0x20
[  890.813334][    C0]  irq_exit_rcu+0x9/0x20
[  890.813353][    C0]  sysvec_apic_timer_interrupt+0x56/0xc0
[  890.813382][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  890.813413][    C0] RIP: 0033:0x7f280fe6ebfe
[  890.813433][    C0] Code: 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca 80 3d bd 91 34 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 <89> c5 c1 ed 04 31 c5 69 ed 2d eb d4 27 89 e8 c1 e8 0f 31 c5 81 e5
[  890.813451][    C0] RSP: 002b:00007ffdf88ad180 EFLAGS: 00000206
[  890.813471][    C0] RAX: 0000000000002b8f RBX: 00007f2810ce5720 RCX: 0000000000006268
[  890.813486][    C0] RDX: ffffffff817ac507 RSI: ffffffff817ac335 RDI: 0000000000000007
[  890.813502][    C0] RBP: ffffffff817ac507 R08: 00007f28101b6038 R09: 00007f28101a2000
[  890.813554][    C0] R10: 00007f280f9ff008 R11: 0000000000000007 R12: 0000000000000007
[  890.813567][    C0] R13: 0000000000000000 R14: ffffffff817ac507 R15: 0000000000006268
[  890.813584][    C0]  ? trace_ipi_send_cpu+0x37/0x1c0
[  890.813609][    C0]  ? trace_ipi_send_cpu+0x37/0x1c0
[  890.813634][    C0]  ? trace_ipi_send_cpu+0x37/0x1c0
[  890.813655][    C0]  ? trace_raw_output_csd_queue_cpu+0x85/0x140
[  890.813684][    C0]  </TASK>
[  890.813695][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  890.813706][    C0] CPU: 0 PID: 13746 Comm: syz.8.2096 Not tainted 6.6.102-syzkaller #0
[  890.813726][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  890.813738][    C0] Call Trace:
[  890.813746][    C0]  <TASK>
[  890.813753][    C0]  dump_stack_lvl+0x16c/0x230
[  890.813777][    C0]  ? show_regs_print_info+0x20/0x20
[  890.813798][    C0]  ? load_image+0x3b0/0x3b0
[  890.813833][    C0]  panic+0x2c0/0x710
[  890.813861][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  890.813893][    C0]  ? trace_ipi_send_cpu+0x37/0x1c0
[  890.813920][    C0]  __warn+0x2e0/0x470
[  890.813943][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  890.813972][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  890.813999][    C0]  report_bug+0x2be/0x4f0
[  890.814021][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  890.814048][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  890.814074][    C0]  ? __ieee80211_beacon_get+0x1235/0x1600
[  890.814102][    C0]  handle_bug+0xcf/0x120
[  890.814121][    C0]  exc_invalid_op+0x1a/0x50
[  890.814140][    C0]  asm_exc_invalid_op+0x1a/0x20
[  890.814165][    C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  890.814193][    C0] Code: 24 4c 89 e7 e8 fe 37 d5 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 89 12 98 f7 0f 0b e9 f6 f7 ff ff e8 7d 12 98 f7 <0f> 0b e9 48 fb ff ff e8 71 12 98 f7 48 c7 c7 c0 00 24 8e 4c 89 e6
[  890.814209][    C0] RSP: 0000:ffffc90004d67958 EFLAGS: 00010246
[  890.814225][    C0] RAX: ffffffff89ed78a3 RBX: ffffffff89ed66a6 RCX: ffff88801873da00
[  890.814239][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  890.814251][    C0] RBP: 0000000000000000 R08: ffff88801873da00 R09: 0000000000000003
[  890.814262][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880250523c0
[  890.814275][    C0] R13: dffffc0000000000 R14: ffff8880250528b0 R15: ffff88805fbf1824
[  890.814293][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  890.814321][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  890.814352][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  890.814380][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  890.814416][    C0]  ieee80211_beacon_get_tim+0xb8/0x560
[  890.814446][    C0]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  890.814500][    C0]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  890.814534][    C0]  __iterate_interfaces+0x243/0x500
[  890.814555][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  890.814577][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  890.814602][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  890.814624][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  890.814651][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[  890.814673][    C0]  __hrtimer_run_queues+0x51e/0xc40
[  890.814699][    C0]  ? hw_scan_work+0xf40/0xf40
[  890.814728][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  890.814747][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  890.814777][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  890.814802][    C0]  handle_softirqs+0x280/0x820
[  890.814823][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  890.814847][    C0]  ? do_softirq+0x180/0x180
[  890.814874][    C0]  __irq_exit_rcu+0xc7/0x190
[  890.814892][    C0]  ? irq_exit_rcu+0x20/0x20
[  890.814918][    C0]  irq_exit_rcu+0x9/0x20
[  890.814934][    C0]  sysvec_apic_timer_interrupt+0x56/0xc0
[  890.814959][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  890.814986][    C0] RIP: 0033:0x7f280fe6ebfe
[  890.815001][    C0] Code: 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca 80 3d bd 91 34 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 <89> c5 c1 ed 04 31 c5 69 ed 2d eb d4 27 89 e8 c1 e8 0f 31 c5 81 e5
[  890.815016][    C0] RSP: 002b:00007ffdf88ad180 EFLAGS: 00000206
[  890.815032][    C0] RAX: 0000000000002b8f RBX: 00007f2810ce5720 RCX: 0000000000006268
[  890.815045][    C0] RDX: ffffffff817ac507 RSI: ffffffff817ac335 RDI: 0000000000000007
[  890.815058][    C0] RBP: ffffffff817ac507 R08: 00007f28101b6038 R09: 00007f28101a2000
[  890.815071][    C0] R10: 00007f280f9ff008 R11: 0000000000000007 R12: 0000000000000007
[  890.815083][    C0] R13: 0000000000000000 R14: ffffffff817ac507 R15: 0000000000006268
[  890.815097][    C0]  ? trace_ipi_send_cpu+0x37/0x1c0
[  890.815117][    C0]  ? trace_ipi_send_cpu+0x37/0x1c0
[  890.815141][    C0]  ? trace_ipi_send_cpu+0x37/0x1c0
[  890.815159][    C0]  ? trace_raw_output_csd_queue_cpu+0x85/0x140
[  890.815184][    C0]  </TASK>
[  890.822026][    C0] Kernel Offset: disabled